logo
DATABASE RESOURCES PRICING ABOUT US

Medium: postgresql92, postgresql93, postgresql94

Description

**Issue Overview:** Privilege escalation flaws were found in the initialization scripts of PostgreSQL. A remote attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.( CVE-2017-12172) Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL can crash the server or disclose a few bytes of server memory.(CVE-2017-15098) **Affected Packages:** postgresql92, postgresql93, postgresql94 **Issue Correction:** Run _yum update postgresql92_ to update your system. Run _yum update postgresql93_ to update your system. Run _yum update postgresql94_ to update your system. **New Packages:** i686:     postgresql92-plperl-9.2.24-1.65.amzn1.i686     postgresql92-debuginfo-9.2.24-1.65.amzn1.i686     postgresql92-server-compat-9.2.24-1.65.amzn1.i686     postgresql92-plpython27-9.2.24-1.65.amzn1.i686     postgresql92-devel-9.2.24-1.65.amzn1.i686     postgresql92-server-9.2.24-1.65.amzn1.i686     postgresql92-libs-9.2.24-1.65.amzn1.i686     postgresql92-contrib-9.2.24-1.65.amzn1.i686     postgresql92-9.2.24-1.65.amzn1.i686     postgresql92-test-9.2.24-1.65.amzn1.i686     postgresql92-pltcl-9.2.24-1.65.amzn1.i686     postgresql92-plpython26-9.2.24-1.65.amzn1.i686     postgresql92-docs-9.2.24-1.65.amzn1.i686     postgresql94-plpython27-9.4.15-1.73.amzn1.i686     postgresql94-debuginfo-9.4.15-1.73.amzn1.i686     postgresql94-docs-9.4.15-1.73.amzn1.i686     postgresql94-libs-9.4.15-1.73.amzn1.i686     postgresql94-devel-9.4.15-1.73.amzn1.i686     postgresql94-server-9.4.15-1.73.amzn1.i686     postgresql94-plperl-9.4.15-1.73.amzn1.i686     postgresql94-9.4.15-1.73.amzn1.i686     postgresql94-test-9.4.15-1.73.amzn1.i686     postgresql94-plpython26-9.4.15-1.73.amzn1.i686     postgresql94-contrib-9.4.15-1.73.amzn1.i686     postgresql93-pltcl-9.3.20-1.69.amzn1.i686     postgresql93-test-9.3.20-1.69.amzn1.i686     postgresql93-plpython26-9.3.20-1.69.amzn1.i686     postgresql93-libs-9.3.20-1.69.amzn1.i686     postgresql93-server-9.3.20-1.69.amzn1.i686     postgresql93-docs-9.3.20-1.69.amzn1.i686     postgresql93-contrib-9.3.20-1.69.amzn1.i686     postgresql93-devel-9.3.20-1.69.amzn1.i686     postgresql93-debuginfo-9.3.20-1.69.amzn1.i686     postgresql93-plpython27-9.3.20-1.69.amzn1.i686     postgresql93-9.3.20-1.69.amzn1.i686     postgresql93-plperl-9.3.20-1.69.amzn1.i686 src:     postgresql92-9.2.24-1.65.amzn1.src     postgresql94-9.4.15-1.73.amzn1.src     postgresql93-9.3.20-1.69.amzn1.src x86_64:     postgresql92-docs-9.2.24-1.65.amzn1.x86_64     postgresql92-plpython27-9.2.24-1.65.amzn1.x86_64     postgresql92-test-9.2.24-1.65.amzn1.x86_64     postgresql92-9.2.24-1.65.amzn1.x86_64     postgresql92-server-compat-9.2.24-1.65.amzn1.x86_64     postgresql92-pltcl-9.2.24-1.65.amzn1.x86_64     postgresql92-plperl-9.2.24-1.65.amzn1.x86_64     postgresql92-devel-9.2.24-1.65.amzn1.x86_64     postgresql92-server-9.2.24-1.65.amzn1.x86_64     postgresql92-libs-9.2.24-1.65.amzn1.x86_64     postgresql92-contrib-9.2.24-1.65.amzn1.x86_64     postgresql92-plpython26-9.2.24-1.65.amzn1.x86_64     postgresql92-debuginfo-9.2.24-1.65.amzn1.x86_64     postgresql94-contrib-9.4.15-1.73.amzn1.x86_64     postgresql94-plperl-9.4.15-1.73.amzn1.x86_64     postgresql94-devel-9.4.15-1.73.amzn1.x86_64     postgresql94-server-9.4.15-1.73.amzn1.x86_64     postgresql94-libs-9.4.15-1.73.amzn1.x86_64     postgresql94-plpython26-9.4.15-1.73.amzn1.x86_64     postgresql94-debuginfo-9.4.15-1.73.amzn1.x86_64     postgresql94-plpython27-9.4.15-1.73.amzn1.x86_64     postgresql94-test-9.4.15-1.73.amzn1.x86_64     postgresql94-9.4.15-1.73.amzn1.x86_64     postgresql94-docs-9.4.15-1.73.amzn1.x86_64     postgresql93-server-9.3.20-1.69.amzn1.x86_64     postgresql93-devel-9.3.20-1.69.amzn1.x86_64     postgresql93-test-9.3.20-1.69.amzn1.x86_64     postgresql93-plperl-9.3.20-1.69.amzn1.x86_64     postgresql93-plpython27-9.3.20-1.69.amzn1.x86_64     postgresql93-docs-9.3.20-1.69.amzn1.x86_64     postgresql93-9.3.20-1.69.amzn1.x86_64     postgresql93-pltcl-9.3.20-1.69.amzn1.x86_64     postgresql93-contrib-9.3.20-1.69.amzn1.x86_64     postgresql93-plpython26-9.3.20-1.69.amzn1.x86_64     postgresql93-libs-9.3.20-1.69.amzn1.x86_64     postgresql93-debuginfo-9.3.20-1.69.amzn1.x86_64


Affected Package


OS OS Version Package Name Package Version
Amazon Linux 1 postgresql92-plperl 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-debuginfo 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-server-compat 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-plpython27 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-devel 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-server 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-libs 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-contrib 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-test 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-pltcl 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-plpython26 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-docs 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql94-plpython27 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-debuginfo 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-docs 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-libs 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-devel 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-server 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-plperl 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-test 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-plpython26 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-contrib 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql93-pltcl 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-test 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-plpython26 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-libs 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-server 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-docs 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-contrib 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-devel 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-debuginfo 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-plpython27 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-plperl 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql92 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql94 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql93 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql92-docs 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-plpython27 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-test 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-server-compat 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-pltcl 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-plperl 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-devel 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-server 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-libs 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-contrib 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-plpython26 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql92-debuginfo 9.2.24-1.65.amzn1
Amazon Linux 1 postgresql94-contrib 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-plperl 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-devel 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-server 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-libs 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-plpython26 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-debuginfo 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-plpython27 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-test 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql94-docs 9.4.15-1.73.amzn1
Amazon Linux 1 postgresql93-server 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-devel 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-test 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-plperl 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-plpython27 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-docs 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-pltcl 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-contrib 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-plpython26 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-libs 9.3.20-1.69.amzn1
Amazon Linux 1 postgresql93-debuginfo 9.3.20-1.69.amzn1

Related