rh-postgresql94-postgresql-9.4.9-1.AXS4

エラータID: AXSA:2016-646:03

Release date: 
Wednesday, August 31, 2016 - 13:07
Subject: 
rh-postgresql94-postgresql-9.4.9-1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Severity: 
Moderate
Description: 

PostgreSQL is an advanced Object-Relational database management system (DBMS).
The base postgresql package contains the client programs that you'll need to
access a PostgreSQL DBMS server, as well as HTML documentation for the whole
system. These client programs can be located on the same machine as the
PostgreSQL server, or on a remote machine that accesses a PostgreSQL server
over a network connection. The PostgreSQL server can be found in the
postgresql-server sub-package.

Security issues fixed with this release:

CVE-2016-5423
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-5424
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

The following packages have been upgraded to a newer upstream version: rh-postgresql94-postgresql (9.4.9)

Solution: 

Update packages.

CVEs: 
CVE-2016-5423
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types.
CVE-2016-5424
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) " (double quote), (2) \ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.
Additional Info: 

N/A

Download: 

SRPMS
  1. rh-postgresql94-postgresql-9.4.9-1.AXS4.src.rpm
    MD5: 8aebfc4bc8a64f375e8e44a8861586bd
    SHA-256: 56e8dd6eebfa650f7a54a36bab31b5f59b8d5e0dc9ece35a174fe817912f5d3c
    Size: 24.21 MB

Asianux Server 4 for x86_64
  1. rh-postgresql94-postgresql-9.4.9-1.AXS4.x86_64.rpm
    MD5: 48e60281457c9b3f590f0ec0a1aec42d
    SHA-256: e9d8340a88a51c76715310522f5c94fe646501262814fdadad22b12a2fd1d42e
    Size: 3.15 MB
  2. rh-postgresql94-postgresql-contrib-9.4.9-1.AXS4.x86_64.rpm
    MD5: 4f2fcca2c3900373e80e4e3f6528f79f
    SHA-256: 38ce1978fed00ef28c66faa3f0fbf80dca984c241ee07e47dde7b18776b5bdc7
    Size: 521.14 kB
  3. rh-postgresql94-postgresql-devel-9.4.9-1.AXS4.x86_64.rpm
    MD5: 4685993c9f2209cb12b427b624330ef9
    SHA-256: 8c52cdcb9b9cf7930c936594e2b66e4afe733357d15fa2708a513ae7090d5d08
    Size: 1.01 MB
  4. rh-postgresql94-postgresql-docs-9.4.9-1.AXS4.x86_64.rpm
    MD5: 5be13a743c786464f9ba7dc3d7154374
    SHA-256: 210c38de1a1ec4baf2c17339d8f9161f19d9ffa704396a9f214b271f1fe2ea30
    Size: 9.73 MB
  5. rh-postgresql94-postgresql-libs-9.4.9-1.AXS4.x86_64.rpm
    MD5: 90abfa217d3ada4419ec34c4a755c03d
    SHA-256: d752b47c272a2680e7a1799e65afbd058d1885aaf76a65da362c8bdb16e0aa08
    Size: 224.18 kB
  6. rh-postgresql94-postgresql-plperl-9.4.9-1.AXS4.x86_64.rpm
    MD5: 5ff9fd77abc74528da4585ce9619ef50
    SHA-256: 1472b695770517c59398428a29809ff56184e589fdab257faa489a509cf7f118
    Size: 83.88 kB
  7. rh-postgresql94-postgresql-plpython-9.4.9-1.AXS4.x86_64.rpm
    MD5: b22857a238d6df709ed348096992f6b8
    SHA-256: 0072f1e25fa7e32f1e6291b88d964399c4efc5d63543df23b1197953d75b3fbd
    Size: 92.69 kB
  8. rh-postgresql94-postgresql-pltcl-9.4.9-1.AXS4.x86_64.rpm
    MD5: 81843dfb7990bc37d32f287abd423bf3
    SHA-256: 041a8622bb9234f5ebd622a79f6aebceb00db7f84f1c8fbee6aa02a8a1b2f8db
    Size: 58.24 kB
  9. rh-postgresql94-postgresql-server-9.4.9-1.AXS4.x86_64.rpm
    MD5: f3f4e4471a10df667ae24cc4d54473bb
    SHA-256: 413795ad6c1f663263ac98aa08cdf87e830f6cc0ff2b816cc0140a979d67094f
    Size: 4.59 MB
  10. rh-postgresql94-postgresql-test-9.4.9-1.AXS4.x86_64.rpm
    MD5: b955f5a5f1220a8e3da5eb726bff0154
    SHA-256: 70b678c41e62bd7416d3e8070acafbb640cc3d6672034d21c2ed3970f5f7c344
    Size: 2.16 MB
  11. rh-postgresql94-postgresql-upgrade-9.4.9-1.AXS4.x86_64.rpm
    MD5: 393df54f61e7d277090b9015c4d9223f
    SHA-256: f7b258d10afd05c4d50d3bed33f2e21dc6b9780b48e3f7ac076196f429d113dd
    Size: 79.37 kB