RHSA-2009:1485: Moderate: postgresql security update
PostgreSQL is an advanced object-relational database management system(DBMS).It was discovered that the upstream patch for CVE-2007-6600 included in theRed Hat Security Advisory RHSA-2008:0039 did not include protection againstmisuse of the RESET ROLE and RESET SESSION AUTHORIZATION commands. Anauthenticated user could use this flaw to install malicious code that wouldlater execute with superuser privileges. (CVE-2009-3230)All PostgreSQL users should upgrade to these updated packages, whichcontain a backported patch to correct this issue. If you are running aPostgreSQL server, the postgresql service must be restarted for this updateto take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:1485?
The severity level of RHSA-2009:1485 is classified as moderate.
How do I fix RHSA-2009:1485?
To fix RHSA-2009:1485, you should apply the appropriate security updates as indicated by Red Hat.
What does RHSA-2009:1485 affect?
RHSA-2009:1485 affects PostgreSQL, an advanced object-relational database management system.
What vulnerability does RHSA-2009:1485 address?
RHSA-2009:1485 addresses a flaw related to the misuse of the RESET ROLE and RESET SESSION commands.
Is RHSA-2009:1485 related to CVE-2007-6600?
Yes, RHSA-2009:1485 is related to CVE-2007-6600 as it includes an upstream patch for that vulnerability.