Red Hat Security Advisory: postgresql92-postgresql security update

Fixed packages 12

Vulnerabilities 8

• Unscored —
  CVE-2014-0060

  PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not…

  postgresql-9.3 postgresql-9.1 Ubuntu
  Mar 28, 2014
• Unscored —
  CVE-2014-0061

  The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x befo…

  postgresql-9.3 postgresql-9.1 postgresql-plsh Debian Ubuntu
  Mar 28, 2014
• Unscored —
  CVE-2014-0062

  Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x befo…

  postgresql-9.3 postgresql-9.1 Ubuntu
  Mar 28, 2014
• Unscored —
  CVE-2014-0063

  Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x befo…

  postgresql-9.3 postgresql-9.1 Ubuntu
  Mar 28, 2014
• Unscored —
  CVE-2014-0064

  Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0…

  postgresql-9.3 postgresql-9.1 Ubuntu
  Mar 28, 2014
• Unscored —
  CVE-2014-0065

  Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, an…

  postgresql-9.3 postgresql-9.1 Ubuntu
  Mar 28, 2014
• Unscored —
  CVE-2014-0066

  The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.…

  postgresql-9.3 postgresql-9.1 Ubuntu
  Mar 28, 2014
• Unscored —
  CVE-2014-2669

  Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x …

  postgresql-9.1 Ubuntu
  Mar 28, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://www.postgresql.org/docs/9.2/static/release-9-2-7.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1065219
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1065220
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1065222
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1065226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1065230
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1065235
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1065236
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0221.json
• report
  https://access.redhat.com/security/cve/CVE-2014-0060
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0060
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0060
• report
  https://access.redhat.com/security/cve/CVE-2014-0061
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0061
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0061
• report
  https://access.redhat.com/security/cve/CVE-2014-0062
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0062
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0062
• report
  https://access.redhat.com/security/cve/CVE-2014-0063
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0063
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0063
• report
  https://access.redhat.com/security/cve/CVE-2014-0064
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0064
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0064
• report
  https://access.redhat.com/security/cve/CVE-2014-0065
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0065
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0065
• report
  https://access.redhat.com/security/cve/CVE-2014-0066
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0066
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0066
• report
  https://access.redhat.com/security/cve/CVE-2014-2669
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1082154
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-2669
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-2669