Medium ELSA-2015-0750 4 CVEs

Moderate: postgresql security update (Oracle Linux 7)

Published Mar 30, 2015 · Updated Mar 30, 2015

Ecosystem: Oracle Linux

Summary

[8.4.20-2]
- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
(rhbz#1198651 & rhbz#1198652)

Fixed packages 11

Release	Package	Fixed in
Oracle Linux · 7	postgresql	0:9.2.10-2.el7_1
Oracle Linux · 7	postgresql-contrib	0:9.2.10-2.el7_1
Oracle Linux · 7	postgresql-devel	0:9.2.10-2.el7_1
Oracle Linux · 7	postgresql-docs	0:9.2.10-2.el7_1
Oracle Linux · 7	postgresql-libs	0:9.2.10-2.el7_1
Oracle Linux · 7	postgresql-plperl	0:9.2.10-2.el7_1
Oracle Linux · 7	postgresql-plpython	0:9.2.10-2.el7_1
Oracle Linux · 7	postgresql-pltcl	0:9.2.10-2.el7_1
Oracle Linux · 7	postgresql-server	0:9.2.10-2.el7_1
Oracle Linux · 7	postgresql-test	0:9.2.10-2.el7_1
Oracle Linux · 7	postgresql-upgrade	0:9.2.10-2.el7_1

Vulnerabilities 4

Unscored —

CVE-2014-8161

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows r…

PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql-9.1 Ubuntu

Jan 27, 2020
Unscored —

CVE-2015-0241

The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4…

PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql-9.1 Ubuntu

Jan 27, 2020
Unscored —

CVE-2015-0243

Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.…

PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql-9.1 Ubuntu

Jan 27, 2020
Unscored —

CVE-2015-0244

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not…

PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql-9.1 Ubuntu

Jan 27, 2020