RHSA-2017:2425
Vulnerability from csaf_redhat - Published: 2017-08-07 16:11 - Updated: 2025-11-21 18:01A flaw was found in the way PostgreSQL server handled certain SQL statements containing CASE/WHEN commands. A remote, authenticated attacker could use a specially crafted SQL statement to cause PostgreSQL to crash or disclose a few bytes of server memory or possibly execute arbitrary code.
A flaw was found in the way PostgreSQL client programs handled database and role names containing newlines, carriage returns, double quotes, or backslashes. By crafting such an object name, roles with the CREATEDB or CREATEROLE option could escalate their privileges to superuser when a superuser next executes maintenance with a vulnerable client program.
It was found that some selectivity estimation functions did not check user privileges before providing information from pg_statistic, possibly leaking information. A non-administrative database user could use this flaw to steal some information from tables they are otherwise not allowed to access.
It was discovered that the PostgreSQL client library (libpq) did not enforce the use of TLS/SSL for a connection to a PostgreSQL server when the PGREQUIRESSL environment variable was set. An man-in-the-middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server.
It was found that the pg_user_mappings view could disclose information about user mappings to a foreign database to non-administrative database users. A database user with USAGE privilege for this mapping could, when querying the view, obtain user mapping data, such as the username and password used to connect to the foreign database.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rh-postgresql95-postgresql is now available for Red Hat Satellite 5.7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\nThis update applies only to Satellite 5.7 instances using either embedded or managed PostgreSQL databases.\n\nThere are manual steps required in order to finish the migration from postgresql92-postgresql to rh-postgresql95-postgresql. If these steps are not undertaken, the affected Satellite will continue to use PostgreSQL 9.2.\n\npostgresql92-postgresql will be upgraded automatically to rh-postgresql95-postgresql as part of an upgrade to Satellite 5.8.",
"title": "Topic"
},
{
"category": "general",
"text": "PostgreSQL is an advanced object-relational database management system (DBMS).\n\nThe following packages have been upgraded to a later upstream version: rh-postgresql95-postgresql (9.5.7). (BZ#1449701)\n\nSecurity Fix(es):\n\n* A flaw was found in the way PostgreSQL server handled certain SQL statements containing CASE/WHEN commands. A remote, authenticated attacker could use a specially crafted SQL statement to cause PostgreSQL to crash or disclose a few bytes of server memory or possibly execute arbitrary code. (CVE-2016-5423)\n\n* A flaw was found in the way PostgreSQL client programs handled database and role names containing newlines, carriage returns, double quotes, or backslashes. By crafting such an object name, roles with the CREATEDB or CREATEROLE option could escalate their privileges to superuser when a superuser next executes maintenance with a vulnerable client program. (CVE-2016-5424)\n\n* It was found that some selectivity estimation functions did not check user privileges before providing information from pg_statistic, possibly leaking information. A non-administrative database user could use this flaw to steal some information from tables they are otherwise not allowed to access. (CVE-2017-7484)\n\n* It was discovered that the PostgreSQL client library (libpq) did not enforce the use of TLS/SSL for a connection to a PostgreSQL server when the PGREQUIRESSL environment variable was set. An man-in-the-middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server. (CVE-2017-7485)\n\n* It was found that the pg_user_mappings view could disclose information about user mappings to a foreign database to non-administrative database users. A database user with USAGE privilege for this mapping could, when querying the view, obtain user mapping data, such as the username and password used to connect to the foreign database. (CVE-2017-7486)\n\nRed Hat would like to thank the PostgreSQL project for reporting these issues. Upstream acknowledges Robert Haas as the original reporter of CVE-2017-7484; Daniel Gustafsson as the original reporter of CVE-2017-7485; and Andrew Wheelwright as the original reporter of CVE-2017-7486.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:2425",
"url": "https://access.redhat.com/errata/RHSA-2017:2425"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1364001",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1364001"
},
{
"category": "external",
"summary": "1364002",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1364002"
},
{
"category": "external",
"summary": "1434418",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1434418"
},
{
"category": "external",
"summary": "1448078",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1448078"
},
{
"category": "external",
"summary": "1448086",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1448086"
},
{
"category": "external",
"summary": "1448089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1448089"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2425.json"
}
],
"title": "Red Hat Security Advisory: rh-postgresql95-postgresql security update",
"tracking": {
"current_release_date": "2025-11-21T18:01:54+00:00",
"generator": {
"date": "2025-11-21T18:01:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2017:2425",
"initial_release_date": "2017-08-07T16:11:22+00:00",
"revision_history": [
{
"date": "2017-08-07T16:11:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-08-07T16:11:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:01:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 5.7 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.7::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite_managed_db:5.7::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"product": {
"name": "spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"product_id": "spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-postgresql-server@9.5-1.el6sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"product": {
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"product_id": "rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql@9.5.7-2.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-0:2.3.3-53.el6sat.src",
"product": {
"name": "spacewalk-backend-0:2.3.3-53.el6sat.src",
"product_id": "spacewalk-backend-0:2.3.3-53.el6sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend@2.3.3-53.el6sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "spacewalk-web-0:2.3.2-35.el6sat.src",
"product": {
"name": "spacewalk-web-0:2.3.2-35.el6sat.src",
"product_id": "spacewalk-web-0:2.3.2-35.el6sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-web@2.3.2-35.el6sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"product": {
"name": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"product_id": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-setup-postgresql@2.3.0-27.el6sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "spacewalk-utils-0:2.3.2-32.el6sat.src",
"product": {
"name": "spacewalk-utils-0:2.3.2-32.el6sat.src",
"product_id": "spacewalk-utils-0:2.3.2-32.el6sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-utils@2.3.2-32.el6sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"product": {
"name": "spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"product_id": "spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-postgresql-server@9.5-1.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-iss-export@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-applet@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-config-files-common@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-config-files-tool@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-iss@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-sql-oracle@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-server@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-sql-postgresql@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-app@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-tools@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-config-files@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-xmlrpc@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-libs@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-sql@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-package-push-server@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"product": {
"name": "spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"product_id": "spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-backend-xml-export-libs@2.3.3-53.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-html-0:2.3.2-35.el6sat.noarch",
"product": {
"name": "spacewalk-html-0:2.3.2-35.el6sat.noarch",
"product_id": "spacewalk-html-0:2.3.2-35.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-html@2.3.2-35.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"product": {
"name": "spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"product_id": "spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-sniglets@2.3.2-35.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"product": {
"name": "spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"product_id": "spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-base-minimal@2.3.2-35.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-base-0:2.3.2-35.el6sat.noarch",
"product": {
"name": "spacewalk-base-0:2.3.2-35.el6sat.noarch",
"product_id": "spacewalk-base-0:2.3.2-35.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-base@2.3.2-35.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"product": {
"name": "spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"product_id": "spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-dobby@2.3.2-35.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"product": {
"name": "spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"product_id": "spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-grail@2.3.2-35.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"product": {
"name": "spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"product_id": "spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-pxt@2.3.2-35.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"product": {
"name": "spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"product_id": "spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-base-minimal-config@2.3.2-35.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"product": {
"name": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"product_id": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-setup-postgresql@2.3.0-27.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"product": {
"name": "spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"product_id": "spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spacewalk-utils@2.3.2-32.el6sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"product": {
"name": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"product_id": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql-libs@9.5.7-2.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"product": {
"name": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"product_id": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql-debuginfo@9.5.7-2.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"product": {
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"product_id": "rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql@9.5.7-2.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"product": {
"name": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"product_id": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql-contrib@9.5.7-2.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"product": {
"name": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"product_id": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql-server@9.5.7-2.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"product": {
"name": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"product_id": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql-pltcl@9.5.7-2.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"product": {
"name": "rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"product_id": "rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-runtime@2.2-3.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"product": {
"name": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"product_id": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql-libs@9.5.7-2.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"product": {
"name": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"product_id": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql-debuginfo@9.5.7-2.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"product": {
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"product_id": "rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql@9.5.7-2.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"product": {
"name": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"product_id": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql-contrib@9.5.7-2.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"product": {
"name": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"product_id": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql-server@9.5.7-2.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"product": {
"name": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"product_id": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-postgresql-pltcl@9.5.7-2.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"product": {
"name": "rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"product_id": "rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-postgresql95-runtime@2.2-3.el6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.src as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src"
},
"product_reference": "rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-runtime-0:2.2-3.el6.s390x as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x"
},
"product_reference": "rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-runtime-0:2.2-3.el6.x86_64 as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64"
},
"product_reference": "rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-base-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-base-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-dobby-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-grail-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-html-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-html-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-postgresql-server-0:9.5-1.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch"
},
"product_reference": "spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-postgresql-server-0:9.5-1.el6sat.src as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src"
},
"product_reference": "spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-pxt-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch"
},
"product_reference": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src"
},
"product_reference": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-sniglets-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-web-0:2.3.2-35.el6sat.src as a component of Red Hat Satellite Managed DB 5.7 (RHEL v.6)",
"product_id": "6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src"
},
"product_reference": "spacewalk-web-0:2.3.2-35.el6sat.src",
"relates_to_product_reference": "6Server-ManagedDB57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.src as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src"
},
"product_reference": "rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x"
},
"product_reference": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64"
},
"product_reference": "rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-runtime-0:2.2-3.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x"
},
"product_reference": "rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-postgresql95-runtime-0:2.2-3.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64"
},
"product_reference": "rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-0:2.3.3-53.el6sat.src as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src"
},
"product_reference": "spacewalk-backend-0:2.3.3-53.el6sat.src",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-app-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-server-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch"
},
"product_reference": "spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-base-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-base-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-dobby-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-grail-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-html-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-html-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-postgresql-server-0:9.5-1.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch"
},
"product_reference": "spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-postgresql-server-0:9.5-1.el6sat.src as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src"
},
"product_reference": "spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-pxt-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch"
},
"product_reference": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src"
},
"product_reference": "spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-sniglets-0:2.3.2-35.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch"
},
"product_reference": "spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-utils-0:2.3.2-32.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch"
},
"product_reference": "spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-utils-0:2.3.2-32.el6sat.src as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src"
},
"product_reference": "spacewalk-utils-0:2.3.2-32.el6sat.src",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-web-0:2.3.2-35.el6sat.src as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
},
"product_reference": "spacewalk-web-0:2.3.2-35.el6sat.src",
"relates_to_product_reference": "6Server-Satellite57"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the PostgreSQL project"
]
},
{
"names": [
"Heikki Linnakangas"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-5423",
"cwe": {
"id": "CWE-822",
"name": "Untrusted Pointer Dereference"
},
"discovery_date": "2016-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1364001"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way PostgreSQL server handled certain SQL statements containing CASE/WHEN commands. A remote, authenticated attacker could use a specially crafted SQL statement to cause PostgreSQL to crash or disclose a few bytes of server memory or possibly execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: CASE/WHEN with inlining can cause untrusted pointer dereference",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-5423"
},
{
"category": "external",
"summary": "RHBZ#1364001",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1364001"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-5423",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5423"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5423",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5423"
}
],
"release_date": "2016-08-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-08-07T16:11:22+00:00",
"details": "As part of this upgrade, PostgreSQL data files will be moved from /opt/rh/postgresql92/root/var/lib/pgsql/ to /var/opt/rh/rh-postgresql95/lib/pgsql/.\n\nBefore proceeding with command line portion of the upgrade please insure that there is enough free space under the /var/opt directory. The amount of free space required should be at least equal to size of your /opt/rh/postgresql92/root/var/lib/pgsql/ directory. This size can be determined using the following command:\n\ndu -sh /opt/rh/postgresql92/root/var/lib/pgsql/\n\nAfter updating packages, run following command on your database machine (NOTE: in the embedded-database case this is the Satellite system itself; otherwise, run the command on the system running your PostgreSQL database):\n\n/usr/bin/spacewalk-upgrade-postgresql\n\npostgresql92-postgresql will be upgraded to rh-postgresql95-postgresql.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:2425"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: CASE/WHEN with inlining can cause untrusted pointer dereference"
},
{
"acknowledgments": [
{
"names": [
"the PostgreSQL project"
]
},
{
"names": [
"Nathan Bossart"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-5424",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1364002"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way PostgreSQL client programs handled database and role names containing newlines, carriage returns, double quotes, or backslashes. By crafting such an object name, roles with the CREATEDB or CREATEROLE option could escalate their privileges to superuser when a superuser next executes maintenance with a vulnerable client program.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: privilege escalation via crafted database and role names",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-5424"
},
{
"category": "external",
"summary": "RHBZ#1364002",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1364002"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-5424",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5424"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-5424",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5424"
}
],
"release_date": "2016-08-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-08-07T16:11:22+00:00",
"details": "As part of this upgrade, PostgreSQL data files will be moved from /opt/rh/postgresql92/root/var/lib/pgsql/ to /var/opt/rh/rh-postgresql95/lib/pgsql/.\n\nBefore proceeding with command line portion of the upgrade please insure that there is enough free space under the /var/opt directory. The amount of free space required should be at least equal to size of your /opt/rh/postgresql92/root/var/lib/pgsql/ directory. This size can be determined using the following command:\n\ndu -sh /opt/rh/postgresql92/root/var/lib/pgsql/\n\nAfter updating packages, run following command on your database machine (NOTE: in the embedded-database case this is the Satellite system itself; otherwise, run the command on the system running your PostgreSQL database):\n\n/usr/bin/spacewalk-upgrade-postgresql\n\npostgresql92-postgresql will be upgraded to rh-postgresql95-postgresql.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:2425"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: privilege escalation via crafted database and role names"
},
{
"acknowledgments": [
{
"names": [
"the PostgreSQL project"
]
},
{
"names": [
"Robert Haas"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2017-7484",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2017-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1448078"
}
],
"notes": [
{
"category": "description",
"text": "It was found that some selectivity estimation functions did not check user privileges before providing information from pg_statistic, possibly leaking information. A non-administrative database user could use this flaw to steal some information from tables they are otherwise not allowed to access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: Selectivity estimators bypass SELECT privilege checks",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-7484"
},
{
"category": "external",
"summary": "RHBZ#1448078",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1448078"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-7484",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7484"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7484",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7484"
},
{
"category": "external",
"summary": "https://www.postgresql.org/about/news/1746/",
"url": "https://www.postgresql.org/about/news/1746/"
}
],
"release_date": "2017-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-08-07T16:11:22+00:00",
"details": "As part of this upgrade, PostgreSQL data files will be moved from /opt/rh/postgresql92/root/var/lib/pgsql/ to /var/opt/rh/rh-postgresql95/lib/pgsql/.\n\nBefore proceeding with command line portion of the upgrade please insure that there is enough free space under the /var/opt directory. The amount of free space required should be at least equal to size of your /opt/rh/postgresql92/root/var/lib/pgsql/ directory. This size can be determined using the following command:\n\ndu -sh /opt/rh/postgresql92/root/var/lib/pgsql/\n\nAfter updating packages, run following command on your database machine (NOTE: in the embedded-database case this is the Satellite system itself; otherwise, run the command on the system running your PostgreSQL database):\n\n/usr/bin/spacewalk-upgrade-postgresql\n\npostgresql92-postgresql will be upgraded to rh-postgresql95-postgresql.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:2425"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: Selectivity estimators bypass SELECT privilege checks"
},
{
"acknowledgments": [
{
"names": [
"the PostgreSQL project"
]
},
{
"names": [
"Daniel Gustafsson"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2017-7485",
"cwe": {
"id": "CWE-390",
"name": "Detection of Error Condition Without Action"
},
"discovery_date": "2017-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1448086"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the PostgreSQL client library (libpq) did not enforce the use of TLS/SSL for a connection to a PostgreSQL server when the PGREQUIRESSL environment variable was set. An man-in-the-middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: libpq ignores PGREQUIRESSL environment variable",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-7485"
},
{
"category": "external",
"summary": "RHBZ#1448086",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1448086"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-7485",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7485"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7485",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7485"
},
{
"category": "external",
"summary": "https://www.postgresql.org/about/news/1746/",
"url": "https://www.postgresql.org/about/news/1746/"
}
],
"release_date": "2017-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-08-07T16:11:22+00:00",
"details": "As part of this upgrade, PostgreSQL data files will be moved from /opt/rh/postgresql92/root/var/lib/pgsql/ to /var/opt/rh/rh-postgresql95/lib/pgsql/.\n\nBefore proceeding with command line portion of the upgrade please insure that there is enough free space under the /var/opt directory. The amount of free space required should be at least equal to size of your /opt/rh/postgresql92/root/var/lib/pgsql/ directory. This size can be determined using the following command:\n\ndu -sh /opt/rh/postgresql92/root/var/lib/pgsql/\n\nAfter updating packages, run following command on your database machine (NOTE: in the embedded-database case this is the Satellite system itself; otherwise, run the command on the system running your PostgreSQL database):\n\n/usr/bin/spacewalk-upgrade-postgresql\n\npostgresql92-postgresql will be upgraded to rh-postgresql95-postgresql.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:2425"
},
{
"category": "workaround",
"details": "Use PGSSLMODE=require instead of PGREQUIRESSL=1",
"product_ids": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: libpq ignores PGREQUIRESSL environment variable"
},
{
"acknowledgments": [
{
"names": [
"the PostgreSQL project"
]
},
{
"names": [
"Andrew Wheelwright"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2017-7486",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2017-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1448089"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the pg_user_mappings view could disclose information about user mappings to a foreign database to non-administrative database users. A database user with USAGE privilege for this mapping could, when querying the view, obtain user mapping data, such as the username and password used to connect to the foreign database.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: pg_user_mappings view discloses foreign server passwords",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-7486"
},
{
"category": "external",
"summary": "RHBZ#1448089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1448089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-7486",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7486"
},
{
"category": "external",
"summary": "https://www.postgresql.org/about/news/1746/",
"url": "https://www.postgresql.org/about/news/1746/"
}
],
"release_date": "2017-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-08-07T16:11:22+00:00",
"details": "As part of this upgrade, PostgreSQL data files will be moved from /opt/rh/postgresql92/root/var/lib/pgsql/ to /var/opt/rh/rh-postgresql95/lib/pgsql/.\n\nBefore proceeding with command line portion of the upgrade please insure that there is enough free space under the /var/opt directory. The amount of free space required should be at least equal to size of your /opt/rh/postgresql92/root/var/lib/pgsql/ directory. This size can be determined using the following command:\n\ndu -sh /opt/rh/postgresql92/root/var/lib/pgsql/\n\nAfter updating packages, run following command on your database machine (NOTE: in the embedded-database case this is the Satellite system itself; otherwise, run the command on the system running your PostgreSQL database):\n\n/usr/bin/spacewalk-upgrade-postgresql\n\npostgresql92-postgresql will be upgraded to rh-postgresql95-postgresql.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:2425"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-ManagedDB57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-ManagedDB57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-ManagedDB57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-ManagedDB57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-ManagedDB57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-ManagedDB57:spacewalk-web-0:2.3.2-35.el6sat.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.src",
"6Server-Satellite57:rh-postgresql95-postgresql-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-contrib-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-debuginfo-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-libs-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-pltcl-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.s390x",
"6Server-Satellite57:rh-postgresql95-postgresql-server-0:9.5.7-2.el6.x86_64",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.s390x",
"6Server-Satellite57:rh-postgresql95-runtime-0:2.2-3.el6.x86_64",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-0:2.3.3-53.el6sat.src",
"6Server-Satellite57:spacewalk-backend-app-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-applet-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-common-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-config-files-tool-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-iss-export-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-package-push-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-server-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-oracle-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-sql-postgresql-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-tools-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xml-export-libs-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-backend-xmlrpc-0:2.3.3-53.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-base-minimal-config-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-dobby-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-grail-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-html-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.noarch",
"6Server-Satellite57:spacewalk-postgresql-server-0:9.5-1.el6sat.src",
"6Server-Satellite57:spacewalk-pxt-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.noarch",
"6Server-Satellite57:spacewalk-setup-postgresql-0:2.3.0-27.el6sat.src",
"6Server-Satellite57:spacewalk-sniglets-0:2.3.2-35.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.noarch",
"6Server-Satellite57:spacewalk-utils-0:2.3.2-32.el6sat.src",
"6Server-Satellite57:spacewalk-web-0:2.3.2-35.el6sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: pg_user_mappings view discloses foreign server passwords"
}
]
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.