Bug 156727

Summary:	CAN-2005-1409 Multiple postgresql issues (CAN-2005-1410)
Product:	[Fedora] Fedora	Reporter:	Josh Bressers <bressers>
Component:	postgresql	Assignee:	Tom Lane <tgl>
Status:	CLOSED RAWHIDE	QA Contact:	David Lawrence <dkl>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	3	CC:	hhorak
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	impact=moderate,public=20050502,source=postgres,reported=20050503
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-05-11 18:00:46 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2005-05-03 17:58:05 UTC

+++ This bug was initially created as a clone of Bug #156726 +++

Two serious security errors have been found in PostgreSQL 7.3 and newer
releases.  These errors at least allow an unprivileged database user to
crash the backend process, and may make it possible for an unprivileged
user to gain the privileges of a database superuser.

http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php

Comment 1 Tom Lane 2005-05-11 18:00:46 UTC

Fix is pushed out into FC3 and FC4.