Accepted postgresql-8.3 8.3.9-1 (source all i386)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 14 Dec 2009 23:00:56 +0100
Source: postgresql-8.3
Binary: postgresql-8.3 postgresql-client-8.3 postgresql-server-dev-8.3 postgresql-doc-8.3 postgresql-contrib-8.3 postgresql-plperl-8.3 postgresql-plpython-8.3 postgresql-pltcl-8.3
Architecture: source all i386
Version: 8.3.9-1
Distribution: unstable
Urgency: medium
Maintainer: Martin Pitt <mpitt@debian.org>
Changed-By: Martin Pitt <mpitt@debian.org>
Description:
postgresql-8.3 - object-relational SQL database, version 8.3 server
postgresql-client-8.3 - front-end programs for PostgreSQL 8.3
postgresql-contrib-8.3 - additional facilities for PostgreSQL
postgresql-doc-8.3 - documentation for the PostgreSQL database management system
postgresql-plperl-8.3 - PL/Perl procedural language for PostgreSQL 8.3
postgresql-plpython-8.3 - PL/Python procedural language for PostgreSQL 8.3
postgresql-pltcl-8.3 - PL/Tcl procedural language for PostgreSQL 8.3
postgresql-server-dev-8.3 - development files for PostgreSQL 8.3 server-side programming
Closes: 553828
Changes:
postgresql-8.3 (8.3.9-1) unstable; urgency=medium
.
Urgency medium due to security fixes.
.
* New upstream security/bug fix release:
- Protect against indirect security threats caused by index functions
changing session-local state. This change prevents allegedly-immutable
index functions from possibly subverting a superuser's session
(CVE-2009-4136).
- Reject SSL certificates containing an embedded null byte in the
common name (CN) field. This prevents unintended matching of a
certificate to a server or client name during SSL validation
(CVE-2009-4034).
- Fix possible crash during backend-startup-time cache initialization.
- Avoid crash on empty thesaurus dictionary.
- Prevent signals from interrupting VACUUM at unsafe times.
- Fix possible crash due to integer overflow in hash table size
calculation.
- Fix very rare crash in inet/cidr comparisons.
- Ensure that shared tuple-level locks held by prepared transactions
are not ignored.
- Fix premature drop of temporary files used for a cursor that is
accessed within a subtransaction.
- Fix memory leak in syslogger process when rotating to a new CSV
logfile.
- Fix incorrect logic for GiST index page splits, when the split
depends on a non-first column of the index.
- Don't error out if recycling or removing an old WAL file fails at
the end of checkpoint. It's better to treat the problem as non-fatal and
allow the checkpoint to complete. Future checkpoints will retry the
removal. Such problems are not expected in normal operation, but have
been seen to be caused by misdesigned Windows anti-virus and backup
software.
- Fix PAM password processing to be more robust.
- Raise the maximum authentication token (Kerberos ticket) size in
GSSAPI and SSPI authentication methods. While the old 2000-byte limit
was more than enough for Unix Kerberos implementations, tickets issued
by Windows Domain Controllers can be much larger.
- Re-enable collection of access statistics for sequences. This used to
work but was broken in 8.3.
- Fix processing of ownership dependencies during CREATE OR REPLACE
FUNCTION.
- Fix incorrect handling of WHERE "x"="x" conditions.
In some cases these could get ignored as redundant, but they aren't
-- they're equivalent to "x" IS NOT NULL.
- Make text search parser accept underscores in XML attributes.
- Fix encoding handling in xml binary input. If the XML header doesn't
specify an encoding, we now assume UTF-8 by default; the previous
handling was inconsistent.
- Fix bug with calling plperl from plperlu or vice versa.
- Fix session-lifespan memory leak when a PL/Perl function is
redefined.
- Ensure that Perl arrays are properly converted to PostgreSQL arrays
when returned by a set-returning PL/Perl function.
- Fix rare crash in exception processing in PL/Python.
- Make the postmaster ignore any application_name parameter in
connection request packets, to improve compatibility with future
libpq versions.
* debian/control: libreadline5-dev → libreadline-dev. (Closes: #553828)
Checksums-Sha1:
51dfb9e8fe56a9a1be51e4940178e2a34a7f94be 1518 postgresql-8.3_8.3.9-1.dsc
9c0536556707e22b10668c52b0689a0803a9e07e 13850244 postgresql-8.3_8.3.9.orig.tar.gz
614aee1475a3f204a651f11fb1f6c786965eb8ad 44168 postgresql-8.3_8.3.9-1.diff.gz
db240e8171ba425d75e7d1e70aed845e0a74f519 2155802 postgresql-doc-8.3_8.3.9-1_all.deb
bd9e6f7823bf51dbd23f4eb130ee79d8cafb102c 5269042 postgresql-8.3_8.3.9-1_i386.deb
50060843e1518c37ff748f21ff305111737b7a3b 1691164 postgresql-client-8.3_8.3.9-1_i386.deb
e0cecc6c3e121097896dc7c9126334f4e6074046 822172 postgresql-server-dev-8.3_8.3.9-1_i386.deb
a47a3bd83029387fb3eed627596ef29c742721e3 584628 postgresql-contrib-8.3_8.3.9-1_i386.deb
e03e8b9cdd08770b6ac44b880f5391ce99ebca61 274120 postgresql-plperl-8.3_8.3.9-1_i386.deb
8edcc1f2f44274228226fdaec24f76c5eb06df41 267010 postgresql-plpython-8.3_8.3.9-1_i386.deb
792f6e8ac834d65e50552ddf580c4642e7b15b61 266022 postgresql-pltcl-8.3_8.3.9-1_i386.deb
Checksums-Sha256:
ad1a3b4086f34e27661c4f8b90959dd9339fcbbb2fdf0d283b31e842a2dc9f68 1518 postgresql-8.3_8.3.9-1.dsc
e57ca26b47967cbee363275cb5509e7223256441152d1101a320c03e30839544 13850244 postgresql-8.3_8.3.9.orig.tar.gz
bd82d75b88cbf0020b0e98accc1ebb9d4edab13cecf1dc513e2b989424db8e31 44168 postgresql-8.3_8.3.9-1.diff.gz
f00fc7626c38aee702ae1071d9cf4c773d50e0f7124472e4648fdc5b297558ed 2155802 postgresql-doc-8.3_8.3.9-1_all.deb
0ff9a7d504a86319a8ac170b7c9c853815409b2b76ac58d13c8c3bca55c07378 5269042 postgresql-8.3_8.3.9-1_i386.deb
0b55c03f92ea4039dfea7a631bef8b7b89d94a11b82a7bac0e9cf1e564c547a2 1691164 postgresql-client-8.3_8.3.9-1_i386.deb
c055166882f7aebcab4e1fb05dd3573785e4a87a543be454e6aa2778a8e43168 822172 postgresql-server-dev-8.3_8.3.9-1_i386.deb
c5287336bc95b3c451906c45b359f79ba625dd788b1a0a0fd77cfdc263d08972 584628 postgresql-contrib-8.3_8.3.9-1_i386.deb
1b8b969aed03e3868895bf04234e11b3ae69b795e6729ebd4cec3616e228b0ff 274120 postgresql-plperl-8.3_8.3.9-1_i386.deb
758cc4668faa650083a753ff08d6f44c0627bfd67c56103d9674b06a9d4602f3 267010 postgresql-plpython-8.3_8.3.9-1_i386.deb
7b6774d584328dfd50577be4edd89506ea421db1a65e3b82c35ff904c012d3c4 266022 postgresql-pltcl-8.3_8.3.9-1_i386.deb
Files:
8d33ec87e413af400cc52602899ad66c 1518 database optional postgresql-8.3_8.3.9-1.dsc
05088ab3b924a326914572eb77db541b 13850244 database optional postgresql-8.3_8.3.9.orig.tar.gz
a2a371bc61e4cebff40dba1d017cb85e 44168 database optional postgresql-8.3_8.3.9-1.diff.gz
d24ca2033915a8b803cb7507f19813f6 2155802 doc optional postgresql-doc-8.3_8.3.9-1_all.deb
d89e2812eae05f6cbfdba4d1375b6c31 5269042 database optional postgresql-8.3_8.3.9-1_i386.deb
7590c833bca2ea2b369338179346e66f 1691164 database optional postgresql-client-8.3_8.3.9-1_i386.deb
16e3609d9f03dda55ee99b7a1c11e005 822172 libdevel optional postgresql-server-dev-8.3_8.3.9-1_i386.deb
4ba9e73b4ff0a09c5f484a93c40f827c 584628 database optional postgresql-contrib-8.3_8.3.9-1_i386.deb
c6a66c033d9171c6a311839689ff8851 274120 database optional postgresql-plperl-8.3_8.3.9-1_i386.deb
be319d907b8be39747fd0a06d53b5395 267010 database optional postgresql-plpython-8.3_8.3.9-1_i386.deb
545bacddb468f87a1ddf3c655054ced2 266022 database optional postgresql-pltcl-8.3_8.3.9-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAksmyJAACgkQDecnbV4Fd/KcYACfctu1NACkIfQO7cd8s9dZDowc
1cUAoMjL++KjBga9fdUXFRYojBy0yfd0
=vMM8
-----END PGP SIGNATURE-----
Accepted:
postgresql-8.3_8.3.9-1.diff.gz
to main/p/postgresql-8.3/postgresql-8.3_8.3.9-1.diff.gz
postgresql-8.3_8.3.9-1.dsc
to main/p/postgresql-8.3/postgresql-8.3_8.3.9-1.dsc
postgresql-8.3_8.3.9-1_i386.deb
to main/p/postgresql-8.3/postgresql-8.3_8.3.9-1_i386.deb
postgresql-8.3_8.3.9.orig.tar.gz
to main/p/postgresql-8.3/postgresql-8.3_8.3.9.orig.tar.gz
postgresql-client-8.3_8.3.9-1_i386.deb
to main/p/postgresql-8.3/postgresql-client-8.3_8.3.9-1_i386.deb
postgresql-contrib-8.3_8.3.9-1_i386.deb
to main/p/postgresql-8.3/postgresql-contrib-8.3_8.3.9-1_i386.deb
postgresql-doc-8.3_8.3.9-1_all.deb
to main/p/postgresql-8.3/postgresql-doc-8.3_8.3.9-1_all.deb
postgresql-plperl-8.3_8.3.9-1_i386.deb
to main/p/postgresql-8.3/postgresql-plperl-8.3_8.3.9-1_i386.deb
postgresql-plpython-8.3_8.3.9-1_i386.deb
to main/p/postgresql-8.3/postgresql-plpython-8.3_8.3.9-1_i386.deb
postgresql-pltcl-8.3_8.3.9-1_i386.deb
to main/p/postgresql-8.3/postgresql-pltcl-8.3_8.3.9-1_i386.deb
postgresql-server-dev-8.3_8.3.9-1_i386.deb
to main/p/postgresql-8.3/postgresql-server-dev-8.3_8.3.9-1_i386.deb
Reply to: