rh-postgresql94-postgresql-9.4.5-1.AXS4

PostgreSQL is an advanced Object-Relational database management system (DBMS).
The base postgresql package contains the client programs that you'll need to
access a PostgreSQL DBMS server, as well as HTML documentation for the whole
system. These client programs can be located on the same machine as the
PostgreSQL server, or on a remote machine that accesses a PostgreSQL server
over a network connection. The PostgreSQL server can be found in the
postgresql-server sub-package.

Security issues fixed with this release:

* CVE-2015-5288:
The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23,
9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and
9.4.x before 9.4.5 allows attackers to cause a denial of service
(server crash) or read arbitrary server memory via a "too-short" salt.

* CVE-2015-5289:
Multiple stack-based buffer overflows in json parsing in PostgreSQL
before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to
cause a denial of service (server crash) via unspecified vectors,
which are not properly handled in (1) json or (2) jsonb values.