postgresql-9.2.24-7.el7

エラータID: AXSA:2021-1996:03

Release date: 
Wednesday, June 16, 2021 - 04:03
Subject: 
postgresql-9.2.24-7.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2021-32027
A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Solution: 

Update packages.

CVEs: 
CVE-2021-32027
A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Additional Info: 

N/A

Download: 

SRPMS
  1. postgresql-9.2.24-7.el7.src.rpm
    MD5: e0ad675b7a4c87254710c2be82567b1b
    SHA-256: e363fdfdc1fb2b0f1ea0601553db49e688cb63750cf310108492c90bee3ec7b1
    Size: 35.99 MB

Asianux Server 7 for x86_64
  1. postgresql-9.2.24-7.el7.x86_64.rpm
    MD5: 71a8e3876aa6018379bf57194ed8da32
    SHA-256: 995ea238d5aa1c51743dca2b9e0d4a9227be698f1e1621a1584324fbe39e2438
    Size: 3.03 MB
  2. postgresql-contrib-9.2.24-7.el7.x86_64.rpm
    MD5: ffd9c8f4252b2ca05d1e89bfd87aa409
    SHA-256: 582365474bcc38b92ba33537977a99a493328e21e4f83f659728b9ab9998a127
    Size: 551.64 kB
  3. postgresql-devel-9.2.24-7.el7.x86_64.rpm
    MD5: 3838cab66b5269ca6e06410f79fa8baf
    SHA-256: c5634742bfe72b41d71363b83ee94d59077386567e85df50874801510fbe6cd6
    Size: 951.47 kB
  4. postgresql-docs-9.2.24-7.el7.x86_64.rpm
    MD5: b3ffdd44ddea442c6098b18e5fc32446
    SHA-256: 6b791b7b6b5ea05f05e9372d2385eec1c35139528e667e6a74b6c62fc65572f9
    Size: 6.87 MB
  5. postgresql-libs-9.2.24-7.el7.x86_64.rpm
    MD5: ae589f959effe32ee41f59fa6ad7e88e
    SHA-256: 466b4764a45efb19b3e3f08544f69f845a520342e0b89c33db0013e1dd2d5262
    Size: 233.69 kB
  6. postgresql-plperl-9.2.24-7.el7.x86_64.rpm
    MD5: 9427672d40c946b2aea045a88c9573be
    SHA-256: bcbffa1e3edea796cc0fc7cae8623f855eee778dda38b24b055ffd537df37816
    Size: 82.89 kB
  7. postgresql-plpython-9.2.24-7.el7.x86_64.rpm
    MD5: 1a5c81d01ab793a7acfb53ca0f8e47c4
    SHA-256: c2d19c8c1524f5c949a705bac3085c917512976da98cbf4ebc82af40391a6452
    Size: 95.82 kB
  8. postgresql-pltcl-9.2.24-7.el7.x86_64.rpm
    MD5: 1e2be032f2642f287a5c83fd768cf444
    SHA-256: 6e7b8c298ca953a607bf9deea25627a9904804d5efe519f469157603bc96c103
    Size: 59.12 kB
  9. postgresql-server-9.2.24-7.el7.x86_64.rpm
    MD5: fc98038003a33060bdeffee9dfb158d0
    SHA-256: b7fb573e2e3afefa9f1c2ffba9032f2980db033529260ac607f9c6ba0f8ea078
    Size: 3.82 MB
  10. postgresql-test-9.2.24-7.el7.x86_64.rpm
    MD5: 71c43cb440d5ef1cbe3b8afbf318da7f
    SHA-256: ba57e15fc15f0c32d6cffafe8cbc0ad33dcf1b0f4cb1d4a8804cbc5a8ee4b552
    Size: 1.76 MB
  11. postgresql-9.2.24-7.el7.i686.rpm
    MD5: 2e8177fe72b1d7415e99ea1c2b902a33
    SHA-256: 7cf429c150a2013b1be5eb8db7d8c8ca79e10c8005804d44e92dc064d81c7870
    Size: 3.02 MB
  12. postgresql-devel-9.2.24-7.el7.i686.rpm
    MD5: 8cc20487b3ced53bb72ffc92e02a1797
    SHA-256: 3c7c65a6058f6bf67d0e347672f7ddac9d625960902aa9aff19fdc4c4501c2cb
    Size: 945.75 kB
  13. postgresql-libs-9.2.24-7.el7.i686.rpm
    MD5: 097a469c89c447dd22219dad874b46fc
    SHA-256: ed1b6bee7d837607a08820c357bd4913727cd508082fa57bceb94bc1b72e950b
    Size: 233.89 kB