LWN.net Logo

Fedora alert FEDORA-2009-9473 (postgresql)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 11 Update: postgresql-8.3.8-1.fc11
Date:  Fri, 11 Sep 2009 23:21:13 +0000
Message-ID:  <20090911232113.8EFE610F87A@bastion2.fedora.phx.redhat.com>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-9473 2009-09-11 22:39:13 -------------------------------------------------------------------------------- Name : postgresql Product : Fedora 11 Version : 8.3.8 Release : 1.fc11 URL : http://www.postgresql.org/ Summary : PostgreSQL client programs and libraries Description : PostgreSQL is an advanced Object-Relational database management system (DBMS) that supports almost all SQL constructs (including transactions, subselects and user-defined types and functions). The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DBMS server. These PostgreSQL client programs are programs that directly manipulate the internal structure of PostgreSQL databases on a PostgreSQL server. These client programs can be located on the same machine with the PostgreSQL server, or may be on a remote machine which accesses a PostgreSQL server over a network connection. This package contains the docs in HTML for the whole package, as well as command-line utilities for managing PostgreSQL databases on a PostgreSQL server. If you want to manipulate a PostgreSQL database on a remote PostgreSQL server, you need this package. You also need to install this package if you're installing the postgresql-server package. -------------------------------------------------------------------------------- Update Information: Update to PostgreSQL 8.3.8, for various fixes described at http://www.postgresql.org/docs/8.3/static/release-8-3-8.html including three security issues -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 9 2009 Tom Lane <tgl@redhat.com> 8.3.8-1 - Update to PostgreSQL 8.3.8, for various fixes described at http://www.postgresql.org/docs/8.3/static/release-8-3-8.html including three security issues Related: #522084 Related: #522085 Related: #522092 * Thu Aug 20 2009 Tom "spot" Callaway <tcallawa@redhat.com> 8.3.7-1.1 - fix license tag -------------------------------------------------------------------------------- References: [ 1 ] Bug #522084 - postgresql: LDAP authentication bypass when anonymous LDAP bind are allowed https://bugzilla.redhat.com/show_bug.cgi?id=522084 [ 2 ] Bug #522085 - postgresql: SQL privilege escalation, incomplete fix for CVE-2007-6600 https://bugzilla.redhat.com/show_bug.cgi?id=522085 [ 3 ] Bug #522092 - postgresql: authenticated user server DoS via plugin re-LOAD-ing https://bugzilla.redhat.com/show_bug.cgi?id=522092 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update postgresql' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds