Oval Definition:	oval:org.mitre.oval:def:22939
Revision Date: 2014-05-26 Version: 36 Title: ELSA-2010:0429: postgresql security update (Moderate) Description: PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2009-4136 CVE-2010-0442 CVE-2010-0733 CVE-2010-1169 CVE-2010-1170 CVE-2010-1975 ELSA-2010:0429-01 Platform(s): Oracle Linux 5 Product(s): postgresql Definition Synopsis Oracle Linux 5.x AND rpm test postgresql-docs is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-devel is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-test is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-contrib is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-libs is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-tcl is earlier than 0:8.1.21-1.el5_5.1 OR postgresql is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-server is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-pl is earlier than 0:8.1.21-1.el5_5.1 OR postgresql-python is earlier than 0:8.1.21-1.el5_5.1
BACK