Skip to content
OpenAdvisories
Unscored CVE-2013-1900 EUVD-2013-1896GHSA-wx2r-82wc-89gq

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficient…

Published Apr 4, 2013 · Updated Aug 6, 2024 · Assigned by redhat

Description

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 7 postgresql-9.1 9.1.9-0wheezy1 DSA-2658-1
Debian 6.0 postgresql-8.4 8.4.17-0squeeze1 DSA-2657-1
ReleasePackageFixed inAdvisory
RHEL 6 postgresql +9 8.4.18-1.el6_4 RHSA-2013:1475
RHEL 5 postgresql84 +11 8.4.18-1.el5_10 RHSA-2013:1475
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat CloudForms 5 cfme +3 5.2.0.37-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 cfme-vnc-plugin 1.0.0-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 libdnet +2 1.12-11.el6cf RHEA-2013:1487
Red Hat CloudForms 5 lshw +1 B.02.16-4.el6cf RHEA-2013:1487
Red Hat CloudForms 5 netapp-manageability-sdk +1 4.0P1-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 open-vm-tools +2 9.2.3-5.el6cf RHEA-2013:1487
Red Hat CloudForms 5 postgresql92 +2 1-12.el6 RHEA-2013:1487
Red Hat CloudForms 5 postgresql92-postgresql +10 9.2.4-7.el6 RHEA-2013:1487
Red Hat CloudForms 5 prince 9.0r2-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 pyliblzma 0.5.3-7.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193 +2 1-11.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-libyaml +1 0.1.4-5.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-ruby +4 1.9.3.448-38.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-Platform 0.4.0-4.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-actionpack 1:3.2.13-4.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-actionwebservice 1:3.1.0-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-activemodel +2 1:3.2.13-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-acts_as_list 0.1.9-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-acts_as_tree 0.1.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-addressable 2.2.8-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-akami +1 1.2.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ancestry 1.2.5-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-arel 3.0.2-3.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-arrayfields 4.9.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-aws-sdk 1.11.3-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-bcrypt-ruby 3.0.1-7.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-bigdecimal 1.1.0-38.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-binary_struct +1 1.0.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-builder 3.0.0-3.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-bullet 4.6.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-bundler 1.3.5-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-bundler_ext 0.3.0-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-capybara 2.1.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-childprocess 0.3.9-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-chronic 0.3.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-churn 0.0.29-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-color 1.4.1-4.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-colored 1.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-crack +1 0.3.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-daemons 1.1.9-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-dalli +1 2.2.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-diff-lcs 1.1.3-1.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-elif 0.1.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-erubis 2.7.0-4.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-eventmachine +2 1.0.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-excon 0.25.3-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ezcrypto 0.7-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-facade +1 1.0.5-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-factory_girl 4.1.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-fastercsv 1.5.5-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ffi 1.3.1-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-flay 2.3.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-flog 3.2.3-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-fog 1.14.0-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-formatador 0.2.4-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-gyoku 0.4.6-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-haml 4.0.3-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-haml-rails 0.4-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-handsoap 0.2.5-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-highline 1.6.19-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-hike 1.2.1-3.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-hirb 0.7.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-hmac 0.4.0-7.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-hoe 2.12.3-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-httparty 0.10.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-httpclient 2.2.7-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-httpi +1 1.1.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-i18n +1 0.6.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-inifile 2.0.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-io-console 0.3-38.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-io-extra +1 1.2.6-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-japgolly-Saikuro 1.1.1.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-journey 1.0.4-2.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-json 1.8.0-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-json_pure 1.8.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-libxml-ruby 2.2.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-linux_admin 0.5.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-little-plugger 1.1.3-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-log4r +1 1.1.8-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-logging 1.6.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-mail +1 2.5.3-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-main 4.7.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-map 6.5.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-metric_fu 3.0.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-mime-types 1.20.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-minitest 3.2.0-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-multi_json 1.7.7-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-multi_xml 0.5.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-net-http-persistent 2.7-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-net-ldap 0.2.20110317223538-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-net-ping 1.5.3-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-net-scp 1.1.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-net-sftp 2.0.5-7.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-net-ssh 2.6.5-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-netrc 0.7.7-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-nokogiri 1.5.6-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-nori 1.1.4-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-open4 1.3.0-4.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-parallel 0.5.21-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-pg 0.12.2-5.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-polyglot 0.3.3-2.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-progressbar 0.11.0-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-prototype-rails 3.2.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-qpid_messaging 0.20.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rack 1:1.4.5-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rack-cache 1.2-2.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rack-ssl 1.3.2-7.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rack-test 0.6.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rails 1:3.2.13-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rails_best_practices 1.13.8-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-railties +2 1:3.2.13-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rake 10.1.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rake-compiler 0.8.3-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rbovirt 0.0.17-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rbvmomi 1.2.3-4.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rdoc 3.9.5-38.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-reek 1.3.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ref 1.0.0-3.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rest-client 1.6.7-5.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-roodi 2.2.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rspec 2.12.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rspec-core 2.12.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rspec-mocks +2 2.12.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ruby-graphviz 1.0.9-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ruby-plsql 0.4.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ruby-prof 0.13.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ruby-progressbar 0.0.10-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ruby2ruby 2.0.6-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ruby_parser 3.1.3-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rubyforge 2.0.4-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rubyrep 1.2.0-4.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rubywbem 0.1.0-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rubyzip 0.9.5-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-rufus-scheduler 2.0.19-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ruport 1.7.0-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-sass 3.1.20-3.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-savon +1 1.1.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-selenium-webdriver 2.32.1-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-sexp_processor 4.2.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-shindo 0.3.4-7.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-simple-rss 1.2.3-8.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-simplecov 0.7.1-6.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-simplecov-html 0.7.1-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-simplecov-rcov 0.2.3-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-simplecov-rcov-text 0.0.2-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-slim 1.3.9-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-snmp 1.1.0-6.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-soap4r 1.6.0-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-sprockets 2.4.5-2.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-sqlite3 1.3.6-2.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-state_machine 1.1.2-8.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-syntax 1.0.0-8.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-temple 0.6.5-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-terminal-table 1.4.5-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-test-spec 0.10.0-7.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-test-unit 2.4.5-5.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-therubyracer 0.11.0-0.6.beta5.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-thin 1.3.1-5.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-thor 0.18.1-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-tilt 1.3.3-10.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-timecop 0.5.3-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-transaction-simple 1.4.0-5.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-treetop 1.4.10-6.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-trollop 1.16.2-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-tzinfo 0.3.33-2.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-uuidtools 2.1.3-3.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-vcr 2.4.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-wasabi 2.5.1-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-webmock 1.11.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-websocket +1 1.0.7-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-xml-simple 1.0.12-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-xpath +1 2.0.0-1.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygem-ziya 2.3.0-2.el6cf RHEA-2013:1487
Red Hat CloudForms 5 ruby193-rubygems +1 1.8.23-38.el6 RHEA-2013:1487
Red Hat CloudForms 5 ruby193-v8 +1 1:3.14.5.10-1.1.el6 RHEA-2013:1487
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed postgresql93 9.3.15-1.1 openSUSE-SU-2024:10256-1
openSUSE Tumbleweed postgresql94 9.4.10-1.1 openSUSE-SU-2024:10030-1
openSUSE Tumbleweed postgresql95 9.5.4-1.2 openSUSE-SU-2024:10273-1

Advisories 8

References