Errata overview
Errata ID 373
Date 2015-10-14
Source package postgresql-8.4
Fixed in version 8.4.22lts4-0.26.201509171802
Description
This update addresses the following issues:
* Denial of service due to double-free after authentication timeout
  (CVE-2015-3165)
* Information disclosure due to missing checks of return codes from
  the standard library (CVE-2015-3166)
* Inconsistent error messages from contrib/pgcrypto (CVE-2015-3167)
* Fix rare failure to invalidate relation cache init file (Tom Lane)
  With just the wrong timing of concurrent activity, a VACUUM  FULL
  on a system catalog might fail to update the init file that's used to
  avoid cache-loading work for new sessions.  This would result in
  later sessions being unable to access that catalog at all.
  This is a very ancient bug, but it's so hard to trigger that no
  reproducible case had been seen until recently. (No CVE)
Additional notes
CVE ID CVE-2015-3165
CVE-2015-3166
CVE-2015-3167
UCS Bug number #38607