Oval Definition:oval:org.mitre.oval:def:21791
Revision Date:2014-02-24Version:11
Title:RHSA-2011:1377: postgresql security update (Moderate)
Description:crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CESA-2011:1377
CVE-2011-2483
RHSA-2011:1377-01
Platform(s):CentOS Linux 5
CentOS Linux 6
Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 6
Product(s):postgresql
Definition Synopsis
  • Operation system section
  • Redhat 5 or Centos 5 release
  • The operating system installed on the system is Red Hat Enterprise Linux 5
  • OR The operating system installed on the system is CentOS Linux 5.x
  • AND Packages section
  • postgresql is earlier than 0:8.1.23-1.el5_7.2
  • OR postgresql-tcl is earlier than 0:8.1.23-1.el5_7.2
  • OR postgresql-server is earlier than 0:8.1.23-1.el5_7.2
  • OR postgresql-devel is earlier than 0:8.1.23-1.el5_7.2
  • OR postgresql-libs is earlier than 0:8.1.23-1.el5_7.2
  • OR postgresql-pl is earlier than 0:8.1.23-1.el5_7.2
  • OR postgresql-docs is earlier than 0:8.1.23-1.el5_7.2
  • OR postgresql-test is earlier than 0:8.1.23-1.el5_7.2
  • OR postgresql-python is earlier than 0:8.1.23-1.el5_7.2
  • OR postgresql-contrib is earlier than 0:8.1.23-1.el5_7.2
  • Operation system section
  • The operating system installed on the system is Red Hat Enterprise Linux 6
  • AND Packages section
  • postgresql is earlier than 0:8.4.9-1.el6_1.1
  • OR postgresql-libs is earlier than 0:8.4.9-1.el6_1.1
  • OR postgresql-server is earlier than 0:8.4.9-1.el6_1.1
  • OR postgresql-devel is earlier than 0:8.4.9-1.el6_1.1
  • OR postgresql-pltcl is earlier than 0:8.4.9-1.el6_1.1
  • OR postgresql-plpython is earlier than 0:8.4.9-1.el6_1.1
  • OR postgresql-docs is earlier than 0:8.4.9-1.el6_1.1
  • OR postgresql-plperl is earlier than 0:8.4.9-1.el6_1.1
  • OR postgresql-test is earlier than 0:8.4.9-1.el6_1.1
  • OR postgresql-contrib is earlier than 0:8.4.9-1.el6_1.1
    • BACK