Scientific Linux alert SLSA-2016:0347-1 (postgresql)
| From: | Pat Riehecky <riehecky@fnal.gov> | |
| To: | <scientific-linux-errata@listserv.fnal.gov> | |
| Subject: | Security ERRATA Important: postgresql on SL6.x i386/x86_64 | |
| Date: | Wed, 2 Mar 2016 20:38:19 +0000 | |
| Message-ID: | <20160302203819.26847.39595@slpackages.fnal.gov> |
Synopsis: Important: postgresql security update Advisory ID: SLSA-2016:0347-1 Issue Date: 2016-03-02 CVE Numbers: CVE-2016-0773 -- An integer overflow flaw, leading to a heap-based buffer overflow, was found in the PostgreSQL handling code for regular expressions. A remote attacker could use a specially crafted regular expression to cause PostgreSQL to crash or possibly execute arbitrary code. (CVE-2016-0773) If the postgresql service is running, it will be automatically restarted after installing this update. -- SL6 x86_64 postgresql-debuginfo-8.4.20-5.el6_7.i686.rpm postgresql-debuginfo-8.4.20-5.el6_7.x86_64.rpm postgresql-libs-8.4.20-5.el6_7.i686.rpm postgresql-libs-8.4.20-5.el6_7.x86_64.rpm postgresql-8.4.20-5.el6_7.i686.rpm postgresql-8.4.20-5.el6_7.x86_64.rpm postgresql-contrib-8.4.20-5.el6_7.x86_64.rpm postgresql-devel-8.4.20-5.el6_7.i686.rpm postgresql-devel-8.4.20-5.el6_7.x86_64.rpm postgresql-docs-8.4.20-5.el6_7.x86_64.rpm postgresql-plperl-8.4.20-5.el6_7.x86_64.rpm postgresql-plpython-8.4.20-5.el6_7.x86_64.rpm postgresql-pltcl-8.4.20-5.el6_7.x86_64.rpm postgresql-server-8.4.20-5.el6_7.x86_64.rpm postgresql-test-8.4.20-5.el6_7.x86_64.rpm i386 postgresql-debuginfo-8.4.20-5.el6_7.i686.rpm postgresql-libs-8.4.20-5.el6_7.i686.rpm postgresql-8.4.20-5.el6_7.i686.rpm postgresql-contrib-8.4.20-5.el6_7.i686.rpm postgresql-devel-8.4.20-5.el6_7.i686.rpm postgresql-docs-8.4.20-5.el6_7.i686.rpm postgresql-plperl-8.4.20-5.el6_7.i686.rpm postgresql-plpython-8.4.20-5.el6_7.i686.rpm postgresql-pltcl-8.4.20-5.el6_7.i686.rpm postgresql-server-8.4.20-5.el6_7.i686.rpm postgresql-test-8.4.20-5.el6_7.i686.rpm - Scientific Linux Development Team