RHSA-2010:0427: Moderate: postgresql security update

PostgreSQL is an advanced object-relational database management system(DBMS). PL/Perl and PL/Tcl allow users to write PostgreSQL functions in thePerl and Tcl languages, and are installed in trusted mode by default. Intrusted mode, certain operations, such as operating system level access,are restricted.A flaw was found in the way PostgreSQL enforced permission checks onscripts written in PL/Perl. If the PL/Perl procedural language wasregistered on a particular database, an authenticated database user runninga specially-crafted PL/Perl script could use this flaw to bypass intendedPL/Perl trusted mode restrictions, allowing them to run arbitrary Perlscripts with the privileges of the database server. (CVE-2010-1169)Red Hat would like to thank Tim Bunce for responsibly reporting theCVE-2010-1169 flaw.A flaw was found in the way PostgreSQL enforced permission checks onscripts written in PL/Tcl. If the PL/Tcl procedural language was registeredon a particular database, an authenticated database user running aspecially-crafted PL/Tcl script could use this flaw to bypass intendedPL/Tcl trusted mode restrictions, allowing them to run arbitrary Tclscripts with the privileges of the database server. (CVE-2010-1170)A buffer overflow flaw was found in the way PostgreSQL retrieved asubstring from the bit string for BIT() and BIT VARYING() SQL data types.An authenticated database user running a specially-crafted SQL query coulduse this flaw to cause a temporary denial of service (postgres daemoncrash) or, potentially, execute arbitrary code with the privileges of thedatabase server. (CVE-2010-0442)An integer overflow flaw was found in the way PostgreSQL used to calculatethe size of the hash table for joined relations. An authenticated databaseuser could create a specially-crafted SQL query which could cause atemporary denial of service (postgres daemon crash) or, potentially,execute arbitrary code with the privileges of the database server.(CVE-2010-0733)PostgreSQL improperly protected session-local state during the execution ofan index function by a database superuser during the database maintenanceoperations. An authenticated database user could use this flaw to elevatetheir privileges via specially-crafted index functions. (CVE-2009-4136)All PostgreSQL users are advised to upgrade to these updated packages,which contain backported patches to correct these issues. RunningPostgreSQL instances must be restarted ("service rhdb restart") for thisupdate to take effect.