Red Hat Security AdvisoryRHSA-2012:1263
postgresql and postgresql84 security update
Released 2012-09-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) postgresql84-8.4.13-1.el5_8, postgresql84-devel-8.4.13-1.el5_8, postgresql84-devel-8.4.13-1.el5_8.i386 +10
- Red Hat Enterprise Linux (v. 5 server) postgresql84-8.4.13-1.el5_8, postgresql84-8.4.13-1.el5_8.i386, postgresql84-8.4.13-1.el5_8.ia64 +45
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql84-8.4.13-1.el5_8, postgresql84-8.4.13-1.el5_8.i386, postgresql84-contrib-8.4.13-1.el5_8 +9
- Red Hat Enterprise Linux Desktop (v. 6) postgresql-8.4.13-1.el6_3, postgresql-libs-8.4.13-1.el6_3
- Red Hat Enterprise Linux Desktop Optional (v. 6) postgresql-8.4.13-1.el6_3, postgresql-contrib-8.4.13-1.el6_3, postgresql-devel-8.4.13-1.el6_3 +6
- Red Hat Enterprise Linux HPC Node (v. 6) postgresql-8.4.13-1.el6_3, postgresql-libs-8.4.13-1.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) postgresql-8.4.13-1.el6_3, postgresql-contrib-8.4.13-1.el6_3, postgresql-devel-8.4.13-1.el6_3 +6
- Red Hat Enterprise Linux Server (v. 6) postgresql-8.4.13-1.el6_3, postgresql-8.4.13-1.el6_3.ppc, postgresql-contrib-8.4.13-1.el6_3 +10
- Red Hat Enterprise Linux Workstation (v. 6) postgresql-8.4.13-1.el6_3, postgresql-contrib-8.4.13-1.el6_3, postgresql-devel-8.4.13-1.el6_3 +7
Fixes 2 records
Priority LOW 34
The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the exi…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03057 · Published 2012-10-03 · Fixed CWE-611
Priority LOW 28
The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users…
CVSS 2.0MEDIUM 4.9· Network · Low privileges · Interaction — · EPSS 0.03297 · Published 2012-10-03 · Fixed CWE-264
