Red Hat Security AdvisoryRHSA-2013:1475
postgresql and postgresql84 security update
Released 2013-10-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) postgresql84-8.4.18-1.el5_10, postgresql84-8.4.18-1.el5_10.i386, postgresql84-8.4.18-1.el5_10.ia64 +45
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql84-8.4.18-1.el5_10, postgresql84-8.4.18-1.el5_10.i386, postgresql84-contrib-8.4.18-1.el5_10 +9
- Red Hat Enterprise Linux Desktop (v. 6) postgresql-8.4.18-1.el6_4, postgresql-libs-8.4.18-1.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) postgresql-8.4.18-1.el6_4, postgresql-contrib-8.4.18-1.el6_4, postgresql-devel-8.4.18-1.el6_4 +6
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) postgresql84-8.4.18-1.el5_10, postgresql84-devel-8.4.18-1.el5_10, postgresql84-devel-8.4.18-1.el5_10.i386 +10
- Red Hat Enterprise Linux HPC Node (v. 6) postgresql-8.4.18-1.el6_4, postgresql-libs-8.4.18-1.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) postgresql-8.4.18-1.el6_4, postgresql-contrib-8.4.18-1.el6_4, postgresql-devel-8.4.18-1.el6_4 +6
- Red Hat Enterprise Linux Server (v. 6) postgresql-8.4.18-1.el6_4, postgresql-8.4.18-1.el6_4.ppc, postgresql-contrib-8.4.18-1.el6_4 +10
- Red Hat Enterprise Linux Workstation (v. 6) postgresql-8.4.18-1.el6_4, postgresql-contrib-8.4.18-1.el6_4, postgresql-devel-8.4.18-1.el6_4 +7
Fixes 2 records
Priority MEDIUM 44
PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspec…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.04511 · Published 2013-04-04 · Partial fix CWE-189
Priority LOW 36
PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be inv…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.03592 · Published 2013-02-13 · Fixed CWE-20
