PostgreSQL "xml_parse()" and "xslt_process()" Vulnerabilities

Two vulnerabilities have been identified in PostgreSQL, which can be exploited by malicious people to disclose certain sensitive information and compromise a user's system.

1. An error within the "xml_parse()" function when parsing DTD data within XML documents can be exploited to read arbitrary files.
2. An error within the "xslt_process()" function when parsing XSLT style sheets can be exploited to e.g. create or overwrite arbitrary files.