RHSA-2007:0336: Moderate: postgresql security update
PostgreSQL is an advanced Object-Relational database management system(DBMS).A flaw was found in the way PostgreSQL allows authenticated users toexecute security-definer functions. It was possible for an unprivilegeduser to execute arbitrary code with the privileges of the security-definerfunction. (CVE-2007-2138)Users of PostgreSQL should upgrade to these updated packages containingPostgreSQL version 8.1.9, 7.4.17, and 7.3.19 which corrects this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2007:0336?
The severity of RHSA-2007:0336 is classified as moderate.
How do I fix RHSA-2007:0336?
To fix RHSA-2007:0336, update PostgreSQL to version 8.1.9-1.el5 or later.
What are the affected versions in RHSA-2007:0336?
Affected versions in RHSA-2007:0336 include all PostgreSQL versions prior to 8.1.9-1.el5.
What vulnerabilities does RHSA-2007:0336 address?
RHSA-2007:0336 addresses a flaw that allows authenticated users to execute security-definer functions inappropriately.
Is database security impacted by RHSA-2007:0336?
Yes, RHSA-2007:0336 impacts database security by allowing unprivileged users to execute arbitrary code.