postgresql-8.4.20-8.AXS4

エラータID: AXSA:2017-2312:02

リリース日: 
2017/10/10 Tuesday - 02:42
題名: 
postgresql-8.4.20-8.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- PostgreSQL には，誤った認証フローにより，リモートの攻撃者が
空のパスワードでデータベースのアカウントでアクセスできる脆弱性
があります。(CVE-2017-7546)

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2017-7546
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. postgresql-8.4.20-8.AXS4.src.rpm
    MD5: 984294bde36014965c8b2a0b9cfcf311
    SHA-256: 7a845ad2485cccc3df5cdd3e4eaf34b127fe79fb86d00c806cbb13fca5fab979
    Size: 20.60 MB

Asianux Server 4 for x86
  1. postgresql-8.4.20-8.AXS4.i686.rpm
    MD5: cb77d61605a6580f2cf5d70ac8992b64
    SHA-256: f8a7e8ea75a8afa5f7774dbc298a0cb6aa8e9bc4895501b525b7ec89b1833c74
    Size: 2.58 MB
  2. postgresql-contrib-8.4.20-8.AXS4.i686.rpm
    MD5: d28c6bafbee3888d36cb32fcee65fcce
    SHA-256: 8e6549872f6db9362cb2a1f40a328451b6327db4ea27e82ae6ed725a06e6a754
    Size: 350.21 kB
  3. postgresql-devel-8.4.20-8.AXS4.i686.rpm
    MD5: 610897865eff28d5c1c77c9a7708f639
    SHA-256: 9fb9ca16fa89422e643735288b1526007df79fe826ac13de5244c869ec51a596
    Size: 810.62 kB
  4. postgresql-docs-8.4.20-8.AXS4.i686.rpm
    MD5: b0be403ef9fe7be0895526667bc7018e
    SHA-256: 9f95cf8b5785b2abdf235cc832fb790579c7892703d01da087b0e47e5a57987f
    Size: 6.95 MB
  5. postgresql-libs-8.4.20-8.AXS4.i686.rpm
    MD5: a11b62fb3c404f927ebad72a955fa6ad
    SHA-256: 64714bdd015bdb019fd8cc71bc0759962bc1aa4b8228f62e20ec677055ad98cc
    Size: 205.14 kB
  6. postgresql-plperl-8.4.20-8.AXS4.i686.rpm
    MD5: a48308465ff599a4723629ab133a9fba
    SHA-256: c72abf187feea30ac5c3e18dbab19acbc07de5e7bed58bc8210479ec79ce5b04
    Size: 57.14 kB
  7. postgresql-plpython-8.4.20-8.AXS4.i686.rpm
    MD5: 040020ede6b374fd885d29b50f91bb94
    SHA-256: 2f47f15c2ba66429cbd8593021679d53a5e929898ae9b56882fd788c2d31558e
    Size: 57.82 kB
  8. postgresql-pltcl-8.4.20-8.AXS4.i686.rpm
    MD5: e2cba57c29abff3c680fe58fdf970f7e
    SHA-256: 6d74e2641a7715af859bf7af2a43c85f547fef244cad43a0bd7709197eb29af2
    Size: 46.07 kB
  9. postgresql-server-8.4.20-8.AXS4.i686.rpm
    MD5: b47ff02b10f91805813164bc253806f6
    SHA-256: bdf71bb1332bfe80370e3f8868e5bc9d26df50fd1d280eb35621bf6501e40357
    Size: 3.40 MB
  10. postgresql-test-8.4.20-8.AXS4.i686.rpm
    MD5: a922458a32116b4be5e81c007ab52ae4
    SHA-256: 8142afd02a37aeec58db7114c16f5da1993b8df68fe307bbb57a84b69689d0e4
    Size: 1.11 MB

Asianux Server 4 for x86_64
  1. postgresql-8.4.20-8.AXS4.x86_64.rpm
    MD5: 414949cebbf3936330439374683ff74c
    SHA-256: 3b0a257864a109dbf667895229f0a57d515b78f101ca2ba3ba06ef5120bc26a6
    Size: 2.59 MB
  2. postgresql-contrib-8.4.20-8.AXS4.x86_64.rpm
    MD5: d0da7ad45e6a1b222d249a9a396d6182
    SHA-256: 550a892d8cb9f9c04e02b81988b68cc084d77a6b5c0955580481663d6ea10ad1
    Size: 353.63 kB
  3. postgresql-devel-8.4.20-8.AXS4.x86_64.rpm
    MD5: 47db5504dc0ada2e28b9441934bcad23
    SHA-256: 14669a0dbc7fe8929a4e3bbdd6002f74c5970f1ca7361054a9569216ace69819
    Size: 815.25 kB
  4. postgresql-docs-8.4.20-8.AXS4.x86_64.rpm
    MD5: b8a52ae0cacec7072a3ee5e7a5e3f1d6
    SHA-256: c2d98dcea4eca89903a7f27d1fa3ffd9426a80aecfc92c3cea78fa84e9612067
    Size: 6.95 MB
  5. postgresql-libs-8.4.20-8.AXS4.x86_64.rpm
    MD5: 52987237fb5e25df2c288c8e5015caeb
    SHA-256: 6291935fb5f59e8bff32a64ce25cdd41fc26adb7b0d16c31092d15a70889134f
    Size: 201.25 kB
  6. postgresql-plperl-8.4.20-8.AXS4.x86_64.rpm
    MD5: 64a62cc3d53ff8080509f9d1c2f9cc3c
    SHA-256: 363a213b029097816a02e6d981d13ba08a30a90aef5bed9c42ed2d79ac47f477
    Size: 56.92 kB
  7. postgresql-plpython-8.4.20-8.AXS4.x86_64.rpm
    MD5: 9831273f80984228540d14e38fd72cc8
    SHA-256: b1de1a2c5cdafe8d1cc3385a2e9ef13e4d00e7094d720f5faabe42c2ee348373
    Size: 58.55 kB
  8. postgresql-pltcl-8.4.20-8.AXS4.x86_64.rpm
    MD5: dd56b5022b884f2c30efb9ecc6f2d73e
    SHA-256: b9651e02035a21ce9a9a8762c9385173a61744609d8cd60fb5003b622ab9819f
    Size: 45.84 kB
  9. postgresql-server-8.4.20-8.AXS4.x86_64.rpm
    MD5: bebb2619e8d75b2329fcae373a74bf00
    SHA-256: 0fdd69314bbb3fc7a6cec741d909cc261085002c67a2ed375f5169c666893335
    Size: 3.44 MB
  10. postgresql-test-8.4.20-8.AXS4.x86_64.rpm
    MD5: f98b4a1da2e37e120c10fb233f806743
    SHA-256: 63023d0b9d33eb789562a9577308695e3c0d7ca7f9dcea1ceec0fffc14aa285e
    Size: 1.11 MB
  11. postgresql-8.4.20-8.AXS4.i686.rpm
    MD5: cb77d61605a6580f2cf5d70ac8992b64
    SHA-256: f8a7e8ea75a8afa5f7774dbc298a0cb6aa8e9bc4895501b525b7ec89b1833c74
    Size: 2.58 MB
  12. postgresql-devel-8.4.20-8.AXS4.i686.rpm
    MD5: 610897865eff28d5c1c77c9a7708f639
    SHA-256: 9fb9ca16fa89422e643735288b1526007df79fe826ac13de5244c869ec51a596
    Size: 810.62 kB
  13. postgresql-libs-8.4.20-8.AXS4.i686.rpm
    MD5: a11b62fb3c404f927ebad72a955fa6ad
    SHA-256: 64714bdd015bdb019fd8cc71bc0759962bc1aa4b8228f62e20ec677055ad98cc
    Size: 205.14 kB