Red Hat Security AdvisoryRHSA-2018:2557
postgresql security update
Released 2018-08-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) postgresql-9.2.24-1.el7_5, postgresql-libs-9.2.24-1.el7_5
- Red Hat Enterprise Linux Client Optional (v. 7) postgresql-9.2.24-1.el7_5, postgresql-contrib-9.2.24-1.el7_5, postgresql-devel-9.2.24-1.el7_5 +8
- Red Hat Enterprise Linux ComputeNode (v. 7) postgresql-9.2.24-1.el7_5, postgresql-libs-9.2.24-1.el7_5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) postgresql-9.2.24-1.el7_5, postgresql-contrib-9.2.24-1.el7_5, postgresql-devel-9.2.24-1.el7_5 +8
- Red Hat Enterprise Linux Server (v. 7) postgresql-9.2.24-1.el7_5, postgresql-9.2.24-1.el7_5.ppc, postgresql-contrib-9.2.24-1.el7_5 +10
- Red Hat Enterprise Linux Server Optional (v. 7) postgresql-static-9.2.24-1.el7_5, postgresql-static-9.2.24-1.el7_5.ppc, postgresql-upgrade-9.2.24-1.el7_5
- Red Hat Enterprise Linux Workstation (v. 7) postgresql-9.2.24-1.el7_5, postgresql-contrib-9.2.24-1.el7_5, postgresql-devel-9.2.24-1.el7_5 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) postgresql-static-9.2.24-1.el7_5, postgresql-upgrade-9.2.24-1.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) postgresql-9.2.24-1.el7_5, postgresql-contrib-9.2.24-1.el7_5, postgresql-devel-9.2.24-1.el7_5 +7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) postgresql-static-9.2.24-1.el7_5, postgresql-upgrade-9.2.24-1.el7_5
Fixes 1 record
Priority MEDIUM 45
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections.
CVSS 3.0HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.05089 · Published 2018-08-09 · Partial fix CWE-200
