Oval Definition:	oval:com.redhat.rhsa:def:20110197
Revision Date: 2011-02-03 Version: 641 Title: RHSA-2011:0197: postgresql security update (Moderate) Description: PostgreSQL is an advanced object-relational database management system (DBMS). A stack-based buffer overflow flaw was found in the way PostgreSQL processed certain tokens from an SQL query when the intarray module was enabled on a particular database. An authenticated database user running a specially-crafted SQL query could use this flaw to cause a temporary denial of service (postgres daemon crash) or, potentially, execute arbitrary code with the privileges of the database server. (CVE-2010-4015) Red Hat would like to thank Geoff Keating of the Apple Product Security team for reporting this issue. For Red Hat Enterprise Linux 4, the updated postgresql packages contain a backported patch for this issue; there are no other changes. For Red Hat Enterprise Linux 5, the updated postgresql packages upgrade PostgreSQL to version 8.1.23, and contain a backported patch for this issue. Refer to the PostgreSQL Release Notes for a full list of changes: http://www.postgresql.org/docs/8.1/static/release.html For Red Hat Enterprise Linux 6, the updated postgresql packages upgrade PostgreSQL to version 8.4.7, which includes a fix for this issue. Refer to the PostgreSQL Release Notes for a full list of changes: http://www.postgresql.org/docs/8.4/static/release.html All PostgreSQL users are advised to upgrade to these updated packages, which correct this issue. If the postgresql service is running, it will be automatically restarted after installing this update. Family: unix Class: patch Status: Reference(s): CVE-2010-4015 CVE-2010-4015 RHSA-2011:0197 RHSA-2011:0197-01 RHSA-2011:0197-01 Platform(s): Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 4 is installed AND postgresql is earlier than 0:7.4.30-1.el4_8.2 AND postgresql is signed with Red Hat redhatrelease2 key postgresql-contrib is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-contrib is signed with Red Hat redhatrelease2 key postgresql-devel is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-devel is signed with Red Hat redhatrelease2 key postgresql-docs is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-docs is signed with Red Hat redhatrelease2 key postgresql-jdbc is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-jdbc is signed with Red Hat redhatrelease2 key postgresql-libs is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-libs is signed with Red Hat redhatrelease2 key postgresql-pl is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-pl is signed with Red Hat redhatrelease2 key postgresql-python is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-python is signed with Red Hat redhatrelease2 key postgresql-server is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-server is signed with Red Hat redhatrelease2 key postgresql-tcl is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-tcl is signed with Red Hat redhatrelease2 key postgresql-test is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-test is signed with Red Hat redhatrelease2 key OR Package Information Red Hat Enterprise Linux 6 is installed AND postgresql is earlier than 0:8.4.7-1.el6_0.1 AND postgresql is signed with Red Hat redhatrelease2 key postgresql-contrib is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-contrib is signed with Red Hat redhatrelease2 key postgresql-devel is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-devel is signed with Red Hat redhatrelease2 key postgresql-docs is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-docs is signed with Red Hat redhatrelease2 key postgresql-libs is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-libs is signed with Red Hat redhatrelease2 key postgresql-plperl is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-plperl is signed with Red Hat redhatrelease2 key postgresql-plpython is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-plpython is signed with Red Hat redhatrelease2 key postgresql-pltcl is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-pltcl is signed with Red Hat redhatrelease2 key postgresql-server is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-server is signed with Red Hat redhatrelease2 key postgresql-test is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-test is signed with Red Hat redhatrelease2 key OR Package Information Red Hat Enterprise Linux 5 is installed AND postgresql is earlier than 0:8.1.23-1.el5_6.1 AND postgresql is signed with Red Hat redhatrelease2 key postgresql-contrib is earlier than 0:8.1.23-1.el5_6.1 AND postgresql-contrib is signed with Red Hat redhatrelease2 key postgresql-devel is earlier than 0:8.1.23-1.el5_6.1 AND postgresql-devel is signed with Red Hat redhatrelease2 key postgresql-docs is earlier than 0:8.1.23-1.el5_6.1 AND postgresql-docs is signed with Red Hat redhatrelease2 key postgresql-libs is earlier than 0:8.1.23-1.el5_6.1 AND postgresql-libs is signed with Red Hat redhatrelease2 key postgresql-pl is earlier than 0:8.1.23-1.el5_6.1 AND postgresql-pl is signed with Red Hat redhatrelease2 key postgresql-python is earlier than 0:8.1.23-1.el5_6.1 AND postgresql-python is signed with Red Hat redhatrelease2 key postgresql-server is earlier than 0:8.1.23-1.el5_6.1 AND postgresql-server is signed with Red Hat redhatrelease2 key postgresql-tcl is earlier than 0:8.1.23-1.el5_6.1 AND postgresql-tcl is signed with Red Hat redhatrelease2 key postgresql-test is earlier than 0:8.1.23-1.el5_6.1 AND postgresql-test is signed with Red Hat redhatrelease2 key Definition Synopsis Release Information Red Hat Enterprise Linux 6 Client is installed OR Red Hat Enterprise Linux 6 Server is installed OR Red Hat Enterprise Linux 6 Workstation is installed OR Red Hat Enterprise Linux 6 ComputeNode is installed AND postgresql is earlier than 0:8.4.7-1.el6_0.1 AND postgresql is signed with Red Hat redhatrelease2 key postgresql-server is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-server is signed with Red Hat redhatrelease2 key postgresql-libs is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-libs is signed with Red Hat redhatrelease2 key postgresql-devel is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-devel is signed with Red Hat redhatrelease2 key postgresql-pltcl is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-pltcl is signed with Red Hat redhatrelease2 key postgresql-plpython is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-plpython is signed with Red Hat redhatrelease2 key postgresql-docs is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-docs is signed with Red Hat redhatrelease2 key postgresql-plperl is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-plperl is signed with Red Hat redhatrelease2 key postgresql-test is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-test is signed with Red Hat redhatrelease2 key postgresql-contrib is earlier than 0:8.4.7-1.el6_0.1 AND postgresql-contrib is signed with Red Hat redhatrelease2 key OR Package Information Red Hat Enterprise Linux 4 is installed AND postgresql is earlier than 0:7.4.30-1.el4_8.2 AND postgresql is signed with Red Hat master key postgresql-tcl is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-tcl is signed with Red Hat master key postgresql-server is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-server is signed with Red Hat master key postgresql-libs is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-libs is signed with Red Hat master key postgresql-devel is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-devel is signed with Red Hat master key postgresql-pl is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-pl is signed with Red Hat master key postgresql-docs is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-docs is signed with Red Hat master key postgresql-jdbc is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-jdbc is signed with Red Hat master key postgresql-test is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-test is signed with Red Hat master key postgresql-python is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-python is signed with Red Hat master key postgresql-contrib is earlier than 0:7.4.30-1.el4_8.2 AND postgresql-contrib is signed with Red Hat master key
BACK