Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Ubuntu 19.04: USN-4027-1 Critical: PostgreSQL Denial Of Service

ubuntu
Calendar Grey June 20, 2019
Dist Ubuntu Esm H88
The Ubuntu Security Advisory USN-4028-1 outlines a vulnerability in MySQL that may result in database crashes or enable unauthorized code execution.
PostgreSQL could be made to crash or run programs if it received specially crafted network traffic.

Summary

PostgreSQL could be made to crash or run programs if it received specially

crafted network traffic.

Software Description:

- postgresql-11: Object-relational SQL database

- postgresql-10: Object-relational SQL database

Details:

Alexander Lakhin discovered that PostgreSQL incorrectly handled

authentication. An authenticated attacker or a rogue server could use this

issue to cause PostgreSQL to crash, resulting in a denial of service, or

possibly execute arbitrary code. The default compiler options for affected

releases should reduce the vulnerability to a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu network traffic PostgreSQL

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  postgresql-11                   11.4-0ubuntu0.19.04.1

Ubuntu 18.10:
  postgresql-10                   10.9-0ubuntu0.18.10.1

Ubuntu 18.04 LTS:
  postgresql-10                   10.9-0ubuntu0.18.04.1

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart PostgreSQL to
make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4027-1

CVE-2019-10164

Severity
critical
Lowest
Low
Medium
High
Critical

June 20, 2019

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu network traffic PostgreSQL

Package Information

https://launchpad.net/ubuntu/+source/postgresql-11/11.4-0ubuntu0.19.04.1
https://launchpad.net/ubuntu/+source/postgresql-10/10.9-0ubuntu0.18.10.1
https://launchpad.net/ubuntu/+source/postgresql-10/10.9-0ubuntu0.18.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.