Skip to content
OpenAdvisories
Unscored RHSA-2010:0429 5 CVEs

Red Hat Security Advisory: postgresql security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client postgresql 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client postgresql-contrib 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client postgresql-debuginfo 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client postgresql-devel 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client postgresql-docs 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client postgresql-libs 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client postgresql-pl 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client postgresql-python 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client postgresql-server 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client postgresql-tcl 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client postgresql-test 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation postgresql 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation postgresql-debuginfo 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation postgresql-devel 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation postgresql-pl 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation postgresql-server 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation postgresql-test 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql-contrib 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql-debuginfo 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql-devel 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql-docs 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql-libs 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql-pl 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql-python 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql-server 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql-tcl 0:8.1.21-1.el5_5.1
Red Hat · RHEL 5 enterprise_linux:5::server postgresql-test 0:8.1.21-1.el5_5.1

Vulnerabilities 5

  • Unscored —
    CVE-2009-4136

    PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and …

  • Unscored —
    CVE-2010-0442 Public exploit EPSS 13%

    The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticate…

  • Unscored —
    CVE-2010-0733 Public exploit

    Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows …

  • Unscored —
    CVE-2010-1169

    PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.…

  • Unscored —
    CVE-2010-1170

    The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=546321
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=546621
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=559259
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=582615
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=583072
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0429.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-4136
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-4136
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-4136
  • report
    https://access.redhat.com/security/cve/CVE-2010-0442
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0442
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0442
  • report
    https://access.redhat.com/security/cve/CVE-2010-0733
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0733
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0733
  • report
    https://access.redhat.com/security/cve/CVE-2010-1169
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1169
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1169
  • report
    https://access.redhat.com/security/cve/CVE-2010-1170
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1170
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1170