Red Hat Security AdvisoryRHSA-2012:1264
postgresql security update
Released 2012-09-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) postgresql-8.1.23-6.el5_8, postgresql-devel-8.1.23-6.el5_8, postgresql-devel-8.1.23-6.el5_8.i386 +6
- Red Hat Enterprise Linux (v. 5 server) postgresql-8.1.23-6.el5_8, postgresql-8.1.23-6.el5_8.i386, postgresql-8.1.23-6.el5_8.ia64 +37
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql-8.1.23-6.el5_8, postgresql-8.1.23-6.el5_8.i386, postgresql-contrib-8.1.23-6.el5_8 +9
Fixes 1 record
Priority LOW 28
The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users…
CVSS 2.0MEDIUM 4.9· Network · Low privileges · Interaction — · EPSS 0.03297 · Published 2012-10-03 · Fixed CWE-264
