rh-postgresql94-postgresql-9.4.9-1.el7

エラータID: AXSA:2016-649:03

Release date: 
Thursday, September 1, 2016 - 11:13
Subject: 
rh-postgresql94-postgresql-9.4.9-1.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

PostgreSQL is an advanced Object-Relational database management system (DBMS).
The base postgresql package contains the client programs that you'll need to
access a PostgreSQL DBMS server, as well as HTML documentation for the whole
system. These client programs can be located on the same machine as the
PostgreSQL server, or on a remote machine that accesses a PostgreSQL server
over a network connection. The PostgreSQL server can be found in the
postgresql-server sub-package.

Security issues fixed with this release:

CVE-2016-5423
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-5424
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

The following packages have been upgraded to a newer upstream version: rh-postgresql94-postgresql (9.4.9)

Solution: 

Update packages.

CVEs: 
CVE-2016-5423
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types.
CVE-2016-5424
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) " (double quote), (2) \ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.
Additional Info: 

N/A

Download: 

SRPMS
  1. rh-postgresql94-postgresql-9.4.9-1.el7.src.rpm
    MD5: 71521c26a46088725249d9daf6f9c8fd
    SHA-256: eeb3b5cc6ad333a4e0ec309ef756f128e85f6c7f831265243f684f7a4089b299
    Size: 24.21 MB

Asianux Server 7 for x86_64
  1. rh-postgresql94-postgresql-9.4.9-1.el7.x86_64.rpm
    MD5: 1e61a4a3a0b49a1f89f03781ea723923
    SHA-256: c86079ec42894ebb6e1f0286474c6033b19f67efac03b3e212c50ac628613f2c
    Size: 3.05 MB
  2. rh-postgresql94-postgresql-contrib-9.4.9-1.el7.x86_64.rpm
    MD5: c14008b9b06c3c92bf472bbc9fee658a
    SHA-256: 1c8b6d43ca336c454788be4daab999de700df4609fc026aa54457c6a664310ab
    Size: 601.14 kB
  3. rh-postgresql94-postgresql-devel-9.4.9-1.el7.x86_64.rpm
    MD5: 4651f0ab6c62e9d85a7c6df0ffa26766
    SHA-256: 6fc55da04b4fa4687b8ede1b0f224db8855a8c8b0b50b598c398ccce1a3c2e2c
    Size: 0.99 MB
  4. rh-postgresql94-postgresql-docs-9.4.9-1.el7.x86_64.rpm
    MD5: c427079d338cbbb5b8c2aa7ce3b367f8
    SHA-256: 6c649fdea6d6bdc432b1739c527c4b4c0b1906158dac88cd7935c5cd7550c710
    Size: 9.61 MB
  5. rh-postgresql94-postgresql-libs-9.4.9-1.el7.x86_64.rpm
    MD5: 086864cf40ec62e343a0d1ab54b4536b
    SHA-256: ce493a01696a066084d7924fc70b1d476a1ce779f207bb2f5995250a164f30ff
    Size: 236.12 kB
  6. rh-postgresql94-postgresql-plperl-9.4.9-1.el7.x86_64.rpm
    MD5: afe43cca08d75159c8c08e600b4d88e4
    SHA-256: 854a6803d3e03d425a016fcd67fc5aa0963b7851dd332649710de2eaa535b0f3
    Size: 85.83 kB
  7. rh-postgresql94-postgresql-plpython-9.4.9-1.el7.x86_64.rpm
    MD5: d0b2b31bdd2bbd4261f224af375c091b
    SHA-256: 38401d4f62a3fa27a85342f4e37a13cf62cd6016acc183e1df44cb8f10ac4d41
    Size: 95.30 kB
  8. rh-postgresql94-postgresql-pltcl-9.4.9-1.el7.x86_64.rpm
    MD5: 2a85fb689151dfb6f37f2a8eea5d96aa
    SHA-256: c4bef3a01d91c69c22c3d9670720039d033c96dc5f5fcbe1b565c9af703e5d93
    Size: 60.00 kB
  9. rh-postgresql94-postgresql-server-9.4.9-1.el7.x86_64.rpm
    MD5: bbf35f6044ad3c44124fb637c6410591
    SHA-256: 1bae9854a270d0c74de338022a44f64d25ae496fe9276630bd5f2161bec79780
    Size: 4.03 MB
  10. rh-postgresql94-postgresql-test-9.4.9-1.el7.x86_64.rpm
    MD5: e6186c15a538ef03d6fb5a6b8b2426f2
    SHA-256: e7d8f20df69360ca4dc42dab40b9be248700d7795b503eb4ef64517a509bf6fb
    Size: 1.93 MB
  11. rh-postgresql94-postgresql-upgrade-9.4.9-1.el7.x86_64.rpm
    MD5: 111ffb8321acaafdef482503eb845d4d
    SHA-256: 2db37bb4aa60854535891f618a93f7d2564b87515f391c8080306e98e3499d27
    Size: 83.74 kB