Red Hat Security AdvisoryRHSA-2016:2606
postgresql security and bug fix update
Released 2016-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) postgresql-9.2.18-1.el7, postgresql-libs-9.2.18-1.el7
- Red Hat Enterprise Linux Client Optional (v. 7) postgresql-9.2.18-1.el7, postgresql-contrib-9.2.18-1.el7, postgresql-devel-9.2.18-1.el7 +7
- Red Hat Enterprise Linux ComputeNode (v. 7) postgresql-9.2.18-1.el7, postgresql-libs-9.2.18-1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) postgresql-9.2.18-1.el7, postgresql-contrib-9.2.18-1.el7, postgresql-devel-9.2.18-1.el7 +7
- Red Hat Enterprise Linux Server (v. 7) postgresql-9.2.18-1.el7, postgresql-9.2.18-1.el7.ppc, postgresql-contrib-9.2.18-1.el7 +10
- Red Hat Enterprise Linux Server Optional (v. 7) postgresql-upgrade-9.2.18-1.el7
- Red Hat Enterprise Linux Workstation (v. 7) postgresql-9.2.18-1.el7, postgresql-contrib-9.2.18-1.el7, postgresql-devel-9.2.18-1.el7 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) postgresql-upgrade-9.2.18-1.el7
Fixes 2 records
Priority MEDIUM 45
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), ob…
CVSS 3.0HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.05962 · Published 2016-12-09 · Partial fix CWE-476
Priority LOW 39
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via…
CVSS 3.0HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.04612 · Published 2016-12-09 · Partial fix CWE-94
