postgresql-8.4.20-4.AXS4

エラータID: AXSA:2015-564:03

リリース日: 
2015/11/19 Thursday - 00:42
題名: 
postgresql-8.4.20-4.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- PostgreSQL の contrib/pgcrypto の crypt 関数には，短すぎる salt によって，
攻撃者がサービス拒否 (サーバのクラッシュ) を引き起こす，あるいは任意のサーバの
メモリを読み込む脆弱性があります。(CVE-2015-5288)

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2015-5288
The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. postgresql-8.4.20-4.AXS4.src.rpm
    MD5: 2f4fac1a012a7911c20c259ebbd7a2c7
    SHA-256: 6c33303d3cd7f7200d0d63ab99782066db2e040d9a3fcd9fbfed7680cf022b85
    Size: 20.60 MB

Asianux Server 4 for x86
  1. postgresql-8.4.20-4.AXS4.i686.rpm
    MD5: d0c7173355c25e9a03962166b3d35732
    SHA-256: ce0e229dbb1e1a7e7d807a4226cc90d0046ce4d4b3f3538d71df1597b34e0efa
    Size: 2.58 MB
  2. postgresql-contrib-8.4.20-4.AXS4.i686.rpm
    MD5: c586a2037bcde49817c3bef76e17f564
    SHA-256: 8d2125325f58eff3f9eb640a716c6c484ac4b69e5fc92193aea7089c7c49ccae
    Size: 349.81 kB
  3. postgresql-devel-8.4.20-4.AXS4.i686.rpm
    MD5: 5f6496ce4833eb66be6514d8ea7543e7
    SHA-256: 166ca60b7131a6371f62c964695d3a25637fa8d071d850355fe58150c31ce90f
    Size: 810.15 kB
  4. postgresql-docs-8.4.20-4.AXS4.i686.rpm
    MD5: 771181f402c779fbd97611e56bdf2547
    SHA-256: 9cfb6ae44fb02213bdec99ca2a05960280aad9b89bd93aba9336cc6b2e99ba4e
    Size: 6.95 MB
  5. postgresql-libs-8.4.20-4.AXS4.i686.rpm
    MD5: 6eff6f07e8b0837f6ecb0539e895d58d
    SHA-256: b524d80b421347636334abf48d32de5e2ce5d74904834cac76f26d26715ff79d
    Size: 204.67 kB
  6. postgresql-plperl-8.4.20-4.AXS4.i686.rpm
    MD5: 4d632955023e72f1d8a273c5a9f864f5
    SHA-256: 9978a86bbb78190c5c92fe1ddfd441e51c43852664444075b9fc9801c2e87b09
    Size: 56.67 kB
  7. postgresql-plpython-8.4.20-4.AXS4.i686.rpm
    MD5: 4ae30ec6bad303c4a542beed6adefddf
    SHA-256: 51c5700b0f9756ed8021807e74e224b25ca0979ca0138350d25fcb8d6c3c05ea
    Size: 57.35 kB
  8. postgresql-pltcl-8.4.20-4.AXS4.i686.rpm
    MD5: 4d9fb37d967671716c6cfdb81a82e1e5
    SHA-256: 13fb7a62f9581b17880c86a6ae91ae5ad6a2f3023f5f100b3476297853ecdf58
    Size: 45.60 kB
  9. postgresql-server-8.4.20-4.AXS4.i686.rpm
    MD5: d6d85be8293cabbc2f1ce4141e6797f8
    SHA-256: 404697aa34943c908e988b362162c0b14c2909dad34e00f5a272c312649edbdb
    Size: 3.40 MB
  10. postgresql-test-8.4.20-4.AXS4.i686.rpm
    MD5: 72b77695d620fb8d34a844eeeb7e5d31
    SHA-256: db560b2a1ff57166a635b7a5d18fecd0f4b24656479bc286dc5544241ae48085
    Size: 1.11 MB

Asianux Server 4 for x86_64
  1. postgresql-8.4.20-4.AXS4.x86_64.rpm
    MD5: 3ad6277ec88a65837453ea03520a3931
    SHA-256: c8ffd12d1071ec07dab0837fe9d02f1058ff474d632379297f8f0d7907a199e3
    Size: 2.59 MB
  2. postgresql-contrib-8.4.20-4.AXS4.x86_64.rpm
    MD5: 82ec2a965debad0c727c4156b3cd81dd
    SHA-256: d20814a21c033403ea862119a8f8dcf22a358874d93b13cd7f5c3e018b6eebf0
    Size: 353.18 kB
  3. postgresql-devel-8.4.20-4.AXS4.x86_64.rpm
    MD5: 1bc40c61161f0af00d0302fef182209c
    SHA-256: 1ca6ec810c55f07cfb44898d538cbd8894373c724accedcd20bb641e484ca706
    Size: 814.71 kB
  4. postgresql-docs-8.4.20-4.AXS4.x86_64.rpm
    MD5: cef98d08bd71527f6998711f5fe68cfa
    SHA-256: 621d30fc7884758c526127dba6754f80b1507375b0b5132a6d5175918acea284
    Size: 6.95 MB
  5. postgresql-libs-8.4.20-4.AXS4.x86_64.rpm
    MD5: 1deee94f4791bd36d9b1594243e199a7
    SHA-256: c042ff7744abcc2d20193b87cd602abeee13fd3b20ebd5a14dd57dcd3a313099
    Size: 200.82 kB
  6. postgresql-plperl-8.4.20-4.AXS4.x86_64.rpm
    MD5: d0d0cf8df7c787759ae047f760b24e86
    SHA-256: e5c0f7bffc22cc76d7182bc22cb7e0e45a54362559d5d08b25e8a53493cd4437
    Size: 56.45 kB
  7. postgresql-plpython-8.4.20-4.AXS4.x86_64.rpm
    MD5: 10552e7dac33eac1986b5fba660c7b6a
    SHA-256: 05c15ca5cdc8270dbe57f1e2cc8e0f49e8e3a547d604aa8c0e92cb25426c8cd4
    Size: 58.09 kB
  8. postgresql-pltcl-8.4.20-4.AXS4.x86_64.rpm
    MD5: b073f9919aac3c9007e96fe7fe3bc3b0
    SHA-256: 3b62af112bb3ef91b7f801114ee7dc597dd84f8cddb7e5cf36ce5cd25b3ee596
    Size: 45.38 kB
  9. postgresql-server-8.4.20-4.AXS4.x86_64.rpm
    MD5: 24a378e85846374b7d8f3ac550dac2f7
    SHA-256: 1f6c9399cdb38ea17af8e96566884bee597ef2c7f7117dd84f1d29b835aff2e5
    Size: 3.44 MB
  10. postgresql-test-8.4.20-4.AXS4.x86_64.rpm
    MD5: 78d4c872f35802973df596723b7343b2
    SHA-256: 42fb14cc43184f35f23ea1e3aba8c4054e3a888a29e5961445ebdb4261037cae
    Size: 1.11 MB
  11. postgresql-8.4.20-4.AXS4.i686.rpm
    MD5: d0c7173355c25e9a03962166b3d35732
    SHA-256: ce0e229dbb1e1a7e7d807a4226cc90d0046ce4d4b3f3538d71df1597b34e0efa
    Size: 2.58 MB
  12. postgresql-devel-8.4.20-4.AXS4.i686.rpm
    MD5: 5f6496ce4833eb66be6514d8ea7543e7
    SHA-256: 166ca60b7131a6371f62c964695d3a25637fa8d071d850355fe58150c31ce90f
    Size: 810.15 kB
  13. postgresql-libs-8.4.20-4.AXS4.i686.rpm
    MD5: 6eff6f07e8b0837f6ecb0539e895d58d
    SHA-256: b524d80b421347636334abf48d32de5e2ce5d74904834cac76f26d26715ff79d
    Size: 204.67 kB