Ubuntu 11.10: USN-1378-1 Critical PostgreSQL Permission Flaws

ubuntu

February 28, 2012

Several security issues were fixed in PostgreSQL.

Summary

Several security issues were fixed in PostgreSQL.

Software Description:

- postgresql-9.1: Object-relational SQL database

- postgresql-8.4: Object-relational SQL database

- postgresql-8.3: Object-relational SQL database

Details:

It was discovered that PostgreSQL incorrectly checked permissions on

functions called by a trigger. An attacker could attach a trigger to a

table they owned and possibly escalate privileges. (CVE-2012-0866)

It was discovered that PostgreSQL incorrectly truncated SSL certificate

name checks to 32 characters. If a host name was exactly 32 characters,

this issue could be exploited by an attacker to spoof the SSL certificate.

This issue affected Ubuntu 10.04 LTS, Ubuntu 10.10, Ubuntu 11.04 and

Ubuntu 11.10. (CVE-2012-0867)

It was discovered that the PostgreSQL pg_dump utility incorrectly filtered

line breaks in object names. An attacker could create object names that

execute arbitrary SQL commands when a dump script is reloaded.

(CVE-...

Read the Full Advisory

Topics Covered

security advisory critical access control ubuntu database permission issue postgresql

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  postgresql-9.1                  9.1.3-0ubuntu0.11.10

Ubuntu 11.04:
  postgresql-8.4                  8.4.11-0ubuntu0.11.04

Ubuntu 10.10:
  postgresql-8.4                  8.4.11-0ubuntu0.10.10

Ubuntu 10.04 LTS:
  postgresql-8.4                  8.4.11-0ubuntu0.10.04

Ubuntu 8.04 LTS:
  postgresql-8.3                  8.3.18-0ubuntu0.8.04

In general, a standard system update will make all the necessary changes.

This update uses a new upstream release, which includes additional bug
fixes.