Red Hat Security Advisory: cfme security, bug fix, and enhancement update

CVE-2013-6417 — rubygem-actionpack: unsafe query generation risk (incomplete fix for CVE-2013- 0155) CVE-2014-0060 — postgresql: SET ROLE without ADMIN OPTION allows adding and removing group members CVE-2014-0061 — postgresql: privilege escalation via procedural language validator functions CVE-2014-0062 — postgresql: CREATE INDEX race condition possibly leading to privilege escalation CVE-2014-0063 — postgresql: stack-based buffer overflow in datetime input/output CVE-2014-0064 — postgresql: integer overflows leading to buffer overflows CVE-2014-0065 — postgresql: possible buffer overflow flaws CVE-2014-0066 — postgresql: NULL pointer dereference CVE-2014-0078 — CFME: multiple authorization bypass vulnerabilities in CatalogController CVE-2014-0137 — CFME: ReportController SQL injection CVE-2014-2669 — postgresql: multiple integer overflows in hstore_io.c