Red Hat Security AdvisoryRHSA-2015:1194
postgresql security update
Released 2015-06-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) postgresql-9.2.13-1.el7_1, postgresql-contrib-9.2.13-1.el7_1, postgresql-devel-9.2.13-1.el7_1 +8
- Red Hat Enterprise Linux ComputeNode (v. 7) postgresql-9.2.13-1.el7_1, postgresql-libs-9.2.13-1.el7_1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) postgresql-9.2.13-1.el7_1, postgresql-contrib-9.2.13-1.el7_1, postgresql-devel-9.2.13-1.el7_1 +7
- Red Hat Enterprise Linux Desktop (v. 6) postgresql-8.4.20-3.el6_6, postgresql-libs-8.4.20-3.el6_6
- Red Hat Enterprise Linux Desktop Optional (v. 6) postgresql-8.4.20-3.el6_6, postgresql-contrib-8.4.20-3.el6_6, postgresql-devel-8.4.20-3.el6_6 +6
- Red Hat Enterprise Linux HPC Node (v. 6) postgresql-8.4.20-3.el6_6, postgresql-libs-8.4.20-3.el6_6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) postgresql-contrib-8.4.20-3.el6_6, postgresql-devel-8.4.20-3.el6_6, postgresql-docs-8.4.20-3.el6_6 +5
- Red Hat Enterprise Linux Server (v. 6) postgresql-8.4.20-3.el6_6, postgresql-8.4.20-3.el6_6.ppc, postgresql-contrib-8.4.20-3.el6_6 +10
- Red Hat Enterprise Linux Server (v. 7) postgresql-9.2.13-1.ael7b_1, postgresql-9.2.13-1.el7_1, postgresql-9.2.13-1.el7_1.ppc +20
- Red Hat Enterprise Linux Server Optional (v. 7) postgresql-upgrade-9.2.13-1.ael7b_1, postgresql-upgrade-9.2.13-1.el7_1
- Red Hat Enterprise Linux Workstation (v. 6) postgresql-8.4.20-3.el6_6, postgresql-contrib-8.4.20-3.el6_6, postgresql-devel-8.4.20-3.el6_6 +7
- Red Hat Enterprise Linux Workstation (v. 7) postgresql-9.2.13-1.el7_1, postgresql-contrib-9.2.13-1.el7_1, postgresql-devel-9.2.13-1.el7_1 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) postgresql-upgrade-9.2.13-1.el7_1
Fixes 3 records
Priority MEDIUM 50
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04611 · Published 2019-11-20 · Partial fix · 9.0.20, 9.1.16 +2 CWE-119
Priority MEDIUM 40
contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for a…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04126 · Published 2019-11-20 · Partial fix · 9.0.20, 9.1.16 +2 CWE-200
Priority LOW 31
Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL s…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.08436 · Published 2015-05-28 · Partial fix
THREATIST.IORead the docs