Date: Tue, 19 May 2009 15:03:40 -0400
From: rPath Update Announcements <announce-noreply@rpath.com.>
To: [email protected],
Subject: rPSA-2009-0086-1 postgresql postgresql-contrib postgresql-server
Message-ID: <4a13028c.iTESlJae+yG+hbzT%[email protected]>
User-Agent: nail 11.22 3/20/05
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: antivirus-gw at tyumen.ru
rPath Security Advisory: 2009-0086-1
Published: 2009-05-19
Products:
rPath Linux 2
Rating: Minor
Exposure Level Classification:
Local System User Deterministic Denial of Service
Updated Versions:
postgresql=conary.rpath.com@rpl:2/8.3.7-0.1-1
postgresql-contrib=conary.rpath.com@rpl:2/8.3.7-0.1-1
postgresql-server=conary.rpath.com@rpl:2/8.3.7-0.1-1
rPath Issue Tracking System:
https://issues.rpath.com/browse/RPL-3017
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0922
Description:
In previous versions of the postgresql package, authenticated
users of a postgresql database could cause the postgresql server
to crash by triggering a failure in converting an error message to
an encoding selected by the user, by making mismatched encoding
conversion requests. In addition, a GiST index corruption bug
is also addressed by this update; users of GiST indices should
regenerate GiST indices after updating.
http://wiki.rpath.com/Advisories:rPSA-2009-0086
Copyright 2009 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html
