postgresql-8.4 (8.4.22-0ubuntu0.12.04) precise-proposed; urgency=medium
* New upstream bug fix release: (LP: #1348176)
- Various data integrity and other bug fixes.
- Secure Unix-domain sockets of temporary postmasters started during make
check.
Any local user able to access the socket file could connect as the
server's bootstrap superuser, then proceed to execute arbitrary code as
the operating-system user running the test, as we previously noted in
CVE-2014-0067. This change defends against that risk by placing the
server's socket in a temporary, mode 0700 subdirectory of /tmp.
- See release notes for details:
http://www.postgresql.org/docs/current/static/release-8-4-22.html
* Drop pg_regress patch to run tests with socket in /tmp, obsolete with
above upstream changes and not applicable any more.
Date: Tue, 29 Jul 2014 14:47:30 +0200
Changed-By: Martin Pitt <[email protected]>
Maintainer: Ubuntu Developers <[email protected]>
https://launchpad.net/ubuntu/precise/+source/postgresql-8.4/8.4.22-0ubuntu0.12.04
Format: 1.8
Date: Tue, 29 Jul 2014 14:47:30 +0200
Source: postgresql-8.4
Binary: postgresql-8.4 postgresql-client-8.4 postgresql-server-dev-8.4
postgresql-doc-8.4 postgresql-contrib-8.4 postgresql-plperl-8.4
postgresql-plpython-8.4 postgresql-pltcl-8.4
Architecture: source
Version: 8.4.22-0ubuntu0.12.04
Distribution: precise-proposed
Urgency: medium
Maintainer: Ubuntu Developers <[email protected]>
Changed-By: Martin Pitt <[email protected]>
Description:
postgresql-8.4 - object-relational SQL database, version 8.4 server
postgresql-client-8.4 - front-end programs for PostgreSQL 8.4
postgresql-contrib-8.4 - additional facilities for PostgreSQL
postgresql-doc-8.4 - documentation for the PostgreSQL database management
system
postgresql-plperl-8.4 - PL/Perl procedural language for PostgreSQL 8.4
postgresql-plpython-8.4 - PL/Python procedural language for PostgreSQL 8.4
postgresql-pltcl-8.4 - PL/Tcl procedural language for PostgreSQL 8.4
postgresql-server-dev-8.4 - development files for PostgreSQL 8.4 server-side
programming
Launchpad-Bugs-Fixed: 1348176
Changes:
postgresql-8.4 (8.4.22-0ubuntu0.12.04) precise-proposed; urgency=medium
.
* New upstream bug fix release: (LP: #1348176)
- Various data integrity and other bug fixes.
- Secure Unix-domain sockets of temporary postmasters started during make
check.
Any local user able to access the socket file could connect as the
server's bootstrap superuser, then proceed to execute arbitrary code as
the operating-system user running the test, as we previously noted in
CVE-2014-0067. This change defends against that risk by placing the
server's socket in a temporary, mode 0700 subdirectory of /tmp.
- See release notes for details:
http://www.postgresql.org/docs/current/static/release-8-4-22.html
* Drop pg_regress patch to run tests with socket in /tmp, obsolete with
above upstream changes and not applicable any more.
Checksums-Sha1:
54aaf1485d02e663536cb943413051a6c2e0a634 2859
postgresql-8.4_8.4.22-0ubuntu0.12.04.dsc
5e0aefc6d056a914bf4acc18e3a518d00d27a240 18332542
postgresql-8.4_8.4.22.orig.tar.gz
aa38d91b3bc9bd509bf6348a54704e0a3f482f10 51514
postgresql-8.4_8.4.22-0ubuntu0.12.04.diff.gz
Checksums-Sha256:
e1cdd6d3883135a280bcfc9554c79544a10964f27f051c6e327609562d3de58c 2859
postgresql-8.4_8.4.22-0ubuntu0.12.04.dsc
dda6dee53751ef6803f8a38e11d9621b8b02a9b0d7cbb2f4cff27d25d92b0a05 18332542
postgresql-8.4_8.4.22.orig.tar.gz
07a7fa47919b28a7f4f75d47f22b03e43f4b7ce80e9d2a39f0eac31bff876dbb 51514
postgresql-8.4_8.4.22-0ubuntu0.12.04.diff.gz
Files:
ca890485c2e518381d2b6109709afcd3 2859 database optional
postgresql-8.4_8.4.22-0ubuntu0.12.04.dsc
26960b858a1b76e88a1c3a9dd495fe80 18332542 database optional
postgresql-8.4_8.4.22.orig.tar.gz
9c299a05239609b87df8eb9b0dce239d 51514 database optional
postgresql-8.4_8.4.22-0ubuntu0.12.04.diff.gz
Original-Maintainer: Martin Pitt <[email protected]>
--
Precise-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes
