diff options
| author | crees <crees@FreeBSD.org> | 2012-02-29 03:19:01 +0800 |
|---|---|---|
| committer | crees <crees@FreeBSD.org> | 2012-02-29 03:19:01 +0800 |
| commit | 0945c4f8c5e0118ec169d7347123c606da207c30 (patch) | |
| tree | 35114f560966442a1f5f1db44c15ad9b7c0c4336 /security/vuxml | |
| parent | 38d46c8be722d19b7f6e9d9a6c9ce587fe45c3ec (diff) | |
| download | freebsd-ports-gnome-0945c4f8c5e0118ec169d7347123c606da207c30.tar.gz freebsd-ports-gnome-0945c4f8c5e0118ec169d7347123c606da207c30.tar.zst freebsd-ports-gnome-0945c4f8c5e0118ec169d7347123c606da207c30.zip | |
Document latest PostgreSQL vulnerabilities
Security: http://www.postgresql.org/about/news/1377/
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 11c0ff299472..4ebfc799db99 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -52,6 +52,41 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="174b8864-6237-11e1-be18-14dae938ec40"> + <topic>databases/postgresql*-client -- multiple vulnerabilities</topic> + <affects> + <package> + <name>postgresql-client</name> + <range><lt>8.3.18</lt></range> + <range><ge>8.4</ge><lt>8.4.11</lt></range> + <range><ge>9</ge><lt>9.0.7</lt></range> + <range><ge>9.1</ge><lt>9.1.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The PostgreSQL Global Development Group reports:</p> + <blockquote cite="http://www.postgresql.org/about/news/1377/"> + <p>These vulnerabilities could allow users to define triggers that + execute functions on which the user does not have EXECUTE + permission, allow SSL certificate spoofing and allow line breaks + in object names to be exploited to execute code when loading a + pg_dump file.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2012-0866</cvename> + <cvename>CVE-2012-0867</cvename> + <cvename>CVE-2012-0868</cvename> + <url>http://www.postgresql.org/about/news/1377/</url> + </references> + <dates> + <discovery>2012-02-27</discovery> + <entry>2012-02-28</entry> + </dates> + </vuln> + <vuln vid="f63bf080-619d-11e1-91af-003067b2972c"> <topic>linux-flashplugin -- multiple vulnerabilities</topic> <affects> |