User: Password:
Subscribe / Log in / New account

postgresql-pgpool: multiple vulnerabilities

Package(s):postgresql-pgpool CVE #(s):CVE-2009-1669 CVE-2008-4811 CVE-2008-4810 CVE-2008-1066
Created:May 14, 2012 Updated:May 16, 2012
Description: From the Red Hat bugzilla:

Silvio Cesare reported that pgpoolAdmin includes an embedded copy of the Smarty PHP template engine that is vulnerable to a number of security-related issues. The version of Smarty bundled in pgpoolAdmin 2.2 is 2.6.13, while the current version of Smarty is 2.6.25. This would make the embedded version of Smarty,and thus pgpoolAdmin, vulnerable to a number of issues.

Fedora FEDORA-2012-7124 postgresql-pgpoolAdmin 2012-05-13

(Log in to post comments)

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds