Accepted postgresql-8.1 8.1.4-0bpo1 (source i386 all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Mon, 29 May 2006 22:06:35 +0200
Source: postgresql-8.1
Binary: postgresql-8.1 postgresql-pltcl-8.1 postgresql-plperl-8.1 libpgtypes2 libpq-dev libpq4 postgresql-doc-8.1 postgresql-plpython-8.1 libecpg-compat2 libecpg5 libecpg-dev postgresql-client-8.1 postgresql-server-dev-8.1 postgresql-contrib-8.1
Architecture: source i386 all
Version: 8.1.4-0bpo1
Distribution: sarge-backports
Urgency: medium
Maintainer: Martin Pitt <mpitt@debian.org>
Changed-By: Norbert Tretkowski <nobse@backports.org>
Description:
libecpg-compat2 - older version of run-time library for ECPG programs
libecpg-dev - development files for ECPG (Embedded PostgreSQL for C)
libecpg5 - run-time library for ECPG programs
libpgtypes2 - shared library libpgtypes for PostgreSQL 8.1
libpq-dev - header files for libpq4 (PostgreSQL library)
libpq4 - PostgreSQL C client library
postgresql-8.1 - object-relational SQL database, version 8.1 server
postgresql-client-8.1 - front-end programs for PostgreSQL 8.1
postgresql-contrib-8.1 - additional facilities for PostgreSQL
postgresql-doc-8.1 - documentation for the PostgreSQL database management system
postgresql-plperl-8.1 - PL/Perl procedural language for PostgreSQL 8.1
postgresql-plpython-8.1 - PL/Python procedural language for PostgreSQL 8.1
postgresql-pltcl-8.1 - PL/TCL procedural language for PostgreSQL 8.1
postgresql-server-dev-8.1 - development files for PostgreSQL 8.1 server-side programming
Closes: 362488
Changes:
postgresql-8.1 (8.1.4-0bpo1) sarge-backports; urgency=medium
.
* Rebuilt for sarge.
.
postgresql-8.1 (8.1.4-1) unstable; urgency=medium
.
* New upstream security and bug fix release:
- The server now rejects invalidly-encoded multibyte characters in all
cases to defend against SQL-injection attacks. [CVE-2006-2313]
- Reject unsafe uses of \' in string literals (for client encodings that
allow SQL injection with this, like SJIS, BIG5, GBK, GB18030, or UHC). A
new configuration parameter backslash_quote is available to adjust this
behavior when needed. [CVE-2006-2314]
- Modify libpq's string-escaping routines to be aware of encoding
considerations and standard_conforming_strings
This fixes libpq-using applications for the security issues
described in CVE-2006-2313 and CVE-2006-2314, and also
future-proofs them against the planned changeover to SQL-standard
string literal syntax. Applications that use multiple PostgreSQL
connections concurrently should migrate to PQescapeStringConn() and
PQescapeByteaConn() to ensure that escaping is done correctly for
the settings in use in each database connection. Applications that
do string escaping "by hand" should be modified to rely on library
routines instead.
- Various bug fixes, see upstream changelog for details.
* Remove debian/patches/12-krb5-multiusers.patch: Fixed upstream.
* debian/postgresql-8.1.init: Add a comment to point out that environment
variables need to be set in the 'environment' file, not in the init
script.
* debian/postgresql-8.1.init, debian/postgresql-8.1.postinst: Do not fail if
init.d-functions/maintscripts-functions are not present, which happens if
postgresql-{8.1,common} are removed, but not purged. Closes: #362488
* Bump Standards-Version to 3.7.2.
Files:
e1b2ea6a5ad3a5a85d4c2e6dec6bd9a5 1145 misc optional postgresql-8.1_8.1.4-0bpo1.dsc
c6554a0ef948ab2b18b617954e1788fe 11312643 misc optional postgresql-8.1_8.1.4.orig.tar.gz
7f49710e1223db1c8e3a1ec1e0c0301c 23641 misc optional postgresql-8.1_8.1.4-0bpo1.diff.gz
6dc27986fcd20200514383784db68ca7 1440614 doc optional postgresql-doc-8.1_8.1.4-0bpo1_all.deb
80ed2bf0b879107de2fc973b3cbb6c00 4244804 misc optional postgresql-8.1_8.1.4-0bpo1_i386.deb
d6dd5e0f9ee3621283d00ef3097a890b 1358618 misc optional postgresql-client-8.1_8.1.4-0bpo1_i386.deb
0dc7ed375119c53e31af3f1e3b967957 594894 libdevel optional postgresql-server-dev-8.1_8.1.4-0bpo1_i386.deb
412def19e38c43730b347468d7f56b6e 577624 misc optional postgresql-contrib-8.1_8.1.4-0bpo1_i386.deb
3833d99e010b786f609f48d07a31797b 166984 misc optional postgresql-plperl-8.1_8.1.4-0bpo1_i386.deb
44501d37f2b5c6889e97c277c51f543f 160160 misc optional postgresql-plpython-8.1_8.1.4-0bpo1_i386.deb
6aa6a3c49b8ba4c9da1511269d191491 161602 misc optional postgresql-pltcl-8.1_8.1.4-0bpo1_i386.deb
7d8da7440b67fc20fe57abc449dcb656 313086 libdevel optional libpq-dev_8.1.4-0bpo1_i386.deb
b762f5c5f70c518a38d8804b4f21446a 259158 libs optional libpq4_8.1.4-0bpo1_i386.deb
dfbb12e3f4f503ddc2113ed3888802a1 170212 libs optional libecpg5_8.1.4-0bpo1_i386.deb
7c90e30b14b707852c94784acc697cbd 331438 libdevel optional libecpg-dev_8.1.4-0bpo1_i386.deb
b7c731870ef6587d3ecb4476a3d0fb7f 150650 libs optional libecpg-compat2_8.1.4-0bpo1_i386.deb
716b7d3af91c44c39bb3b7f7f047ba28 173052 libs optional libpgtypes2_8.1.4-0bpo1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
iD8DBQFEgAlbr/RnCw96jQERAjTZAKCBZTYZTaiyogr8uNNuPZIuH41DDwCguKn8
R6PogWnKltXvzx5zMUqG8Hs=
=WTX2
-----END PGP SIGNATURE-----
Accepted:
libecpg-compat2_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/libecpg-compat2_8.1.4-0bpo1_i386.deb
libecpg-dev_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/libecpg-dev_8.1.4-0bpo1_i386.deb
libecpg5_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/libecpg5_8.1.4-0bpo1_i386.deb
libpgtypes2_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/libpgtypes2_8.1.4-0bpo1_i386.deb
libpq-dev_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/libpq-dev_8.1.4-0bpo1_i386.deb
libpq4_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/libpq4_8.1.4-0bpo1_i386.deb
postgresql-8.1_8.1.4-0bpo1.diff.gz
to pool/main/p/postgresql-8.1/postgresql-8.1_8.1.4-0bpo1.diff.gz
postgresql-8.1_8.1.4-0bpo1.dsc
to pool/main/p/postgresql-8.1/postgresql-8.1_8.1.4-0bpo1.dsc
postgresql-8.1_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/postgresql-8.1_8.1.4-0bpo1_i386.deb
postgresql-8.1_8.1.4.orig.tar.gz
to pool/main/p/postgresql-8.1/postgresql-8.1_8.1.4.orig.tar.gz
postgresql-client-8.1_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/postgresql-client-8.1_8.1.4-0bpo1_i386.deb
postgresql-contrib-8.1_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.4-0bpo1_i386.deb
postgresql-doc-8.1_8.1.4-0bpo1_all.deb
to pool/main/p/postgresql-8.1/postgresql-doc-8.1_8.1.4-0bpo1_all.deb
postgresql-plperl-8.1_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.4-0bpo1_i386.deb
postgresql-plpython-8.1_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.4-0bpo1_i386.deb
postgresql-pltcl-8.1_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.4-0bpo1_i386.deb
postgresql-server-dev-8.1_8.1.4-0bpo1_i386.deb
to pool/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.4-0bpo1_i386.deb
Reply to: