Moderate: postgresql84 security update

Advisory:	RHSA-2010:0430-1
Type:	Security Advisory
Severity:	Moderate
Issued on:	2010-05-19
Last updated on:	2010-05-19
Affected Products:	RHEL Desktop Workstation (v. 5 client) Red Hat Enterprise Linux (v. 5 server) Red Hat Enterprise Linux Desktop (v. 5 client)
CVEs (cve.mitre.org):	CVE-2010-1169 CVE-2010-1170 CVE-2010-1975

Details

Updated postgresql84 packages that fix two security issues are now
available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

PostgreSQL is an advanced object-relational database management system
(DBMS). PL/Perl and PL/Tcl allow users to write PostgreSQL functions in the
Perl and Tcl languages, and are installed in trusted mode by default. In
trusted mode, certain operations, such as operating system level access,
are restricted.

A flaw was found in the way PostgreSQL enforced permission checks on
scripts written in PL/Perl. If the PL/Perl procedural language was
registered on a particular database, an authenticated database user running
a specially-crafted PL/Perl script could use this flaw to bypass intended
PL/Perl trusted mode restrictions, allowing them to run arbitrary Perl
scripts with the privileges of the database server. (CVE-2010-1169)

Red Hat would like to thank Tim Bunce for responsibly reporting the
CVE-2010-1169 flaw.

A flaw was found in the way PostgreSQL enforced permission checks on
scripts written in PL/Tcl. If the PL/Tcl procedural language was registered
on a particular database, an authenticated database user running a
specially-crafted PL/Tcl script could use this flaw to bypass intended
PL/Tcl trusted mode restrictions, allowing them to run arbitrary Tcl
scripts with the privileges of the database server. (CVE-2010-1170)

These packages upgrade PostgreSQL to version 8.4.4. Refer to the PostgreSQL
Release Notes for a list of changes:

http://www.postgresql.org/docs/8.4/static/release.html

All PostgreSQL users are advised to upgrade to these updated packages,
which correct these issues. If the postgresql service is running, it will
be automatically restarted after installing this update.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Updated packages

RHEL Desktop Workstation (v. 5 client)

SRPMS:
postgresql84-8.4.4-1.el5_5.1.src.rpm File outdated by: RHSA-2012:1263	`MD5: 95d7454d236b4b2dabd49ac79bb5bc37 SHA-256: 3603bbd301b93a1298bc492d8dcca55fa13b4493725d380844d8a03a8d4c6fc6`

IA-32:
postgresql84-devel-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: e6b4d22221efe25467a2406f49f3d7f6 SHA-256: 4aaf3667c63b6a833bce84313ff238b94d1ebd6bd0a196eaed68aaa2c56d85f3`
postgresql84-plperl-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 1b052ff4e1194ea56db6dc579a7b8b8d SHA-256: 76aa7ca3944e460654a0a24e8a683fbd83caad64eadf8fb0b3ab0367f4387b00`
postgresql84-plpython-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 3b67d53cc4dcb7924e21f40466734514 SHA-256: 289b0cc18f0b1017ea134319b7bc903142a729d81d7ae01690330bdfe2f7b9a6`
postgresql84-pltcl-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 724062f1dd8684d7069d55d0fb3c2d7d SHA-256: ee7fd1d6b9302088c68e2b49b06275ea9bd9fe2815acc19b720c24ddda052a60`
postgresql84-server-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 7a1035eb23db78ce4b6d41e39b755167 SHA-256: 4fede444a9ef05e46b1fd2302f47135cfcde949e74ffdd0df823162ba557b564`
postgresql84-test-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 4a3d6822a23da683658ef7bf9f1adcc7 SHA-256: 9c01f1225d013a6d4a077df37ab41ff1824b002b6c739025b0d0bfa6087a147a`

x86_64:
postgresql84-devel-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: e6b4d22221efe25467a2406f49f3d7f6 SHA-256: 4aaf3667c63b6a833bce84313ff238b94d1ebd6bd0a196eaed68aaa2c56d85f3`
postgresql84-devel-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 0761754a6b30b535653a3124e09aa6c8 SHA-256: 022ecd1d009de355cc4a442416581fc3d3860ddf2625805f1bbcd51b0ffed5fd`
postgresql84-plperl-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: aeb81f18a447a2bcbabef5d6e91c038e SHA-256: e2668d5c32d16def743fc9fc5ec6c1194f19275091fab58c5285ee72beb94a28`
postgresql84-plpython-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: ab8f9b2b6069e25cc87cc2212ec01d7e SHA-256: aff09d6eeb978dfda0a1bdcd3b552dca863e0f437651229936d555c86651766c`
postgresql84-pltcl-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: d5a27fae116a3450b1bb83381082b4dd SHA-256: e28f752c4b601b675aef6087d5b474821bd4c074681100f8818d23b64986ad0c`
postgresql84-server-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 652ceb3ea56b350aae4a5c854fe9c4ef SHA-256: 39c05a404a18a9ebfe1f3cdf7caf490bd6f854011784a60e5bcdbcc664f4eba3`
postgresql84-test-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 0bedf9dbedd1d16e2ba1d6b096b5bca8 SHA-256: 51266d86e5491a7148f875192dfed3cb48b0a3da1c4bbcdad1f4743df445f0c1`

Red Hat Enterprise Linux (v. 5 server)

SRPMS:
postgresql84-8.4.4-1.el5_5.1.src.rpm File outdated by: RHSA-2012:1263	`MD5: 95d7454d236b4b2dabd49ac79bb5bc37 SHA-256: 3603bbd301b93a1298bc492d8dcca55fa13b4493725d380844d8a03a8d4c6fc6`

IA-32:
postgresql84-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: bc190abb677d5d8fe0a201129b78a372 SHA-256: 61696551783b65d2671b0b19a970b5324d7b62f0e54075263cd5acedefe69d49`
postgresql84-contrib-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: e9a626e48a07d1581bed81cb2b58ca3c SHA-256: ba3920360be286d4a06b8bf99237889301adff841d6ed9fdc473bca1be6b8ca9`
postgresql84-devel-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: e6b4d22221efe25467a2406f49f3d7f6 SHA-256: 4aaf3667c63b6a833bce84313ff238b94d1ebd6bd0a196eaed68aaa2c56d85f3`
postgresql84-docs-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 50238aa68fcbff495b4052e407d6f505 SHA-256: bf7c3d34fc2687e01b3678ced0e974776e718a29446fa2a90b6d60c9e2a78219`
postgresql84-libs-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 629c21624ed6bf4fa0a2e2a1313612e4 SHA-256: 28116d8f986ac9e22c37791171a2b5beab907cd8b975f104e200dfb000fa1a9a`
postgresql84-plperl-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 1b052ff4e1194ea56db6dc579a7b8b8d SHA-256: 76aa7ca3944e460654a0a24e8a683fbd83caad64eadf8fb0b3ab0367f4387b00`
postgresql84-plpython-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 3b67d53cc4dcb7924e21f40466734514 SHA-256: 289b0cc18f0b1017ea134319b7bc903142a729d81d7ae01690330bdfe2f7b9a6`
postgresql84-pltcl-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 724062f1dd8684d7069d55d0fb3c2d7d SHA-256: ee7fd1d6b9302088c68e2b49b06275ea9bd9fe2815acc19b720c24ddda052a60`
postgresql84-python-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 0c97e85d08c65b34053841c0ff91b31e SHA-256: 4ac11178797ba1931ea5a24f9001108ed40fca8daf4c9267e9d1087000ee597a`
postgresql84-server-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 7a1035eb23db78ce4b6d41e39b755167 SHA-256: 4fede444a9ef05e46b1fd2302f47135cfcde949e74ffdd0df823162ba557b564`
postgresql84-tcl-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 7754a113ce79c69a73efe2e3614e08b6 SHA-256: ee92113d911ed2897077426dddd39422c06bc2a0396bafa533740e6db45f068d`
postgresql84-test-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 4a3d6822a23da683658ef7bf9f1adcc7 SHA-256: 9c01f1225d013a6d4a077df37ab41ff1824b002b6c739025b0d0bfa6087a147a`

IA-64:
postgresql84-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: dd22b031596195d947bff8b4d74bde59 SHA-256: bfabf3aa6e2f6468c833f0d8286249fa84b52f19ba8615f8ca07d84eea4e8a32`
postgresql84-contrib-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: aa9ffcd597ddfc1fda7e15fc5a7fd818 SHA-256: 3fe234296d1a7cb132d241c01111f5ce026e50fb59c6d3728999937cc6b87b6d`
postgresql84-devel-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: bcb997c5e951eb38c630f752d9d93599 SHA-256: 69542c20a54d4623dac6b52e7d41ec932f6678ed6d8b6a064e6b121a6479d6c9`
postgresql84-docs-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: a554b7b94b8e34dbf835cf8fdb66ed3c SHA-256: abb67f5b06cddb8a1aabcd517e69d6141b0aa420efdc2661d7ed42ab4154cf0e`
postgresql84-libs-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: 5fd7664b52b7e41b629a7e9f8f357268 SHA-256: a51a611913e6e0b5367e1bf2c1f8b93e57358a747c8de65d2bf3c1d8338ec1f0`
postgresql84-plperl-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: f2dd2ce3ab0e603728e78d528e90625c SHA-256: f4f6fef00c3d46ecba34c2476049193aac4956beee53f7c34e2d838c977b0350`
postgresql84-plpython-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: 00dee0e99d3c9b2f31eabb19519adf6f SHA-256: 122b6b38a7fc3d1324ba09388e040aa6740bea3328792148ad84392c4911268c`
postgresql84-pltcl-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: e7a46ff3181bc0c4a5eba839496fe884 SHA-256: 4d0d14efdba7412e6a4548a6aa368b394ed31c3bea878d566d9af626baf892a3`
postgresql84-python-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: 7a4a62e86255e059c0199f5d94635e31 SHA-256: 7010b1043adfb2cb1e5b013a576c7c20b8e5ba7cb388bb75e2c0f45ee89de042`
postgresql84-server-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: 38e9131a899d418c7f9183ce9acbae7f SHA-256: ce0ed6328a6cdcda8151cee3b6dc3b561f21d614b25f0249c1619974d048c31f`
postgresql84-tcl-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: 243456e5baad9e38283fc1c820beb16c SHA-256: 66af3ad364c2a12e64fd49d8e6230c1d23e3c009899860cf973a036a414fa62f`
postgresql84-test-8.4.4-1.el5_5.1.ia64.rpm File outdated by: RHSA-2012:1263	`MD5: e73251b59d74db843e2b7dacd608d3d3 SHA-256: 355004e75a0a0b3a07f0c65f892b78f171254c1ffd3306cc13ed7fcdfa8cf343`

PPC:
postgresql84-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: 8d51469d23fde162b2a7fd695a3caafc SHA-256: 18bf1b76ef7c1975ee4da39406636546dfde929aedb8f1b8b03471da41c7b0c5`
postgresql84-8.4.4-1.el5_5.1.ppc64.rpm File outdated by: RHSA-2012:1263	`MD5: 1bf576dcf85f34aa629ac11bc2962652 SHA-256: c1e12b1661942d5ab96697fc4ef8eeec8409e66534ad5386eb72c5f85faf936d`
postgresql84-contrib-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: f4b1ce3336e6b4cf6f4bbcab0ee35dc7 SHA-256: 056c9c23ee89c0b34c9a09fbb73c244a8a7ce39c7518c9eafd8f665aa7256f72`
postgresql84-devel-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: b1e6eac3ac9724364dcca6fe38aaecb5 SHA-256: dc2e9ea3b0cd30a59944547b37d799bca967887d7177a7cbae4c1b9b9b861a50`
postgresql84-devel-8.4.4-1.el5_5.1.ppc64.rpm File outdated by: RHSA-2012:1263	`MD5: 2ceed429307273d917bfeb8d6f77f909 SHA-256: 53ffdd88ce981c91a2fcd9bdc436c730a4e15fcca7991c70b8f3a38595ced6fb`
postgresql84-docs-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: 2a293b7f9c0ef4f988545282331565d0 SHA-256: d081a516dd6526013cb0f5ffa8e08f3e8c24ee5ffe3102bc3bb8908c828a7737`
postgresql84-libs-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: 97cb4713d2438898c908908b5bee8226 SHA-256: 17b8b3b8209b646aff73cb0c158aad16d90b2dd61faa8ec31cb48c4638356cd1`
postgresql84-libs-8.4.4-1.el5_5.1.ppc64.rpm File outdated by: RHSA-2012:1263	`MD5: 9d712b89e0ac817b277f89036178caf0 SHA-256: 2c08db5cd18654e4a57091a0454774164eb76912af188c2880c588206cb35072`
postgresql84-plperl-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: 1d4057e57f5b7e90a0407cb60917e2cb SHA-256: 49579fc7b0557576cbbe1cd082843c4d6f6171cb93b6b7f98ac9a14c593ffc8e`
postgresql84-plpython-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: 82557f1c40003f21167940467f180f50 SHA-256: 4c1da65ccee98acf7a6abe039208f30d7c6a448b09130ab2e80938f3dad4c11d`
postgresql84-pltcl-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: afd4dc3b18d4a378931782c424911c1c SHA-256: 1da35d93e796a9ae5b6e55d53d0d41923321400c8057317ce0e7bc26d786c467`
postgresql84-python-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: d7fb6ff44db5de8600e79c721cab547a SHA-256: 61b3351500c85fef6412b6919e1d40f38d9c0808c8f2bd7d35468a2b69baded0`
postgresql84-server-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: 40694bea1d8ca73fa366f79b94af2cdb SHA-256: 2096dfc065f14272bdc0c4c3d11c0c241a1919359766074e29bdf370718e32b8`
postgresql84-tcl-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: ad8ef0b54a55d3137bd447a093a64a63 SHA-256: c273c8d6e2f840031152f289e283f1aa2fbaf7054be875359bfe26291721e668`
postgresql84-test-8.4.4-1.el5_5.1.ppc.rpm File outdated by: RHSA-2012:1263	`MD5: d706f6ba41c6207fb241702163fe9634 SHA-256: 80a033e755c15a7299da59516ea256ca7b37f5532ac46102327a4118dabb56c2`

s390x:
postgresql84-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: bde9199dad5b83a24922237086a20e22 SHA-256: eabfdaed638a5f3fa544ed8474709b99996c0b12d9ee8a5cd5d413093cc64789`
postgresql84-contrib-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: e27ee0b8d801ddff39d7992968eacede SHA-256: 21f82664ec7838b127ec0853297fc42b58daabf3763af328ea004a36782589a4`
postgresql84-devel-8.4.4-1.el5_5.1.s390.rpm File outdated by: RHSA-2012:1263	`MD5: f2ac43b7147a76e1db59d30baf08df12 SHA-256: b8d3964dd6dbc1ddff36ba01d216f2910f2793b7e0e73c1332b3b46280189506`
postgresql84-devel-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: 4df2fe2b1d270e8d18433fdfdd70041a SHA-256: 4bb39e5401575acbdbed25fb4607c2fd391f48ae831a01f0ff277c26ba3b41c9`
postgresql84-docs-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: a5b9cdd2ca8b3fe58281ba9e71f02c11 SHA-256: d206da59aff5499435f38017f3f147d6a8946a0b0559e6b89053a8455dcd77ee`
postgresql84-libs-8.4.4-1.el5_5.1.s390.rpm File outdated by: RHSA-2012:1263	`MD5: 2aee79c4e6d473b55908a9f5647c780f SHA-256: 4a1760f4b2dafcf381503cb90d95a90fc4570e2ddee52fbb625c53ec78680017`
postgresql84-libs-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: fac7d94b3d3b291cb185c166ef8a6c2c SHA-256: 21abf05e57498f5b9c5fd4bba284a97d224c629ea0e1dc26b572047afeffc460`
postgresql84-plperl-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: 46304936b91620f56887438e1bf5e977 SHA-256: a4dffcdb7f0ed00f56677765b832693adedb53e476409d00ceb7142746a41a07`
postgresql84-plpython-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: 20cccf3008f3de554c08c69eded91ccc SHA-256: 88f0eca083be0a0f9ebad095c98ea144b5e6e032e65425cf68da31fc21d43fbb`
postgresql84-pltcl-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: 8f0477c79823e23ce3e209e1184f1257 SHA-256: f2fcce294a954fc5af48b819b981be6520388a38ede77c284d06844bc8eef847`
postgresql84-python-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: cbe8c2c551d1d440ce6bdc7f80b76761 SHA-256: c2feafbc574b709ca679ffc558d6ce0471cc8322aacad30c0b5a97f5c207d8e1`
postgresql84-server-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: 290a6c60a536c3584cdb7a7bb9aa96d0 SHA-256: 35e264cfa49645597ca5531815e583fbb6db4a0e0978cf75066d19b2dd842892`
postgresql84-tcl-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: 863a3d46713c21603b750bdfaee08813 SHA-256: ecb40ed0b535524741bdc89f39bb8cd59a17bbcfaafb946aea98e77064500cad`
postgresql84-test-8.4.4-1.el5_5.1.s390x.rpm File outdated by: RHSA-2012:1263	`MD5: 62c0fa4bfd43649aa33b8ea18f81b9eb SHA-256: 82f8eee06a0631874da0e14f6319201053779c3ec5d11b5bc9fc95520e817ed5`

x86_64:
postgresql84-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: fb41f2729a9f64ba90d3642b0fe8a378 SHA-256: 7202441a0ebc10ea09e42a14a3f26549c3e01145f8775cf07acc90ebb192c74f`
postgresql84-contrib-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 4c7d400de97d71e8ab61f8e9c12d2c37 SHA-256: 2051d0e3cb6bc22f6635122dcfc742c167f228466183f1f40ff445add614951f`
postgresql84-devel-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: e6b4d22221efe25467a2406f49f3d7f6 SHA-256: 4aaf3667c63b6a833bce84313ff238b94d1ebd6bd0a196eaed68aaa2c56d85f3`
postgresql84-devel-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 0761754a6b30b535653a3124e09aa6c8 SHA-256: 022ecd1d009de355cc4a442416581fc3d3860ddf2625805f1bbcd51b0ffed5fd`
postgresql84-docs-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 327e83a43dfc21cb9570db9623248d01 SHA-256: 42e2a806a7cb0c3dd5091c8cf3185d98c5e49a85aefd8b558e382b33570987fe`
postgresql84-libs-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 629c21624ed6bf4fa0a2e2a1313612e4 SHA-256: 28116d8f986ac9e22c37791171a2b5beab907cd8b975f104e200dfb000fa1a9a`
postgresql84-libs-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 98c497b3e17aa062df44fb361e6614e7 SHA-256: 090bb3446881e823e27704639c24d252b9d0b3867c46a797deba513d06c77f29`
postgresql84-plperl-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: aeb81f18a447a2bcbabef5d6e91c038e SHA-256: e2668d5c32d16def743fc9fc5ec6c1194f19275091fab58c5285ee72beb94a28`
postgresql84-plpython-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: ab8f9b2b6069e25cc87cc2212ec01d7e SHA-256: aff09d6eeb978dfda0a1bdcd3b552dca863e0f437651229936d555c86651766c`
postgresql84-pltcl-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: d5a27fae116a3450b1bb83381082b4dd SHA-256: e28f752c4b601b675aef6087d5b474821bd4c074681100f8818d23b64986ad0c`
postgresql84-python-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 3fe1c7715b74c7c556c48e956772c47e SHA-256: ad1db66b5b867ba08bc008c6efa55a373e382e95856a1f168a98bbb79a3ddddf`
postgresql84-server-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 652ceb3ea56b350aae4a5c854fe9c4ef SHA-256: 39c05a404a18a9ebfe1f3cdf7caf490bd6f854011784a60e5bcdbcc664f4eba3`
postgresql84-tcl-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 192177a985b120e78de0cc2cbd3ea457 SHA-256: dc1580f28a1f2f0f9f97a6fa6ff23aa9c224f0e18a78d5b39afa405d357ba72b`
postgresql84-test-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 0bedf9dbedd1d16e2ba1d6b096b5bca8 SHA-256: 51266d86e5491a7148f875192dfed3cb48b0a3da1c4bbcdad1f4743df445f0c1`

Red Hat Enterprise Linux Desktop (v. 5 client)

SRPMS:
postgresql84-8.4.4-1.el5_5.1.src.rpm File outdated by: RHSA-2012:1263	`MD5: 95d7454d236b4b2dabd49ac79bb5bc37 SHA-256: 3603bbd301b93a1298bc492d8dcca55fa13b4493725d380844d8a03a8d4c6fc6`

IA-32:
postgresql84-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: bc190abb677d5d8fe0a201129b78a372 SHA-256: 61696551783b65d2671b0b19a970b5324d7b62f0e54075263cd5acedefe69d49`
postgresql84-contrib-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: e9a626e48a07d1581bed81cb2b58ca3c SHA-256: ba3920360be286d4a06b8bf99237889301adff841d6ed9fdc473bca1be6b8ca9`
postgresql84-devel-8.4.4-1.el5_5.1.i386.rpm	`MD5: e6b4d22221efe25467a2406f49f3d7f6 SHA-256: 4aaf3667c63b6a833bce84313ff238b94d1ebd6bd0a196eaed68aaa2c56d85f3`
postgresql84-docs-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 50238aa68fcbff495b4052e407d6f505 SHA-256: bf7c3d34fc2687e01b3678ced0e974776e718a29446fa2a90b6d60c9e2a78219`
postgresql84-libs-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 629c21624ed6bf4fa0a2e2a1313612e4 SHA-256: 28116d8f986ac9e22c37791171a2b5beab907cd8b975f104e200dfb000fa1a9a`
postgresql84-plperl-8.4.4-1.el5_5.1.i386.rpm	`MD5: 1b052ff4e1194ea56db6dc579a7b8b8d SHA-256: 76aa7ca3944e460654a0a24e8a683fbd83caad64eadf8fb0b3ab0367f4387b00`
postgresql84-plpython-8.4.4-1.el5_5.1.i386.rpm	`MD5: 3b67d53cc4dcb7924e21f40466734514 SHA-256: 289b0cc18f0b1017ea134319b7bc903142a729d81d7ae01690330bdfe2f7b9a6`
postgresql84-pltcl-8.4.4-1.el5_5.1.i386.rpm	`MD5: 724062f1dd8684d7069d55d0fb3c2d7d SHA-256: ee7fd1d6b9302088c68e2b49b06275ea9bd9fe2815acc19b720c24ddda052a60`
postgresql84-python-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 0c97e85d08c65b34053841c0ff91b31e SHA-256: 4ac11178797ba1931ea5a24f9001108ed40fca8daf4c9267e9d1087000ee597a`
postgresql84-server-8.4.4-1.el5_5.1.i386.rpm	`MD5: 7a1035eb23db78ce4b6d41e39b755167 SHA-256: 4fede444a9ef05e46b1fd2302f47135cfcde949e74ffdd0df823162ba557b564`
postgresql84-tcl-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 7754a113ce79c69a73efe2e3614e08b6 SHA-256: ee92113d911ed2897077426dddd39422c06bc2a0396bafa533740e6db45f068d`
postgresql84-test-8.4.4-1.el5_5.1.i386.rpm	`MD5: 4a3d6822a23da683658ef7bf9f1adcc7 SHA-256: 9c01f1225d013a6d4a077df37ab41ff1824b002b6c739025b0d0bfa6087a147a`

x86_64:
postgresql84-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: fb41f2729a9f64ba90d3642b0fe8a378 SHA-256: 7202441a0ebc10ea09e42a14a3f26549c3e01145f8775cf07acc90ebb192c74f`
postgresql84-contrib-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 4c7d400de97d71e8ab61f8e9c12d2c37 SHA-256: 2051d0e3cb6bc22f6635122dcfc742c167f228466183f1f40ff445add614951f`
postgresql84-docs-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 327e83a43dfc21cb9570db9623248d01 SHA-256: 42e2a806a7cb0c3dd5091c8cf3185d98c5e49a85aefd8b558e382b33570987fe`
postgresql84-libs-8.4.4-1.el5_5.1.i386.rpm File outdated by: RHSA-2012:1263	`MD5: 629c21624ed6bf4fa0a2e2a1313612e4 SHA-256: 28116d8f986ac9e22c37791171a2b5beab907cd8b975f104e200dfb000fa1a9a`
postgresql84-libs-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 98c497b3e17aa062df44fb361e6614e7 SHA-256: 090bb3446881e823e27704639c24d252b9d0b3867c46a797deba513d06c77f29`
postgresql84-python-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 3fe1c7715b74c7c556c48e956772c47e SHA-256: ad1db66b5b867ba08bc008c6efa55a373e382e95856a1f168a98bbb79a3ddddf`
postgresql84-tcl-8.4.4-1.el5_5.1.x86_64.rpm File outdated by: RHSA-2012:1263	`MD5: 192177a985b120e78de0cc2cbd3ea457 SHA-256: dc1580f28a1f2f0f9f97a6fa6ff23aa9c224f0e18a78d5b39afa405d357ba72b`

(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

582615 - CVE-2010-1169 PostgreSQL: PL/Perl Intended restriction bypass
583072 - CVE-2010-1170 PostgreSQL: PL/Tcl Intended restriction bypass

References

https://www.redhat.com/security/data/cve/CVE-2010-1169.html
https://www.redhat.com/security/data/cve/CVE-2010-1170.html
https://www.redhat.com/security/data/cve/CVE-2010-1975.html
http://www.redhat.com/security/updates/classification/#moderate

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package