Oval Definition:	oval:com.redhat.rhsa:def:20160347
Revision Date: 2016-03-02 Version: 635 Title: RHSA-2016:0347: postgresql security update (Important) Description: PostgreSQL is an advanced object-relational database management system (DBMS). An integer overflow flaw, leading to a heap-based buffer overflow, was found in the PostgreSQL handling code for regular expressions. A remote attacker could use a specially crafted regular expression to cause PostgreSQL to crash or possibly execute arbitrary code. (CVE-2016-0773) Red Hat would like to thank PostgreSQL upstream for reporting this issue. Upstream acknowledges Tom Lane and Greg Stark as the original reporters. All PostgreSQL users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. If the postgresql service is running, it will be automatically restarted after installing this update. Family: unix Class: patch Status: Reference(s): CVE-2016-0773 RHSA-2016:0347 RHSA-2016:0347-00 RHSA-2016:0347-01 Platform(s): Red Hat Enterprise Linux 6 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 6 is installed AND postgresql is earlier than 0:8.4.20-5.el6_7 AND postgresql is signed with Red Hat redhatrelease2 key postgresql-contrib is earlier than 0:8.4.20-5.el6_7 AND postgresql-contrib is signed with Red Hat redhatrelease2 key postgresql-devel is earlier than 0:8.4.20-5.el6_7 AND postgresql-devel is signed with Red Hat redhatrelease2 key postgresql-docs is earlier than 0:8.4.20-5.el6_7 AND postgresql-docs is signed with Red Hat redhatrelease2 key postgresql-libs is earlier than 0:8.4.20-5.el6_7 AND postgresql-libs is signed with Red Hat redhatrelease2 key postgresql-plperl is earlier than 0:8.4.20-5.el6_7 AND postgresql-plperl is signed with Red Hat redhatrelease2 key postgresql-plpython is earlier than 0:8.4.20-5.el6_7 AND postgresql-plpython is signed with Red Hat redhatrelease2 key postgresql-pltcl is earlier than 0:8.4.20-5.el6_7 AND postgresql-pltcl is signed with Red Hat redhatrelease2 key postgresql-server is earlier than 0:8.4.20-5.el6_7 AND postgresql-server is signed with Red Hat redhatrelease2 key postgresql-test is earlier than 0:8.4.20-5.el6_7 AND postgresql-test is signed with Red Hat redhatrelease2 key
BACK