Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2015:2081
HistoryNov 18, 2015 - 7:45 p.m.

postgresql security update

2015-11-1819:45:04
CentOS Project
lists.centos.org
49

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.028 Low

EPSS

Percentile

90.6%

JSON

CentOS Errata and Security Advisory CESA-2015:2081

PostgreSQL is an advanced object-relational database management system
(DBMS).

A memory leak error was discovered in the crypt() function of the pgCrypto
extension. An authenticated attacker could possibly use this flaw to
disclose a limited amount of the server memory. (CVE-2015-5288)

All PostgreSQL users are advised to upgrade to these updated packages,
which contain a backported patch to correct this issue. If the postgresql
service is running, it will be automatically restarted after installing
this update.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2015-November/083666.html

Affected packages:
postgresql
postgresql-contrib
postgresql-devel
postgresql-docs
postgresql-libs
postgresql-plperl
postgresql-plpython
postgresql-pltcl
postgresql-server
postgresql-test

Upstream details at:
https://access.redhat.com/errata/RHSA-2015:2081

OSVersionArchitecturePackageVersionFilename
CentOS6i686postgresql< 8.4.20-4.el6_7postgresql-8.4.20-4.el6_7.i686.rpm
CentOS6i686postgresql-contrib< 8.4.20-4.el6_7postgresql-contrib-8.4.20-4.el6_7.i686.rpm
CentOS6i686postgresql-devel< 8.4.20-4.el6_7postgresql-devel-8.4.20-4.el6_7.i686.rpm
CentOS6i686postgresql-docs< 8.4.20-4.el6_7postgresql-docs-8.4.20-4.el6_7.i686.rpm
CentOS6i686postgresql-libs< 8.4.20-4.el6_7postgresql-libs-8.4.20-4.el6_7.i686.rpm
CentOS6i686postgresql-plperl< 8.4.20-4.el6_7postgresql-plperl-8.4.20-4.el6_7.i686.rpm
CentOS6i686postgresql-plpython< 8.4.20-4.el6_7postgresql-plpython-8.4.20-4.el6_7.i686.rpm
CentOS6i686postgresql-pltcl< 8.4.20-4.el6_7postgresql-pltcl-8.4.20-4.el6_7.i686.rpm
CentOS6i686postgresql-server< 8.4.20-4.el6_7postgresql-server-8.4.20-4.el6_7.i686.rpm
CentOS6i686postgresql-test< 8.4.20-4.el6_7postgresql-test-8.4.20-4.el6_7.i686.rpm
Rows per page:
1-10 of 231

Related

amazon 2
openvas 20
nessus 25
cve 1
ubuntucve 1
ibm 2
osv 3
debian 5
veracode 2
redhat 4
oraclelinux 2
postgresql 1
prion 1
fedora 2
freebsd 1
centos 1
securityvulns 2
kaspersky 1
mageia 1
ubuntu 1
suse 1
gentoo 1
amazon
amazon
Medium: postgresql8
2015-12-14 10:00:00
Medium: postgresql92, postgresql93, postgresql94
2015-11-05 02:14:00
openvas
openvas
Debian: Security Advisory (DLA-329-1)
2023-03-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:0389-1)
2021-06-09 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-619)
2015-12-15 00:00:00
nessus
nessus
Debian DLA-329-1 : postgresql-8.4 update
2015-10-20 00:00:00
CentOS 6 : postgresql (CESA-2015:2081)
2015-11-19 00:00:00
openSUSE Security Update : postgresql92 (openSUSE-2015-708)
2015-11-06 00:00:00
cve
cve
CVE-2015-5288
2015-10-26 14:59:00
ubuntucve
ubuntucve
CVE-2015-5288
2015-10-09 00:00:00
ibm
ibm
Security Bulletin: IBM Security Access Manager version 9 is affected by a vulnerability in postgreSQL (CVE-2015-5288)
2018-06-16 21:45:08
Security Bulletin: Using Components with Known Vulnerabilities affects IBM Security Guardium (multiple CVEs)
2018-06-16 21:41:32
osv
osv
postgresql-8.4 - security update
2015-10-19 00:00:00
postgresql-9.4 - security update
2015-10-19 00:00:00
postgresql-9.1 - security update
2016-02-13 00:00:00
debian
debian
[SECURITY] [DLA-329-1] postgresql-8.4 update
2015-10-19 09:58:40
[SECURITY] [DSA 3374-1] postgresql-9.4 security update
2015-10-19 15:40:39
[SECURITY] [DSA 3374-1] postgresql-9.4 security update
2015-10-19 15:40:39
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:08:25
Denial Of Service (DoS)
2019-05-02 05:43:43
redhat
redhat
(RHSA-2015:2081) Moderate: postgresql security update
2015-11-18 00:00:00
(RHSA-2015:2077) Moderate: rh-postgresql94-postgresql security update
2015-11-18 00:00:00
(RHSA-2015:2078) Moderate: postgresql security update
2015-11-18 15:11:05
oraclelinux
oraclelinux
postgresql security update
2015-11-18 00:00:00
postgresql security update
2015-11-18 00:00:00
postgresql
postgresql
Vulnerability in contrib module (CVE-2015-5288)
2015-10-26 14:59:00
prion
prion
Command injection
2015-10-26 14:59:00
fedora
fedora
[SECURITY] Fedora 22 Update: postgresql-9.4.5-1.fc22
2015-11-21 16:56:13
[SECURITY] Fedora 23 Update: postgresql-9.4.5-1.fc23
2015-10-11 16:06:44
freebsd
freebsd
PostgreSQL -- minor security problems.
2015-10-08 00:00:00
centos
centos
postgresql security update
2015-11-18 20:39:01
securityvulns
securityvulns
PostgreSQL security vulnerabilities
2015-10-19 00:00:00
[USN-2772-1] PostgreSQL vulnerabilities
2015-10-19 00:00:00
kaspersky
kaspersky
KLA10686 Multiple vulnerabilities in PostgreSQL
2015-10-08 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerabilities
2015-11-02 23:21:29
ubuntu
ubuntu
PostgreSQL vulnerabilities
2015-10-16 00:00:00
suse
suse
Security update for postgresql94 (important)
2016-03-07 18:12:35
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2017-01-12 00:00:00

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.028 Low

EPSS

Percentile

90.6%

JSON
Related for CESA-2015:2081
amazon2openvas20nessus25cve1ubuntucve1ibm2osv3debian5veracode2redhat4oraclelinux2postgresql1prion1fedora2freebsd1centos1securityvulns2kaspersky1mageia1ubuntu1suse1gentoo1