Description
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | postgresql +10 | 7.4.8-1.RHEL4.1 | RHSA-2005:433 |
| RHEL 3 | rh-postgresql +10 | 7.3.10-1 | RHSA-2005:433 |
Advisories 1
- RHSA-2005:433 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- oval:org.mitre.oval:def:676 vdb-entry signature
- RHSA-2005:433 vendor-advisory
- FLSA-2006:157366 vendor-advisory
- ADV-2005-0453 vdb-entry
- 13476 vdb-entry
- [pgsql-announce] 20050502 IMPORTANT: two new PostgreSQL security problems found mailing-list
- http://www.postgresql.org/about/news.315
- oval:org.mitre.oval:def:10050 vdb-entry signature
- SUSE-SA:2005:036 vendor-advisory