- Vulnerability/
- RHSA-2009:1484
RHSA-2009:1484: Moderate: postgresql security update
First published: Wed Oct 07 2009(Updated: )
PostgreSQL is an advanced object-relational database management system<br>(DBMS).<br>It was discovered that the upstream patch for CVE-2007-6600 included in the<br>Red Hat Security Advisory RHSA-2008:0038 did not include protection against<br>misuse of the RESET ROLE and RESET SESSION AUTHORIZATION commands. An<br>authenticated user could use this flaw to install malicious code that would<br>later execute with superuser privileges. (CVE-2009-3230)<br>A flaw was found in the way PostgreSQL handled encoding conversion. A<br>remote, authenticated user could trigger an encoding conversion failure,<br>possibly leading to a temporary denial of service. Note: To exploit this<br>issue, a locale and client encoding for which specific messages fail to<br>translate must be selected (the availability of these is determined by an<br>administrator-defined locale setting). (CVE-2009-0922)<br>Note: For Red Hat Enterprise Linux 4, this update upgrades PostgreSQL to<br>version 7.4.26. For Red Hat Enterprise Linux 5, this update upgrades<br>PostgreSQL to version 8.1.18. Refer to the PostgreSQL Release Notes for a<br>list of changes:<br><a href="http://www.postgresql.org/docs/7.4/static/release.html" target="_blank">http://www.postgresql.org/docs/7.4/static/release.html</a> <a href="http://www.postgresql.org/docs/8.1/static/release.html" target="_blank">http://www.postgresql.org/docs/8.1/static/release.html</a> All PostgreSQL users should upgrade to these updated packages, which<br>resolve these issues. If the postgresql service is running, it will be<br>automatically restarted after installing this update.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/postgresql | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-contrib | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-devel | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-devel | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-docs | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-libs | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-libs | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-pl | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-python | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-server | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-tcl | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-test | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-contrib | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-docs | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-pl | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-python | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-server | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-tcl | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql-test | <8.1.18-2.el5_4.1 | 8.1.18-2.el5_4.1 |
| redhat/postgresql | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-contrib | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-devel | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-docs | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-jdbc | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-libs | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-libs | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-pl | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-python | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-server | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-tcl | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-test | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-contrib | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-devel | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-docs | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-jdbc | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-pl | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-python | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-server | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-tcl | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
| redhat/postgresql-test | <7.4.26-1.el4_8.1 | 7.4.26-1.el4_8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2009:1484
- agent/software-canonical-lookup
- package-manager/redhat