Red Hat Security Advisory

RHSA-2017:3405

rh-postgresql96-postgresql security update

Released 2017-12-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-postgresql96-postgresql-9.6.5-2.el6, rh-postgresql96-postgresql-contrib-9.6.5-2.el6, rh-postgresql96-postgresql-contrib-syspaths-9.6.5-2.el6 +11
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql96-postgresql-9.6.5-2.el7, rh-postgresql96-postgresql-contrib-9.6.5-2.el7, rh-postgresql96-postgresql-contrib-syspaths-9.6.5-2.el7 +11
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-postgresql96-postgresql-9.6.5-2.el6, rh-postgresql96-postgresql-contrib-9.6.5-2.el6, rh-postgresql96-postgresql-contrib-syspaths-9.6.5-2.el6 +11
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-postgresql96-postgresql-9.6.5-2.el7, rh-postgresql96-postgresql-contrib-9.6.5-2.el7, rh-postgresql96-postgresql-contrib-syspaths-9.6.5-2.el7 +11
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-postgresql96-postgresql-9.6.5-2.el7, rh-postgresql96-postgresql-contrib-9.6.5-2.el7, rh-postgresql96-postgresql-contrib-syspaths-9.6.5-2.el7 +11
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-postgresql96-postgresql-9.6.5-2.el6, rh-postgresql96-postgresql-contrib-9.6.5-2.el6, rh-postgresql96-postgresql-contrib-syspaths-9.6.5-2.el6 +11
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql96-postgresql-9.6.5-2.el7, rh-postgresql96-postgresql-contrib-9.6.5-2.el7, rh-postgresql96-postgresql-contrib-syspaths-9.6.5-2.el7 +11

Fixes 2 records

TI-2017-08962 CVE-2017-12172 · GHSA-r936-w9vp-c53q

Link following in Red Hat postgresql

LOW 32

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effecti…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00586 Published 2017-11-22 Partial fix CWE-59

TI-2017-11071 CVE-2017-15097 · GHSA-4fwh-62fj-p4ww

Link following in Red Hat postgresql init script

LOW 30

Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00541 Published 2018-07-27 Partial fix CWE-59