SuSE9 Security Update : PostgreSQL (YOU Patch Number 12571)
Medium Nessus Plugin ID 44050
Synopsis
The remote SuSE 9 host is missing a security-related patch.
Description
The following bugs have been fixed :
- An unprivileged, authenticated PostgreSQL user could create a table which references functions with malicious content. Maintenance operations carried out be the database superuser could execute such functions.
(CVE-2009-4136)
- Embedded null bytes in the common name of SSL certificates could bypass certificate hostname checks.
(CVE-2009-4034)
PostgreSQL was updated to the next upstream patchlevel update which also includes several bugfixes. See the package changelog for details.
Solution
Apply YOU patch number 12571.