RHSA-2007:0337: Moderate: postgresql security update

Published May 3, 2007

Updated

PostgreSQL is an advanced Object-Relational database management system(DBMS).A flaw was found in the way PostgreSQL allows authenticated users toexecute security-definer functions. It was possible for an unprivilegeduser to execute arbitrary code with the privileges of the security-definerfunction. (CVE-2007-2138)Users of PostgreSQL should upgrade to these updated packages containingPostgreSQL version 8.1.9 which corrects this issue.

Affected Software

1 affected component

PostgreSQL postgresql

Remediation

Event History

May 3, 2007

Advisory Published

12:00 AM

Data Sourced

12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2007:0337?

The severity of RHSA-2007:0337 is classified as moderate.

How do I fix RHSA-2007:0337?

To fix RHSA-2007:0337, you should apply the recommended patch or update provided by your software vendor.

Who is affected by RHSA-2007:0337?

RHSA-2007:0337 affects users of PostgreSQL who have security-definer functions configured.

What kind of vulnerability is described in RHSA-2007:0337?

RHSA-2007:0337 describes a vulnerability that allows unprivileged users to execute arbitrary code through security-definer functions.

When was RHSA-2007:0337 released?

RHSA-2007:0337 was released in 2007.