(RHSA-2007:0337) Moderate: postgresql security update

2007-05-0300:00:00

access.redhat.com

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

64.2%

JSON

PostgreSQL is an advanced Object-Relational database management system
(DBMS).

A flaw was found in the way PostgreSQL allows authenticated users to
execute security-definer functions. It was possible for an unprivileged
user to execute arbitrary code with the privileges of the security-definer
function. (CVE-2007-2138)

Users of PostgreSQL should upgrade to these updated packages containing
PostgreSQL version 8.1.9 which corrects this issue.

OSVersionArchitecturePackageVersionFilename
RedHat4i386postgresql-libs< 8.1.9-1.el4s1.1postgresql-libs-8.1.9-1.el4s1.1.i386.rpm
RedHat4i386postgresql< 8.1.9-1.el4s1.1postgresql-8.1.9-1.el4s1.1.i386.rpm
RedHat4i386postgresql-pl< 8.1.9-1.el4s1.1postgresql-pl-8.1.9-1.el4s1.1.i386.rpm
RedHat4x86_64postgresql-devel< 8.1.9-1.el4s1.1postgresql-devel-8.1.9-1.el4s1.1.x86_64.rpm
RedHat4i386postgresql-test< 8.1.9-1.el4s1.1postgresql-test-8.1.9-1.el4s1.1.i386.rpm
RedHat4x86_64postgresql-tcl< 8.1.9-1.el4s1.1postgresql-tcl-8.1.9-1.el4s1.1.x86_64.rpm
RedHat4x86_64postgresql< 8.1.9-1.el4s1.1postgresql-8.1.9-1.el4s1.1.x86_64.rpm
RedHat4i386postgresql-tcl< 8.1.9-1.el4s1.1postgresql-tcl-8.1.9-1.el4s1.1.i386.rpm
RedHat4x86_64postgresql-pl< 8.1.9-1.el4s1.1postgresql-pl-8.1.9-1.el4s1.1.x86_64.rpm
RedHat4i386postgresql-devel< 8.1.9-1.el4s1.1postgresql-devel-8.1.9-1.el4s1.1.i386.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	4	i386	postgresql-libs	< 8.1.9-1.el4s1.1	postgresql-libs-8.1.9-1.el4s1.1.i386.rpm
RedHat	4	i386	postgresql	< 8.1.9-1.el4s1.1	postgresql-8.1.9-1.el4s1.1.i386.rpm
RedHat	4	i386	postgresql-pl	< 8.1.9-1.el4s1.1	postgresql-pl-8.1.9-1.el4s1.1.i386.rpm
RedHat	4	x86_64	postgresql-devel	< 8.1.9-1.el4s1.1	postgresql-devel-8.1.9-1.el4s1.1.x86_64.rpm
RedHat	4	i386	postgresql-test	< 8.1.9-1.el4s1.1	postgresql-test-8.1.9-1.el4s1.1.i386.rpm
RedHat	4	x86_64	postgresql-tcl	< 8.1.9-1.el4s1.1	postgresql-tcl-8.1.9-1.el4s1.1.x86_64.rpm
RedHat	4	x86_64	postgresql	< 8.1.9-1.el4s1.1	postgresql-8.1.9-1.el4s1.1.x86_64.rpm
RedHat	4	i386	postgresql-tcl	< 8.1.9-1.el4s1.1	postgresql-tcl-8.1.9-1.el4s1.1.i386.rpm
RedHat	4	x86_64	postgresql-pl	< 8.1.9-1.el4s1.1	postgresql-pl-8.1.9-1.el4s1.1.x86_64.rpm
RedHat	4	i386	postgresql-devel	< 8.1.9-1.el4s1.1	postgresql-devel-8.1.9-1.el4s1.1.i386.rpm