Synopsis:          Important: postgresql security update

Advisory ID:       SLSA-2016:0346-1

Issue Date:        2016-03-02

CVE Numbers:       CVE-2016-0773

--



An integer overflow flaw, leading to a heap-based buffer overflow, was

found in the PostgreSQL handling code for regular expressions. A remote

attacker could use a specially crafted regular expression to cause

PostgreSQL to crash or possibly execute arbitrary code. (CVE-2016-0773)



If the postgresql service is running, it will be automatically restarted

after installing this update.

--



SL7

  x86_64

    postgresql-9.2.15-1.el7_2.i686.rpm

    postgresql-9.2.15-1.el7_2.x86_64.rpm

    postgresql-contrib-9.2.15-1.el7_2.x86_64.rpm

    postgresql-debuginfo-9.2.15-1.el7_2.i686.rpm

    postgresql-debuginfo-9.2.15-1.el7_2.x86_64.rpm

    postgresql-devel-9.2.15-1.el7_2.i686.rpm

    postgresql-devel-9.2.15-1.el7_2.x86_64.rpm

    postgresql-docs-9.2.15-1.el7_2.x86_64.rpm

    postgresql-libs-9.2.15-1.el7_2.i686.rpm

    postgresql-libs-9.2.15-1.el7_2.x86_64.rpm

    postgresql-plperl-9.2.15-1.el7_2.x86_64.rpm

    postgresql-plpython-9.2.15-1.el7_2.x86_64.rpm

    postgresql-pltcl-9.2.15-1.el7_2.x86_64.rpm

    postgresql-server-9.2.15-1.el7_2.x86_64.rpm

    postgresql-test-9.2.15-1.el7_2.x86_64.rpm

    postgresql-upgrade-9.2.15-1.el7_2.x86_64.rpm



- Scientific Linux Development Team