sdkp3-postgresql

Security update for PostgreSQL

Security update for PostgreSQL

The following bugs have been fixed: An unprivileged, authenticated PostgreSQL user could create a table which references functions with malicious content. Maintenance operations carried out be the database superuser could execute such functions (CVE-2009-4136). Embedded null bytes in the common name of SSL certificates could bypass certificate hostname checks (CVE-2009-4034). PostgreSQL was updated to the next upstream patchlevel update which also includes several bugfixes. See the package changelog for details. An unprivileged, authenticated PostgreSQL user could create a table which references functions with malicious content. Maintenance operations carried out be the database superuser could execute such functions (CVE-2009-4136). Embedded null bytes in the common name of SSL certificates could bypass certificate hostname checks (CVE-2009-4034). postgresql was updated to the next upstream patchlevel update which also includes several bugfixes. See the package changelog for details. security postgresql x86_64 74ba8076f59290ff9aac0948e489a93f03520b7d postgresql-contrib x86_64 470a6d407be143781578b7fd90f7dfc2a4becb7c postgresql-devel x86_64 b7a95226ce80fc0c49ee564d7aac65199904c35f postgresql-docs x86_64 4a336dbad1add1fece3a3089e285b2a0584cdab8 postgresql-pl x86_64 f4b17299212f6c4b77c1be9545bc4df09ec4b8ca postgresql-server x86_64 88b039820f628de42990156c34818f2503319209