-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 15 May 2010 13:31:46 +0200
Source: postgresql-8.4
Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3
postgresql-8.4 postgresql-client-8.4 postgresql-server-dev-8.4
postgresql-doc-8.4 postgresql-contrib-8.4 postgresql-plperl-8.4
postgresql-plpython-8.4 postgresql-pltcl-8.4 postgresql postgresql-client
postgresql-doc postgresql-contrib
Architecture: source all amd64
Version: 8.4.4-1
Distribution: unstable
Urgency: medium
Maintainer: Martin Pitt <mp...@debian.org>
Changed-By: Martin Pitt <mp...@debian.org>
Description:
libecpg-compat3 - older version of run-time library for ECPG programs
libecpg-dev - development files for ECPG (Embedded PostgreSQL for C)
libecpg6 - run-time library for ECPG programs
libpgtypes3 - shared library libpgtypes for PostgreSQL 8.4
libpq-dev - header files for libpq5 (PostgreSQL library)
libpq5 - PostgreSQL C client library
postgresql - object-relational SQL database (supported version)
postgresql-8.4 - object-relational SQL database, version 8.4 server
postgresql-client - front-end programs for PostgreSQL (supported version)
postgresql-client-8.4 - front-end programs for PostgreSQL 8.4
postgresql-contrib - additional facilities for PostgreSQL (supported version)
postgresql-contrib-8.4 - additional facilities for PostgreSQL
postgresql-doc - documentation for the PostgreSQL database management system
postgresql-doc-8.4 - documentation for the PostgreSQL database management
system
postgresql-plperl-8.4 - PL/Perl procedural language for PostgreSQL 8.4
postgresql-plpython-8.4 - PL/Python procedural language for PostgreSQL 8.4
postgresql-pltcl-8.4 - PL/Tcl procedural language for PostgreSQL 8.4
postgresql-server-dev-8.4 - development files for PostgreSQL 8.4 server-side
programming
Changes:
postgresql-8.4 (8.4.4-1) unstable; urgency=medium
.
* Urgency medium due to security fixes.
* New upstream security/bug fix release:
- Enforce restrictions in plperl using an opmask applied to the whole
interpreter, instead of using "Safe.pm".
Recent developments have convinced us that "Safe.pm" is too
insecure to rely on for making plperl trustable. This change
removes use of "Safe.pm" altogether, in favor of using a separate
interpreter with an opcode mask that is always applied. Pleasant
side effects of the change include that it is now possible to use
Perl's strict pragma in a natural way in plperl, and that Perl's $a
and $b variables work as expected in sort routines, and that
function compilation is significantly faster. (CVE-2010-1169)
- Prevent PL/Tcl from executing untrustworthy code from pltcl_modules.
PL/Tcl's feature for autoloading Tcl code from a database table
could be exploited for trojan-horse attacks, because there was no
restriction on who could create or insert into that table. This
change disables the feature unless pltcl_modules is owned by a
superuser. (However, the permissions on the table are not checked,
so installations that really need a less-than-secure modules table
can still grant suitable privileges to trusted non-superusers.)
Also, prevent loading code into the unrestricted "normal" Tcl
interpreter unless we are really going to execute a pltclu
function. (CVE-2010-1170)
- Fix data corruption during WAL replay of ALTER ... SET TABLESPACE.
When archive_mode is on, ALTER ... SET TABLESPACE generates a WAL
record whose replay logic was incorrect. It could write the data to
the wrong place, leading to possibly-unrecoverable data corruption.
Data corruption would be observed on standby slaves, and could
occur on the master as well if a database crash and recovery
occurred after committing the ALTER and before the next checkpoint.
- Fix possible crash if a cache reset message is received during
rebuild of a relcache entry.
This error was introduced in 8.4.3 while fixing a related failure.
- Apply per-function GUC settings while running the language
validator for the function. This avoids failures if the function's code
is invalid without the setting; an example is that SQL functions may not
parse if the search_path is not correct.
- Do constraint exclusion for inherited "UPDATE" and "DELETE" target
tables when constraint_exclusion = partition.
Due to an oversight, this setting previously only caused constraint
exclusion to be checked in "SELECT" commands.
- Do not allow an unprivileged user to reset superuser-only parameter
settings.
Previously, if an unprivileged user ran ALTER USER ... RESET ALL
for himself, or ALTER DATABASE ... RESET ALL for a database he
owns, this would remove all special parameter settings for the user
or database, even ones that are only supposed to be changeable by a
superuser. Now, the "ALTER" will only remove the parameters that
the user has permission to change.
- Avoid possible crash during backend shutdown if shutdown occurs
when a CONTEXT addition would be made to log entries.
In some cases the context-printing function would fail because the
current transaction had already been rolled back when it came time
to print a log message.
- Fix erroneous handling of %r parameter in recovery_end_command.
The value always came out zero.
- Ensure the archiver process responds to changes in archive_command
as soon as possible.
- Fix pl/pgsql's CASE statement to not fail when the case expression
is a query that returns no rows.
- Update pl/perl's "ppport.h" for modern Perl versions.
- Fix assorted memory leaks in pl/python.
- Handle empty-string connect parameters properly in ecpg.
- Prevent infinite recursion in psql when expanding a variable that
refers to itself.
- Fix psql's \copy to not add spaces around a dot within \copy
(select ...).
Addition of spaces around the decimal point in a numeric literal
would result in a syntax error.
- Avoid formatting failure in psql when running in a locale context
that doesn't match the client_encoding.
- Fix unnecessary "GIN indexes do not support whole-index scans"
errors for unsatisfiable queries using "contrib/intarray" operators.
- Ensure that "contrib/pgstattuple" functions respond to cancel
interrupts promptly.
Checksums-Sha1:
39497d3d98305a26f22440971e8cfa2ac5f944fa 1850 postgresql-8.4_8.4.4-1.dsc
2197b971adbb66003c23a17997029f81a74ca8ad 17160058
postgresql-8.4_8.4.4.orig.tar.gz
aa975e0ff5d68d1b9828d935e95f2c378bb2be13 35581 postgresql-8.4_8.4.4-1.diff.gz
58dd36d9186dc4c09018532dc671aa18ad97b96d 2109342
postgresql-doc-8.4_8.4.4-1_all.deb
222d6b88fa9e0b3d3b9e50b9a25f07e870488cc1 14912 postgresql_8.4.4-1_all.deb
5dad9efb12c752581cfbee321fd2d99eab9fe735 14880
postgresql-client_8.4.4-1_all.deb
8a0d0008cb0e484cc5d671f16ead89fb9e78bdbd 14722 postgresql-doc_8.4.4-1_all.deb
db0ca8d537d35d3bca963979dcd891d052b40985 14778
postgresql-contrib_8.4.4-1_all.deb
9394e18f210f7cf9b37197581b543920af0981e5 233926 libpq-dev_8.4.4-1_amd64.deb
c6193a84af6635923006445f1282f0ce30095387 139734 libpq5_8.4.4-1_amd64.deb
09cd1e58b5d5d57337ea74dc3f542c65985442d0 75162 libecpg6_8.4.4-1_amd64.deb
33484d3473c2666f2cb0e992003cc5250bebed4e 252512 libecpg-dev_8.4.4-1_amd64.deb
81f316b59fed82868f8cada8cabd55efc58ee06a 22790
libecpg-compat3_8.4.4-1_amd64.deb
62acd6e23d2a858934c9fe3347f333234e092f1c 46370 libpgtypes3_8.4.4-1_amd64.deb
c59fdc9c39e38fd42aad58d7d4f237bae5388e91 5049866
postgresql-8.4_8.4.4-1_amd64.deb
b1ec183d2eb662551ffb9e9a57bd2dea7a48327f 1353498
postgresql-client-8.4_8.4.4-1_amd64.deb
6b07c0f363541b686493576d111efca5a40159fc 632236
postgresql-server-dev-8.4_8.4.4-1_amd64.deb
45398ecbe8ebdf162860868618ec548c80d5af1a 424284
postgresql-contrib-8.4_8.4.4-1_amd64.deb
cb4cc8787a5087c9b97800ca194283678136a89f 50596
postgresql-plperl-8.4_8.4.4-1_amd64.deb
346bfd72f48dc218369b2ecf43c959b0db5c9672 51008
postgresql-plpython-8.4_8.4.4-1_amd64.deb
2b569cdf076d343704053441d0ca71219a4cd4af 37504
postgresql-pltcl-8.4_8.4.4-1_amd64.deb
Checksums-Sha256:
c6cbbdb02d721149990509460802a7c1447eb905f8c798553c27a08b799692d4 1850
postgresql-8.4_8.4.4-1.dsc
5f465a7231964dda5c15800436863d9d3558c869764eec327bdbc2702754dad9 17160058
postgresql-8.4_8.4.4.orig.tar.gz
20047ca6c574b3e9870d1e79c39c3c33b71b1fafd648b0b5c44a763675044342 35581
postgresql-8.4_8.4.4-1.diff.gz
9bf150942ad93990981253a316f850c8c81b8e2628ed60c6466f84d375d163fc 2109342
postgresql-doc-8.4_8.4.4-1_all.deb
bfe4779553b0a8cf21a9903941493ddb5af1ac5405984406d5df14fd8bcc619f 14912
postgresql_8.4.4-1_all.deb
d5afda1a54500098a106765bce8e55cec7b5f506db7c8fe6566d45e026e4d732 14880
postgresql-client_8.4.4-1_all.deb
96f2344d218584ccbe399602545b9828a12d1f214e00758b9a7c2d74d182f692 14722
postgresql-doc_8.4.4-1_all.deb
b92ef3c2008b4175d1ba6d82fde1faee3665d8e676184d36101abaada6904e1a 14778
postgresql-contrib_8.4.4-1_all.deb
4b2f6eee0a8b3e488cfc7e58fd3b72a72e1c418dd7dccde4ee79e36a5b01d5d3 233926
libpq-dev_8.4.4-1_amd64.deb
37289e0367595e034837a29e44bec1295ac64307d9458b9d0345575d177acef2 139734
libpq5_8.4.4-1_amd64.deb
b55a07f273866e2870d3d63ee37074eb4dfd4e23f464e7708f8677b9bcd02b7a 75162
libecpg6_8.4.4-1_amd64.deb
8a9f215948d1c451ec91e97181c0a00ec718fc3424f7ac8dd3fc716257d1bd2f 252512
libecpg-dev_8.4.4-1_amd64.deb
2e07bf38aca6e11263b5893656898c6769f8c3fb15e1fa832a5af1c339c8f02d 22790
libecpg-compat3_8.4.4-1_amd64.deb
ae2b8f611250277406bebd2a05ecba949853fbf5f3ff2f934b307e129790d430 46370
libpgtypes3_8.4.4-1_amd64.deb
534661a6fa0b9419363e92e3094c6c0e04b6cf6874e3c327a31b3d7180b3c3db 5049866
postgresql-8.4_8.4.4-1_amd64.deb
fefb2ebc42d9962419306f1f69e9807d38e78b9ccacdb0fc40290d3478699393 1353498
postgresql-client-8.4_8.4.4-1_amd64.deb
66031edc03e6bfdca015202bcf682a8a90485f251f58d4468016515ed4f3ea75 632236
postgresql-server-dev-8.4_8.4.4-1_amd64.deb
1386f026d7d13d96372c62f382fc4fc402f4ffb6f86c450647a09e528516b444 424284
postgresql-contrib-8.4_8.4.4-1_amd64.deb
ee056d19d8ea895673d2c8dcfe53bb1c56cb11137972afb9af0a450e315e7111 50596
postgresql-plperl-8.4_8.4.4-1_amd64.deb
8fe96de29cdd5ca82b6d15c68de08a93be00ea2cd1ec09636a98c97e2673d7f5 51008
postgresql-plpython-8.4_8.4.4-1_amd64.deb
41ead4b40811e181b565e2d85fb35f308639cdefbebefeec3612da8d7420c85e 37504
postgresql-pltcl-8.4_8.4.4-1_amd64.deb
Files:
eb5ff35e71d212d473c45d9f39f4e4c9 1850 database optional
postgresql-8.4_8.4.4-1.dsc
ae7f305eb9388b187e8f07dee0cec55c 17160058 database optional
postgresql-8.4_8.4.4.orig.tar.gz
a204f01b480dbfb34d021b99269c3ce6 35581 database optional
postgresql-8.4_8.4.4-1.diff.gz
189ce0e17bf4cd5f0a8c9dc8e7bf00b6 2109342 doc optional
postgresql-doc-8.4_8.4.4-1_all.deb
0042683ac521c2c3315af41753a32813 14912 database optional
postgresql_8.4.4-1_all.deb
600da275c21e5021d2a2985e4cfdfad1 14880 database optional
postgresql-client_8.4.4-1_all.deb
e39f4bdf7584ebf9e9117de029dad56b 14722 doc optional
postgresql-doc_8.4.4-1_all.deb
727ad34d06726214fc7c08f0a1dd7b54 14778 database optional
postgresql-contrib_8.4.4-1_all.deb
c350d80a3ce26b7eed3334272d954548 233926 libdevel optional
libpq-dev_8.4.4-1_amd64.deb
0e1a4fa1ff3cf3052159c05abc436f71 139734 libs optional libpq5_8.4.4-1_amd64.deb
7c34aefd2c5c6cd9710a4160b9b86abe 75162 libs optional libecpg6_8.4.4-1_amd64.deb
07ea2ca25daa9327303270add432dd99 252512 libdevel optional
libecpg-dev_8.4.4-1_amd64.deb
e312baf78fe1fcbfa0fe8f9a9027f49d 22790 libs optional
libecpg-compat3_8.4.4-1_amd64.deb
d6d7aa20fd3bd757aa9ae0a520c0ac56 46370 libs optional
libpgtypes3_8.4.4-1_amd64.deb
f03df85ee36d3c515b15f0ff756961b4 5049866 database optional
postgresql-8.4_8.4.4-1_amd64.deb
fe91a6d0e352e904a65ca2f3e50aaa7b 1353498 database optional
postgresql-client-8.4_8.4.4-1_amd64.deb
7a2dfb5bfe9b7128ee1465b86c36d110 632236 libdevel optional
postgresql-server-dev-8.4_8.4.4-1_amd64.deb
d3db6936b8adabe10c0a9d81ab3b46c6 424284 database optional
postgresql-contrib-8.4_8.4.4-1_amd64.deb
3877eff68469e0945c28465d9c16f5a4 50596 database optional
postgresql-plperl-8.4_8.4.4-1_amd64.deb
10bd1ad41574efa37c9f17c03934995d 51008 database optional
postgresql-plpython-8.4_8.4.4-1_amd64.deb
e54d44e798b13a18dedb2a2dac0a9146 37504 database optional
postgresql-pltcl-8.4_8.4.4-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkvvspYACgkQDecnbV4Fd/JEYQCeJy1bYaUmBgBlszn2jg9rfHYJ
WlAAn1puB0j/RDh5Ama9/Wo8I9fXmpoO
=xr0h
-----END PGP SIGNATURE-----
Accepted:
libecpg-compat3_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/libecpg-compat3_8.4.4-1_amd64.deb
libecpg-dev_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/libecpg-dev_8.4.4-1_amd64.deb
libecpg6_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/libecpg6_8.4.4-1_amd64.deb
libpgtypes3_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/libpgtypes3_8.4.4-1_amd64.deb
libpq-dev_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/libpq-dev_8.4.4-1_amd64.deb
libpq5_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/libpq5_8.4.4-1_amd64.deb
postgresql-8.4_8.4.4-1.diff.gz
to main/p/postgresql-8.4/postgresql-8.4_8.4.4-1.diff.gz
postgresql-8.4_8.4.4-1.dsc
to main/p/postgresql-8.4/postgresql-8.4_8.4.4-1.dsc
postgresql-8.4_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/postgresql-8.4_8.4.4-1_amd64.deb
postgresql-8.4_8.4.4.orig.tar.gz
to main/p/postgresql-8.4/postgresql-8.4_8.4.4.orig.tar.gz
postgresql-client-8.4_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/postgresql-client-8.4_8.4.4-1_amd64.deb
postgresql-client_8.4.4-1_all.deb
to main/p/postgresql-8.4/postgresql-client_8.4.4-1_all.deb
postgresql-contrib-8.4_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/postgresql-contrib-8.4_8.4.4-1_amd64.deb
postgresql-contrib_8.4.4-1_all.deb
to main/p/postgresql-8.4/postgresql-contrib_8.4.4-1_all.deb
postgresql-doc-8.4_8.4.4-1_all.deb
to main/p/postgresql-8.4/postgresql-doc-8.4_8.4.4-1_all.deb
postgresql-doc_8.4.4-1_all.deb
to main/p/postgresql-8.4/postgresql-doc_8.4.4-1_all.deb
postgresql-plperl-8.4_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/postgresql-plperl-8.4_8.4.4-1_amd64.deb
postgresql-plpython-8.4_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/postgresql-plpython-8.4_8.4.4-1_amd64.deb
postgresql-pltcl-8.4_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/postgresql-pltcl-8.4_8.4.4-1_amd64.deb
postgresql-server-dev-8.4_8.4.4-1_amd64.deb
to main/p/postgresql-8.4/postgresql-server-dev-8.4_8.4.4-1_amd64.deb
postgresql_8.4.4-1_all.deb
to main/p/postgresql-8.4/postgresql_8.4.4-1_all.deb
--
To UNSUBSCRIBE, email to debian-devel-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1oe4qm-00008y...@ries.debian.org
