Secunia

Some vulnerabilities have been reported in PostgreSQL, which can be exploited by malicious users to cause a DoS (Denial of Service).

1) An incorrect type check before coercing unknown literals into the ANYARRAY type can be exploited to cause a crash when converting certain literals into ANYARRAY.

2) An error exists within the handling of aggregate functions in UPDATE statements, which can be exploited to crash the server backend.

3) An error within the logging of V3-protocol execute messages of ROLLBACK or COMMIT statements can be exploited to cause a crash.

Solution
Update to version 8.1.5, 8.0.9, 7.4.14, or 7.3.16

Provided and/or discovered by
1) Michael Fuhr
2) Josh Drake and Alvaro Herrera
3) Sergey Koposov

Changelog
Further details available in Customer Area

Original Advisory
http://www.postgresql.org/about/news.664
http://projects.commandprompt.com/public/pgsql/changeset/26457
http://projects.commandprompt.com/public/pgsql/changeset/25504
http://projects.commandprompt.com/public/pgsql/changeset/25953

Deep Links
Links available in Customer Area