Red Hat Security Updates: Evolution and PostgreSQL

Red Hat announced two security updates this morning RHSA-2007:0158 and RHSA-2007:0337. The Red Hat Security Response Team rates both updates as having moderate security impact.

RHSA-2007:0158 Moderate: evolution security update

This security update addresses CVE-2007-1002. A vulnerability exists in the way Evolution parses the category field in a memo. The vulnerability allows arbitrary code to be executed as the user running Evolution. This update only affects Red Hat Enterprise Linux v5. More details can be found on the Red Hat Network.

RHSA-2007:0337 Moderate: postgresql security update

Per CVE-2007-2138, an untrusted search path vulnerability could allow an authenticated user to gain increased privileges when permitted to call a security definer function. This update affects Red Hat Application Stack v1 for Enterprise Linux v4. More details can be found on the Red Hat Network.