Red Hat Security AdvisoryRHSA-2015:2077
rh-postgresql94-postgresql security update
Released 2015-11-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-postgresql94-postgresql-9.4.5-1.el6, rh-postgresql94-postgresql-contrib-9.4.5-1.el6, rh-postgresql94-postgresql-devel-9.4.5-1.el6 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql94-postgresql-9.4.5-1.el7, rh-postgresql94-postgresql-contrib-9.4.5-1.el7, rh-postgresql94-postgresql-devel-9.4.5-1.el7 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5) rh-postgresql94-postgresql-9.4.5-1.el6, rh-postgresql94-postgresql-contrib-9.4.5-1.el6, rh-postgresql94-postgresql-devel-9.4.5-1.el6 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) rh-postgresql94-postgresql-9.4.5-1.el6, rh-postgresql94-postgresql-contrib-9.4.5-1.el6, rh-postgresql94-postgresql-devel-9.4.5-1.el6 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-postgresql94-postgresql-9.4.5-1.el6, rh-postgresql94-postgresql-contrib-9.4.5-1.el6, rh-postgresql94-postgresql-devel-9.4.5-1.el6 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) rh-postgresql94-postgresql-9.4.5-1.el7, rh-postgresql94-postgresql-contrib-9.4.5-1.el7, rh-postgresql94-postgresql-devel-9.4.5-1.el7 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-postgresql94-postgresql-9.4.5-1.el6, rh-postgresql94-postgresql-contrib-9.4.5-1.el6, rh-postgresql94-postgresql-devel-9.4.5-1.el6 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql94-postgresql-9.4.5-1.el7, rh-postgresql94-postgresql-contrib-9.4.5-1.el7, rh-postgresql94-postgresql-devel-9.4.5-1.el7 +8
Fixes 2 records
Priority LOW 36
Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cause a denial of service (server crash) via unspecified vectors, which are not pro…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.05045 · Published 2015-10-26 · Partial fix CWE-119
Priority LOW 36
The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or re…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.04532 · Published 2015-10-26 · Partial fix CWE-200