sledp3-postgresql

Security update for postgresql

This update of postgresql fixes several minor security vulnerabilities: * Postgresql does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings. (CVE-2010-1975 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1975> ) * The PL/Tcl implementation in postgresql loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users with database creation privileges to execute arbitrary Tcl code. (CVE-2010-1170 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1170> ) * Postgresql does not properly restrict PL/perl procedures, which allows remote authenticated users with database creation privileges to execute arbitrary Perl code via a crafted script. (CVE-2010-1169 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1169> ) * An integer overflow in postgresql allows remote authenticated users to crash the daemon with a SELECT statement. (CVE-2010-0733 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0733> ) security postgresql-devel x86_64 6bce805beab8e6980b90e55fd834261c9faba7c7 postgresql-libs x86_64 d75ca3c61af03bb14c52e9211f81ebe5303e49bc postgresql-libs-32bit x86_64 bc18f1d0bcaa847053fb4a69d55f00e4124a3f76