Scientific Linux 6 x86_64: SLSA-2015:2081-1 Moderate PostgreSQL Memory Leak

Date: Tue, 17 Nov 2015 09:30:48 -0600
Reply-To: Pat Riehecky 
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: FASTBUGS for SL 5x i386, x86_64 now available
MIME-Version: 1.0
Message-ID: <564B4828.1020409@fnal.gov>

The following FASTBUGS have been uploaded to

i386:
kernel-2.6.18-407.el5.i686.rpm
kernel-debug-2.6.18-407.el5.i686.rpm
kernel-debug-devel-2.6.18-407.el5.i686.rpm
kernel-devel-2.6.18-407.el5.i686.rpm
kernel-doc-2.6.18-407.el5.noarch.rpm
kernel-headers-2.6.18-407.el5.i386.rpm
kernel-module-aufs-2.6.18-407.el5-0.20090202.cvs-6.sl5.i686.rpm
kernel-module-aufs-2.6.18-407.el5PAE-0.20090202.cvs-6.sl5.i686.rpm
kernel-module-aufs-2.6.18-407.el5xen-0.20090202.cvs-6.sl5.i686.rpm
kernel-module-ipw3945-2.6.18-407.el5-1.2.0-2.sl5.i686.rpm
kernel-module-ipw3945-2.6.18-407.el5PAE-1.2.0-2.sl5.i686.rpm
kernel-module-ipw3945-2.6.18-407.el5xen-1.2.0-2.sl5.i686.rpm
kernel-module-openafs-2.6.18-407.el5-1.4.15-88.sl5.i686.rpm
kernel-module-openafs-2.6.18-407.el5PAE-1.4.15-88.sl5.i686.rpm
kernel-module-openafs-2.6.18-407.el5xen-1.4.15-88.sl5.i686.rpm
kernel-module-xfs-2.6.18-407.el5-0.4-2.sl5.i686.rpm
kernel-module-xfs-2.6.18-407.el5PAE-0.4-2.sl5.i686.rpm
kernel-module-xfs-2.6.18-407.el5xen-0.4-2.sl5.i686.rpm
kernel-PAE-2.6.18-407.el5.i686.rpm
kernel-PAE-devel-2.6.18-407.el5.i686.rpm
kernel-xen-2.6.18-407.el5.i686.rpm
kernel-xen-devel-2.6.18-407.el5.i686.rpm

x86_64:
kernel-2.6.18-407.el5.x86_64.rpm
kernel-debug-2.6.18-407.el5.x86_64.rpm
kernel-debug-devel-2.6.18-407.el5.x86_64.rpm
kernel-devel-2.6.18-407.el5.x86_64.rpm
kernel-doc-2.6.18-407.el5.noarch.rpm
kernel-headers-2.6.18-407.el5.x86_64.rpm
kernel-module-aufs-2.6.18-407.el5-0.20090202.cvs-6.sl5.x86_64.rpm
kernel-module-aufs-2.6.18-407.el5xen-0.20090202.cvs-6.sl5.x86_64.rpm
kernel-module-ipw3945-2.6.18-407.el5-1.2.0-2.sl5.x86_64.rpm
kernel-module-ipw3945-2.6.18-407.el5xen-1.2.0-2.sl5.x86_64.rpm
kernel-module-openafs-2.6.18-407.el5-1.4.15-88.sl5.x86_64.rpm
kernel-module-openafs-2.6.18-407.el5xen-1.4.15-88.sl5.x86_64.rpm
kernel-xen-2.6.18-407.el5.x86_64.rpm
kernel-xen-devel-2.6.18-407.el5.x86_64.rpm
Date: Wed, 18 Nov 2015 21:56:17 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: postgresql on SL6.x i386/x86_64
MIME-Version: 1.0
Message-ID: <20151118215617.21320.68957@slpackages.fnal.gov>

Synopsis: Moderate: postgresql security update
Advisory ID: SLSA-2015:2081-1
Issue Date: 2015-11-18
CVE Numbers: CVE-2015-5288
--

A memory leak error was discovered in the crypt() function of the pgCrypto
extension. An authenticated attacker could possibly use this flaw to
disclose a limited amount of the server memory. (CVE-2015-5288)

If the postgresql service is running, it will be automatically restarted
after installing this update.
--

SL6
 x86_64
 postgresql-debuginfo-8.4.20-4.el6_7.i686.rpm
 postgresql-debuginfo-8.4.20-4.el6_7.x86_64.rpm
 postgresql-libs-8.4.20-4.el6_7.i686.rpm
 postgresql-libs-8.4.20-4.el6_7.x86_64.rpm
 postgresql-8.4.20-4.el6_7.i686.rpm
 postgresql-8.4.20-4.el6_7.x86_64.rpm
 postgresql-contrib-8.4.20-4.el6_7.x86_64.rpm
 postgresql-devel-8.4.20-4.el6_7.i686.rpm
 postgresql-devel-8.4.20-4.el6_7.x86_64.rpm
 postgresql-docs-8.4.20-4.el6_7.x86_64.rpm
 postgresql-plperl-8.4.20-4.el6_7.x86_64.rpm
 postgresql-plpython-8.4.20-4.el6_7.x86_64.rpm
 postgresql-pltcl-8.4.20-4.el6_7.x86_64.rpm
 postgresql-server-8.4.20-4.el6_7.x86_64.rpm
 postgresql-test-8.4.20-4.el6_7.x86_64.rpm
 i386
 postgresql-debuginfo-8.4.20-4.el6_7.i686.rpm
 postgresql-libs-8.4.20-4.el6_7.i686.rpm
 postgresql-8.4.20-4.el6_7.i686.rpm
 postgresql-contrib-8.4.20-4.el6_7.i686.rpm
 postgresql-devel-8.4.20-4.el6_7.i686.rpm
 postgresql-docs-8.4.20-4.el6_7.i686.rpm
 postgresql-plperl-8.4.20-4.el6_7.i686.rpm
 postgresql-plpython-8.4.20-4.el6_7.i686.rpm
 postgresql-pltcl-8.4.20-4.el6_7.i686.rpm
 postgresql-server-8.4.20-4.el6_7.i686.rpm
 postgresql-test-8.4.20-4.el6_7.i686.rpm

- Scientific Linux Development Team