CVE-2006-0591

CVE-2006-0591 is substantiated in connected advisories for PostgreSQL: it describes an integer signedness bug in password salt generation, causing the salt length to be only half the intended size and slightly easing brute-force on hashed passwords. Remediation is to upgrade to PostgreSQL 7.4.13 ...