dbg111-postgresql openSUSE 11.1 An unprivileged, authenticated PostgreSQL user could create a table which references functions with malicious content. Maintenance operations carried out be the database superuser could execute such functions (CVE-2009-4136). Embedded null bytes in the common name of SSL certificates could bypass certificate hostname checks (CVE-2009-4034). postgresql was updated to the next upstream patchlevel update which also includes several bugfixes. See the package changelog for details. postgresql-debuginfo-8.3.9-0.1.1.i586.rpm postgresql-debuginfo-8.3.9-0.1.1.ppc.rpm postgresql-debuginfo-8.3.9-0.1.1.x86_64.rpm postgresql-debugsource-8.3.9-0.1.1.i586.rpm postgresql-debugsource-8.3.9-0.1.1.ppc.rpm postgresql-debugsource-8.3.9-0.1.1.x86_64.rpm