Ubuntu: 1717-1 Moderate: PostgreSQL Denial Of Service Fix Available

ubuntu

February 12, 2013

PostgreSQL could be made to crash if it received specially crafted input.

Summary

PostgreSQL could be made to crash if it received specially crafted input.

Software Description:

- postgresql-9.1: Object-relational SQL database

- postgresql-8.4: Object-relational SQL database

- postgresql-8.3: Object-relational SQL database

Details:

Sumit Soni discovered that PostgreSQL incorrectly handled calling a certain

internal function with invalid arguments. An authenticated attacker could

use this issue to cause PostgreSQL to crash, resulting in a denial of

service.

Topics Covered

security advisory denial of service update service disruption ubuntu postgresql

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  postgresql-9.1                  9.1.8-0ubuntu12.10

Ubuntu 12.04 LTS:
  postgresql-9.1                  9.1.8-0ubuntu12.04

Ubuntu 11.10:
  postgresql-9.1                  9.1.8-0ubuntu11.10

Ubuntu 10.04 LTS:
  postgresql-8.4                  8.4.16-0ubuntu10.04

Ubuntu 8.04 LTS:
  postgresql-8.3                  8.3.23-0ubuntu8.04

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.