Oval Definition:	oval:com.redhat.rhsa:def:20120677
Revision Date: 2012-05-21 Version: 634 Title: RHSA-2012:0677: postgresql security update (Moderate) Description: PostgreSQL is an advanced object-relational database management system (DBMS). The pg_dump utility inserted object names literally into comments in the SQL script it produces. An unprivileged database user could create an object whose name includes a newline followed by an SQL command. This SQL command might then be executed by a privileged user during later restore of the backup dump, allowing privilege escalation. (CVE-2012-0868) CREATE TRIGGER did not do a permissions check on the trigger function to be called. This could possibly allow an authenticated database user to call a privileged trigger function on data of their choosing. (CVE-2012-0866) All PostgreSQL users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. If the postgresql service is running, it will be automatically restarted after installing this update. Family: unix Class: patch Status: Reference(s): CVE-2012-0866 CVE-2012-0868 RHSA-2012:0677 RHSA-2012:0677-00 RHSA-2012:0677-01 RHSA-2012:0677-01 Platform(s): Red Hat Enterprise Linux 5 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 5 is installed AND postgresql is earlier than 0:8.1.23-4.el5_8 AND postgresql is signed with Red Hat redhatrelease2 key postgresql-contrib is earlier than 0:8.1.23-4.el5_8 AND postgresql-contrib is signed with Red Hat redhatrelease2 key postgresql-devel is earlier than 0:8.1.23-4.el5_8 AND postgresql-devel is signed with Red Hat redhatrelease2 key postgresql-docs is earlier than 0:8.1.23-4.el5_8 AND postgresql-docs is signed with Red Hat redhatrelease2 key postgresql-libs is earlier than 0:8.1.23-4.el5_8 AND postgresql-libs is signed with Red Hat redhatrelease2 key postgresql-pl is earlier than 0:8.1.23-4.el5_8 AND postgresql-pl is signed with Red Hat redhatrelease2 key postgresql-python is earlier than 0:8.1.23-4.el5_8 AND postgresql-python is signed with Red Hat redhatrelease2 key postgresql-server is earlier than 0:8.1.23-4.el5_8 AND postgresql-server is signed with Red Hat redhatrelease2 key postgresql-tcl is earlier than 0:8.1.23-4.el5_8 AND postgresql-tcl is signed with Red Hat redhatrelease2 key postgresql-test is earlier than 0:8.1.23-4.el5_8 AND postgresql-test is signed with Red Hat redhatrelease2 key
BACK