Red Hat Security AdvisoryRHSA-2014:0211
postgresql84 and postgresql security update
Released 2014-02-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) postgresql84-8.4.20-1.el5_10, postgresql84-8.4.20-1.el5_10.i386, postgresql84-8.4.20-1.el5_10.ia64 +45
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql84-8.4.20-1.el5_10, postgresql84-8.4.20-1.el5_10.i386, postgresql84-contrib-8.4.20-1.el5_10 +9
- Red Hat Enterprise Linux Desktop (v. 6) postgresql-8.4.20-1.el6_5, postgresql-libs-8.4.20-1.el6_5
- Red Hat Enterprise Linux Desktop Optional (v. 6) postgresql-8.4.20-1.el6_5, postgresql-contrib-8.4.20-1.el6_5, postgresql-devel-8.4.20-1.el6_5 +6
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) postgresql84-8.4.20-1.el5_10, postgresql84-devel-8.4.20-1.el5_10, postgresql84-devel-8.4.20-1.el5_10.i386 +10
- Red Hat Enterprise Linux HPC Node (v. 6) postgresql-8.4.20-1.el6_5, postgresql-libs-8.4.20-1.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) postgresql-8.4.20-1.el6_5, postgresql-contrib-8.4.20-1.el6_5, postgresql-devel-8.4.20-1.el6_5 +6
- Red Hat Enterprise Linux Server (v. 6) postgresql-8.4.20-1.el6_5, postgresql-8.4.20-1.el6_5.ppc, postgresql-contrib-8.4.20-1.el6_5 +10
- Red Hat Enterprise Linux Workstation (v. 6) postgresql-8.4.20-1.el6_5, postgresql-contrib-8.4.20-1.el6_5, postgresql-devel-8.4.20-1.el6_5 +7
Fixes 7 records
Priority LOW 38
Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.06666 · Published 2014-03-28 · Partial fix CWE-119
Priority LOW 37
Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors,…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.05046 · Published 2014-03-28 · Partial fix CWE-119
Priority LOW 37
Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.05353 · Published 2014-03-28 · Partial fix CWE-189
Priority LOW 37
The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privil…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.0493 · Published 2014-03-28 · Partial fix CWE-264
Priority LOW 28
Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allows remote authenticate…
CVSS 2.0MEDIUM 4.9· Network · Low privileges · Interaction — · EPSS 0.03043 · Published 2014-03-28 · Partial fix CWE-362
Priority LOW 26
The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.04682 · Published 2014-03-28 · Partial fix CWE-20
Priority LOW 26
PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly enforce the ADMIN OPTION restriction, which allows remote authenticated members of a role t…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.04124 · Published 2014-03-28 · Partial fix CWE-264
THREATIST.IORead the docs