PostgreSQL is an advanced object-relational database management system (DBMS).
Security Fix(es):
Note: This patch drops the script privileges from root to the postgres user. Therefore, this update works properly only if the postgres user has write access to the postgres’ home directory, such as the one in the default configuration (/var/lib/pgsql).
Red Hat would like to thank the PostgreSQL project for reporting CVE-2017-12172. The CVE-2017-15097 issue was discovered by Pedro Barbosa (Red Hat) and the PostgreSQL project. Upstream acknowledges Antoine Scemama (Brainloop) as the original reporter of these issues.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 7 | s390 | postgresql-devel | < 9.2.23-3.el7_4 | postgresql-devel-9.2.23-3.el7_4.s390.rpm |
RedHat | 7 | s390x | postgresql-test | < 9.2.23-3.el7_4 | postgresql-test-9.2.23-3.el7_4.s390x.rpm |
RedHat | 7 | aarch64 | postgresql-pltcl | < 9.2.23-3.el7_4 | postgresql-pltcl-9.2.23-3.el7_4.aarch64.rpm |
RedHat | 7 | ppc64 | postgresql | < 9.2.23-3.el7_4 | postgresql-9.2.23-3.el7_4.ppc64.rpm |
RedHat | 7 | ppc64 | postgresql-test | < 9.2.23-3.el7_4 | postgresql-test-9.2.23-3.el7_4.ppc64.rpm |
RedHat | 7 | ppc64 | postgresql-libs | < 9.2.23-3.el7_4 | postgresql-libs-9.2.23-3.el7_4.ppc64.rpm |
RedHat | 7 | ppc | postgresql-libs | < 9.2.23-3.el7_4 | postgresql-libs-9.2.23-3.el7_4.ppc.rpm |
RedHat | 7 | ppc64le | postgresql-pltcl | < 9.2.23-3.el7_4 | postgresql-pltcl-9.2.23-3.el7_4.ppc64le.rpm |
RedHat | 7 | ppc64le | postgresql | < 9.2.23-3.el7_4 | postgresql-9.2.23-3.el7_4.ppc64le.rpm |
RedHat | 7 | aarch64 | postgresql-upgrade | < 9.2.23-3.el7_4 | postgresql-upgrade-9.2.23-3.el7_4.aarch64.rpm |