postgresql -- multiple vulnerabilities

Multiple vulnerabilities had been reported in various
versions of PostgreSQL:

The EXECUTE restrictions can be bypassed by using the
AGGREGATE function, which is missing a permissions check.
A buffer overflow exists in gram.y which could allow an
attacker to execute arbitrary code by sending a large
number of arguments to a refcursor function, found in
gram.y
The intagg contributed module allows an attacker to crash
the server (Denial of Service) by constructing a malicious
crafted array.