This bug was fixed in the package postgresql-8.4 - 8.4.16-0ubuntu10.04
---------------
postgresql-8.4 (8.4.16-0ubuntu10.04) lucid-security; urgency=low
* New upstream security/bug fix release: (LP: #1116336)
- Prevent execution of enum_recv from SQL
The function was misdeclared, allowing a simple SQL command to crash the
server. In principle an attacker might be able to use it to examine the
contents of server memory. Our thanks to Sumit Soni (via Secunia SVCRP)
for reporting this issue. (CVE-2013-0255)
- See HISTORY/changelog.gz for the other bug fixes.
-- Martin Pitt <[email protected]> Wed, 06 Feb 2013 08:33:25 +0100
** Changed in: postgresql-9.1 (Ubuntu Precise)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1116336
Title:
New upstream microreleases 9.1.8, 8.4.16, 8.3.23
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/postgresql-8.3/+bug/1116336/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
