PT-2009-6309 · Postgresql+1 · Libecpg6-32Bit+4

Gurjeet Singh · Published 2009-12-15 · Updated 2024-06-15 · CVE-2009-4136

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions postgresql93 versions 9.3.15 and earlier postgresql94 versions 9.4.10 and earlier libecpg6-32bit versions 9.5.4 and earlier

Description The issue concerns security problems fixed in various PostgreSQL packages on the GA media of openSUSE Tumbleweed.

Recommendations For postgresql93 versions 9.3.15 and earlier, update to a version later than 9.3.15. For postgresql94 versions 9.4.10 and earlier, update to a version later than 9.4.10. For libecpg6-32bit versions 9.5.4 and earlier, update to a version later than 9.5.4.

Fix

Related Identifiers

CVE-2009-4136

DSA-1964-1

OPENSUSE-SU-2024:10030-1

OPENSUSE-SU-2024:10256-1

OPENSUSE-SU-2024:10273-1

RHSA-2010:0427

RHSA-2010:0428

RHSA-2010:0429

RHSA-2010_0428

RHSA-2010_0429

Affected Products

Postgresql

Red Hat

Libecpg6-32Bit

Postgresql93

Postgresql94

References · 85

• http://marc.info/?l=bugtraq&m=134124585221119&w=2 · Vendor Advisory
• http://postgresql.org/docs/current/static/release-8-1-19.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0428.html · Vendor Advisory
• http://postgresql.org/docs/current/static/release-8-4-2.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10030-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10256-1 · Vendor Advisory
• http://postgresql.org/docs/current/static/release-7-4-27.html · Vendor Advisory
• http://postgresql.org/docs/current/static/release-8-3-9.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10273-1 · Vendor Advisory
• http://postgresql.org/docs/current/static/release-8-2-15.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:333 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0429.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4136 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-December/msg01056.html · Vendor Advisory