Red Hat Security AdvisoryRHSA-2017:3402
postgresql security update
Released 2017-12-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) postgresql-9.2.23-3.el7_4, postgresql-libs-9.2.23-3.el7_4
- Red Hat Enterprise Linux Client Optional (v. 7) postgresql-9.2.23-3.el7_4, postgresql-contrib-9.2.23-3.el7_4, postgresql-devel-9.2.23-3.el7_4 +8
- Red Hat Enterprise Linux ComputeNode (v. 7) postgresql-9.2.23-3.el7_4, postgresql-libs-9.2.23-3.el7_4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) postgresql-9.2.23-3.el7_4, postgresql-contrib-9.2.23-3.el7_4, postgresql-devel-9.2.23-3.el7_4 +8
- Red Hat Enterprise Linux Server (v. 7) postgresql-9.2.23-3.el7_4, postgresql-9.2.23-3.el7_4.ppc, postgresql-contrib-9.2.23-3.el7_4 +10
- Red Hat Enterprise Linux Server Optional (v. 7) postgresql-static-9.2.23-3.el7_4, postgresql-static-9.2.23-3.el7_4.ppc, postgresql-upgrade-9.2.23-3.el7_4
- Red Hat Enterprise Linux Workstation (v. 7) postgresql-9.2.23-3.el7_4, postgresql-contrib-9.2.23-3.el7_4, postgresql-devel-9.2.23-3.el7_4 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) postgresql-static-9.2.23-3.el7_4, postgresql-upgrade-9.2.23-3.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) postgresql-9.2.23-3.el7_4, postgresql-contrib-9.2.23-3.el7_4, postgresql-devel-9.2.23-3.el7_4 +7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) postgresql-static-9.2.23-3.el7_4, postgresql-upgrade-9.2.23-3.el7_4
Fixes 2 records
Priority LOW 32
PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effecti…
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00586 · Published 2017-11-22 · Partial fix CWE-59
Priority LOW 30
Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL.
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00541 · Published 2018-07-27 · Partial fix CWE-59
