PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to graphical installers for Linux and Mac OS X.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Postgresql | Postgresql | 9.2 (including) | 9.2 (including) |
| Postgresql | Postgresql | 9.2.1 (including) | 9.2.1 (including) |
| Postgresql | Postgresql | 9.2.2 (including) | 9.2.2 (including) |
| Postgresql | Postgresql | 9.2.3 (including) | 9.2.3 (including) |
| Postgresql-8.2 | Ubuntu | hardy | * |
| Postgresql-8.4 | Ubuntu | upstream | * |
| Postgresql-9.1 | Ubuntu | upstream | * |
References
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.postgresql.org/about/news/1456/
- http://www.postgresql.org/support/security/
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.postgresql.org/about/news/1456/
- http://www.postgresql.org/support/security/