Package(s):	postgresql	CVE #(s):	CVE-2007-2138
Created:	April 24, 2007	Updated:	June 18, 2007
Description:	PostgreSQL 8.2 and all back versions are vulnerable to a privilege escalation exploit in SECURITY DEFINER functions.
Alerts:	Debian DSA-1311-1 postgresql-7.4 2007-06-17 Debian DSA-1309-1 postgresql-8.1 2007-06-16 Fedora FEDORA-2007-0174 postgresql 2007-06-03 Fedora FEDORA-2007-565 postgresql 2007-06-06 Fedora FEDORA-2007-566 postgresql 2007-06-06 Gentoo 200705-12 postgresql 2007-05-10 Red Hat RHSA-2007:0336-01 postgresql 2007-05-08 Red Hat RHSA-2007:0337-01 postgresql 2007-05-03 Ubuntu USN-454-1 postgresql-8.1, postgresql-8.2 2007-04-26 Trustix TSLSA-2007-0015 postgresql 2007-04-27 Mandriva MDKSA-2007:094 postgresql 2007-04-25 rPath rPSA-2007-0081-1 postgresql 2007-04-24

---

to post comments