rh-postgresql95-postgresql-9.5.4-1.AXS4

エラータID: AXSA:2016-656:01

Release date: 
Thursday, September 8, 2016 - 16:00
Subject: 
rh-postgresql95-postgresql-9.5.4-1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Severity: 
Moderate
Description: 

PostgreSQL is an advanced Object-Relational database management system (DBMS).
The base postgresql package contains the client programs that you'll need to
access a PostgreSQL DBMS server, as well as HTML documentation for the whole
system. These client programs can be located on the same machine as the
PostgreSQL server, or on a remote machine that accesses a PostgreSQL server
over a network connection. The PostgreSQL server can be found in the
postgresql-server sub-package.

Security issues fixed with this release:

CVE-2016-5423
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-5424
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

The following packages have been upgraded to a newer upstream version: rh-postgresql95-postgresql (9.5.4)

Solution: 

Update packages.

CVEs: 
CVE-2016-5423
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types.
CVE-2016-5424
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) " (double quote), (2) \ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.
Additional Info: 

N/A

Download: 

SRPMS
  1. rh-postgresql95-postgresql-9.5.4-1.AXS4.src.rpm
    MD5: 44427c8153bfe03299140ef98f2a7e6a
    SHA-256: 356922de53ae636f8d1628219f3e58504059e0d6c0f54a19e28b6accd4ac5e56
    Size: 25.40 MB

Asianux Server 4 for x86_64
  1. rh-postgresql95-postgresql-9.5.4-1.AXS4.x86_64.rpm
    MD5: cbc1f27a8a4694352b44784183d07841
    SHA-256: d59da4609d40a15c431a2ddcaeb1b64bd04960aa38f7619b8c2190a1953795a2
    Size: 3.38 MB
  2. rh-postgresql95-postgresql-contrib-9.5.4-1.AXS4.x86_64.rpm
    MD5: be62ad16f02a609613158c0f06fbf387
    SHA-256: fb33b08713cab545dfcf63a2eb1905e9aaa75279c26a10cfde31db81ac01309b
    Size: 551.91 kB
  3. rh-postgresql95-postgresql-devel-9.5.4-1.AXS4.x86_64.rpm
    MD5: 462ddc1c992495f68e00cbc67af8a305
    SHA-256: 55611fcf9425956cc4b65fd3dfae091fc5ad346e1f3651471b5e3bfc99fff284
    Size: 1.11 MB
  4. rh-postgresql95-postgresql-docs-9.5.4-1.AXS4.x86_64.rpm
    MD5: 5eb06a1720edbea5a228e0c743f0a283
    SHA-256: 88a976e40fba3772f5b7b1dd747d194cfc853940ae16758f8f3be228f44bc7cd
    Size: 10.14 MB
  5. rh-postgresql95-postgresql-libs-9.5.4-1.AXS4.x86_64.rpm
    MD5: 217d18966f8837ff920eb5b6c279ea8c
    SHA-256: 47a4c74184b6df40a394f6cc07e38d1c0732a2afb58a7137d4fc7ea635dd9002
    Size: 231.65 kB
  6. rh-postgresql95-postgresql-plperl-9.5.4-1.AXS4.x86_64.rpm
    MD5: 0abd651482a927788aa48e8f42a953a6
    SHA-256: 644e981c0d607c53f54d221406576f0d249ab066808f3142ef16f450d2b19ab1
    Size: 87.14 kB
  7. rh-postgresql95-postgresql-plpython-9.5.4-1.AXS4.x86_64.rpm
    MD5: fcf5f1eef77950e393dfaf73056293ba
    SHA-256: 4d1416f465625d5ca7671a1af68c481672a5909cbf64914bbc70c5489a07c125
    Size: 95.96 kB
  8. rh-postgresql95-postgresql-pltcl-9.5.4-1.AXS4.x86_64.rpm
    MD5: c911b6955507dcdcee0a1a6debd459c7
    SHA-256: 7884d5da6609ba1dd632d5390165d6db35fe884a0919b5194a7dedc2d9bb8af9
    Size: 61.34 kB
  9. rh-postgresql95-postgresql-server-9.5.4-1.AXS4.x86_64.rpm
    MD5: 83dac288113ed5cb5be478ce21fbe254
    SHA-256: e521307408ca7b22d82fa2b2df616ad54dc4c1dbcd9ca5254e86254cb0240e63
    Size: 4.79 MB
  10. rh-postgresql95-postgresql-static-9.5.4-1.AXS4.x86_64.rpm
    MD5: b22c3faab82e0639b3dcd6ef2065d605
    SHA-256: 79dd13f8a81d544070344fb331d855a6651e08bff1c17a9a08eea8547b52cc14
    Size: 119.59 kB
  11. rh-postgresql95-postgresql-test-9.5.4-1.AXS4.x86_64.rpm
    MD5: f3e1daaa592a6c1df8c3834cf30bdcd1
    SHA-256: 747e039341e5a8f40d74e4af98686f8c1b71716340d93b8f7d3fa25481dc8fbe
    Size: 1.46 MB