ELSA-2016-0347

Опубликовано: 02 мар. 2016

Источник: oracle-oval

Платформа: Oracle Linux 6

Описание

ELSA-2016-0347: postgresql security update (IMPORTANT)

[8.4.20-5]

fix for CVE-2016-0773 (rhbz#1308598)
fix tests for new libxml2 (rhbz#1303972)

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

postgresql

8.4.20-5.el6_7

postgresql-contrib

8.4.20-5.el6_7

postgresql-devel

8.4.20-5.el6_7

postgresql-docs

8.4.20-5.el6_7

postgresql-libs

8.4.20-5.el6_7

postgresql-plperl

8.4.20-5.el6_7

postgresql-plpython

8.4.20-5.el6_7

postgresql-pltcl

8.4.20-5.el6_7

postgresql-server

8.4.20-5.el6_7

postgresql-test

8.4.20-5.el6_7

Oracle Linux i686

postgresql

8.4.20-5.el6_7

postgresql-contrib

8.4.20-5.el6_7

postgresql-devel

8.4.20-5.el6_7

postgresql-docs

8.4.20-5.el6_7

postgresql-libs

8.4.20-5.el6_7

postgresql-plperl

8.4.20-5.el6_7

postgresql-plpython

8.4.20-5.el6_7

postgresql-pltcl

8.4.20-5.el6_7

postgresql-server

8.4.20-5.el6_7

postgresql-test

8.4.20-5.el6_7

Oracle Linux sparc64

postgresql

8.4.20-5.el6_7

postgresql-contrib

8.4.20-5.el6_7

postgresql-devel

8.4.20-5.el6_7

postgresql-docs

8.4.20-5.el6_7

postgresql-libs

8.4.20-5.el6_7

postgresql-plperl

8.4.20-5.el6_7

postgresql-plpython

8.4.20-5.el6_7

postgresql-pltcl

8.4.20-5.el6_7

postgresql-server

8.4.20-5.el6_7

postgresql-test

8.4.20-5.el6_7

Связанные CVE

CVE-2016-0773

Ссылки на источники

Связанные уязвимости

CVE-2016-0773

CVSS3: 7.5

ubuntu

больше 9 лет назад

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression.