Accepted postgresql-9.0 9.0.1-1~bpo50+1 (source all i386)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 06 Oct 2010 15:16:49 +0200
Source: postgresql-9.0
Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-9.0 postgresql-client-9.0 postgresql-server-dev-9.0 postgresql-doc-9.0 postgresql-contrib-9.0 postgresql-plperl-9.0 postgresql-plpython-9.0 postgresql-pltcl-9.0 postgresql postgresql-client postgresql-doc postgresql-contrib
Architecture: source all i386
Version: 9.0.1-1~bpo50+1
Distribution: lenny-backports-sloppy
Urgency: low
Maintainer: Martin Pitt <mpitt@debian.org>
Changed-By: Gerfried Fuchs <rhonda@debian.at>
Description:
libecpg-compat3 - older version of run-time library for ECPG programs
libecpg-dev - development files for ECPG (Embedded PostgreSQL for C)
libecpg6 - run-time library for ECPG programs
libpgtypes3 - shared library libpgtypes for PostgreSQL 9.0
libpq-dev - header files for libpq5 (PostgreSQL library)
libpq5 - PostgreSQL C client library
postgresql - object-relational SQL database (supported version)
postgresql-9.0 - object-relational SQL database, version 9.0 server
postgresql-client - front-end programs for PostgreSQL (supported version)
postgresql-client-9.0 - front-end programs for PostgreSQL 9.0
postgresql-contrib - additional facilities for PostgreSQL (supported version)
postgresql-contrib-9.0 - additional facilities for PostgreSQL
postgresql-doc - documentation for the PostgreSQL database management system
postgresql-doc-9.0 - documentation for the PostgreSQL database management system
postgresql-plperl-9.0 - PL/Perl procedural language for PostgreSQL 9.0
postgresql-plpython-9.0 - PL/Python procedural language for PostgreSQL 9.0
postgresql-pltcl-9.0 - PL/Tcl procedural language for PostgreSQL 9.0
postgresql-server-dev-9.0 - development files for PostgreSQL 9.0 server-side programming
Changes:
postgresql-9.0 (9.0.1-1~bpo50+1) lenny-backports-sloppy; urgency=low
.
* Rebuild for lenny-backports.
.
postgresql-9.0 (9.0.1-1) unstable; urgency=low
.
* New upstream security/bug fix release:
- Use a separate interpreter for each calling SQL userid in PL/Perl
and PL/Tcl.
This change prevents security problems that can be caused by
subverting Perl or Tcl code that will be executed later in the same
session under another SQL user identity (for example, within a
SECURITY DEFINER function). Most scripting languages offer numerous
ways that that might be done, such as redefining standard functions
or operators called by the target function. Without this change,
any SQL user with Perl or Tcl language usage rights can do
essentially anything with the SQL privileges of the target
function's owner.
The cost of this change is that intentional communication among
Perl and Tcl functions becomes more difficult. To provide an escape
hatch, PL/PerlU and PL/TclU functions continue to use only one
interpreter per session. This is not considered a security issue
since all such functions execute at the trust level of a database
superuser already.
It is likely that third-party procedural languages that claim to
offer trusted execution have similar security issues. We advise
contacting the authors of any PL you are depending on for
security-critical purposes.
Our thanks to Tim Bunce for pointing out this issue
(CVE-2010-3433).
- Improve pg_get_expr() security fix so that the function can still
be used on the output of a sub-select.
- Fix incorrect placement of placeholder evaluation.
This bug could result in query outputs being non-null when they
should be null, in cases where the inner side of an outer join is a
sub-select with non-strict expressions in its output list.
- Fix join removal's handling of placeholder expressions.
- Fix possible duplicate scans of UNION ALL member relations.
- Prevent infinite loop in ProcessIncomingNotify() after unlistening.
- Prevent show_session_authorization() from crashing within
autovacuum processes.
- Re-allow input of Julian dates prior to 0001-01-01 AD.
Input such as 'J100000'::date worked before 8.4, but was
unintentionally broken by added error-checking.
- Make psql recognize "DISCARD ALL" as a command that should not be
encased in a transaction block in autocommit-off mode.
- Update build infrastructure and documentation to reflect the source
code repository's move from CVS to Git.
Checksums-Sha1:
2a397d4cb099906f32abf969f727461f95a94fee 2240 postgresql-9.0_9.0.1-1~bpo50+1.dsc
7adeb3c4b661115ec6eb4e5896edfee71f87245e 13773951 postgresql-9.0_9.0.1.orig.tar.bz2
99da044dd798a66938cd4da8569a99583233d228 20270 postgresql-9.0_9.0.1-1~bpo50+1.debian.tar.gz
d7716b4c708b6057e60f107c119eba9fbe63839d 2300140 postgresql-doc-9.0_9.0.1-1~bpo50+1_all.deb
8488e4df9e78c531760ace59478dcc6bf717f3b0 292798 postgresql_9.0.1-1~bpo50+1_all.deb
dcca8c2ee59ea9beee0ba7d76c185605e94e45ad 292764 postgresql-client_9.0.1-1~bpo50+1_all.deb
53c098282efdf3693ea66a62e11f872dad6c57b6 292604 postgresql-doc_9.0.1-1~bpo50+1_all.deb
3c8851020dbe4a0efd7800b85bf17aae594ac45d 292666 postgresql-contrib_9.0.1-1~bpo50+1_all.deb
1c8ebb318262c6a95089cfeb4ea31e336b469d53 506568 libpq-dev_9.0.1-1~bpo50+1_i386.deb
829fac69e678330b4f072941ab494fd400ebbf16 424504 libpq5_9.0.1-1~bpo50+1_i386.deb
7248c3665f7b895db5e59d62e49161ac232ff939 360012 libecpg6_9.0.1-1~bpo50+1_i386.deb
4fb021f751a030b8f49b959ba2615860ada05f3a 536950 libecpg-dev_9.0.1-1~bpo50+1_i386.deb
ad1b8e38da724fc54c6faab128b9d49b60342225 300402 libecpg-compat3_9.0.1-1~bpo50+1_i386.deb
4e9943164538a916652e761223365bca75f33f20 324408 libpgtypes3_9.0.1-1~bpo50+1_i386.deb
0cd6f60f90bf602e7f9066f2c17cf62459b0ef2c 5263078 postgresql-9.0_9.0.1-1~bpo50+1_i386.deb
743209c41735fbc98a207bf39dd01cf0c6174450 1531970 postgresql-client-9.0_9.0.1-1~bpo50+1_i386.deb
8bf5e3596a51bcfd5c5d78b935c31a40a407ad67 927356 postgresql-server-dev-9.0_9.0.1-1~bpo50+1_i386.deb
23e38e348fb836262ec9bd262e4148129301a5dc 683394 postgresql-contrib-9.0_9.0.1-1~bpo50+1_i386.deb
7b39bafaabcc2dcbd868001ccf7b0d95d7397b53 332830 postgresql-plperl-9.0_9.0.1-1~bpo50+1_i386.deb
9fe422e5357db3a73644cb2cb33c12603b84d572 332918 postgresql-plpython-9.0_9.0.1-1~bpo50+1_i386.deb
ec39b9b79c4354fdace818be24561a15fb7d4913 314992 postgresql-pltcl-9.0_9.0.1-1~bpo50+1_i386.deb
Checksums-Sha256:
b6b7b80522f6c090c83082df9cb125dc4a893bba8724de28c576bb34703dbdbb 2240 postgresql-9.0_9.0.1-1~bpo50+1.dsc
5310cd490127845f1473a0f73f7b0d18277d81d51534ddfe17ea3e78286a3196 13773951 postgresql-9.0_9.0.1.orig.tar.bz2
7d1621a08775c85975237198b0b4aa94c2f51f94b9e9ae8fe176708193fd3788 20270 postgresql-9.0_9.0.1-1~bpo50+1.debian.tar.gz
db0ce880569d8240e525b3de981a0c3a5a11750648a505e951f4f8108a92ddea 2300140 postgresql-doc-9.0_9.0.1-1~bpo50+1_all.deb
b9d0e0bc0bd26dd0a2bf0c0e4ba8602be1a4f73c09ab1a88b75f6efd62b1b1ff 292798 postgresql_9.0.1-1~bpo50+1_all.deb
5897d229e8932d5a3b903690b310856f1367088e3407e3711784496890bccfa4 292764 postgresql-client_9.0.1-1~bpo50+1_all.deb
e9f5ff5b777b0e99497be4fa9f04e9a120b56e1f9e2f2d2a8014739cec535eca 292604 postgresql-doc_9.0.1-1~bpo50+1_all.deb
aeb9e6b97cb756bfa9c6febaaeeeba837b3d2827033a5019f27161ad5b8fe87a 292666 postgresql-contrib_9.0.1-1~bpo50+1_all.deb
32a413838eb09528925ac36bc938c4d0dd349bb8da996cd2ac120c41449b60ac 506568 libpq-dev_9.0.1-1~bpo50+1_i386.deb
fff4ff5103910abd040f3cfb53c002f54e1dbba988afd4c4fb77f8d628fc3917 424504 libpq5_9.0.1-1~bpo50+1_i386.deb
7006ff37f66d02b810294a83328e6ab4ff0716e7c842c3c95261c0ff7893913c 360012 libecpg6_9.0.1-1~bpo50+1_i386.deb
eb0cd0f643d7523a6f644d9cde37e4148fd4977fd4811a44d27faa3cf09a4648 536950 libecpg-dev_9.0.1-1~bpo50+1_i386.deb
dd3d0c6339e63082ac9afe7ed62136730ee401150ff11b4409caaf3103ba48bb 300402 libecpg-compat3_9.0.1-1~bpo50+1_i386.deb
98262452d48649f5ccee1b8c5921e4e39dbb03f3747e6f1801d3f9ee943afe6c 324408 libpgtypes3_9.0.1-1~bpo50+1_i386.deb
5b97596f173987d26df8253e3da927ebb22552a6524b62a34e0bf6650196cb50 5263078 postgresql-9.0_9.0.1-1~bpo50+1_i386.deb
60e05b6077f58c82b71ee07eadcf295572721282839e9e27e3e460b3b669e479 1531970 postgresql-client-9.0_9.0.1-1~bpo50+1_i386.deb
8d1d1f0cf2c1a1419663ccba923bc1cd560eba8592f99071f076ac5beca004ba 927356 postgresql-server-dev-9.0_9.0.1-1~bpo50+1_i386.deb
b53d60232866fba81f3d0eb85d35d0b32407f8fd251bdc0bb7e5507b3cd2f16f 683394 postgresql-contrib-9.0_9.0.1-1~bpo50+1_i386.deb
17f9900fb3240e9725bfb055678a159a76a9c5c5be074c23e7de4ae369c2b9ed 332830 postgresql-plperl-9.0_9.0.1-1~bpo50+1_i386.deb
24e98d7853d3e145b1bd770ff1862acb859086dc5cdecebb515324aac8838bb6 332918 postgresql-plpython-9.0_9.0.1-1~bpo50+1_i386.deb
55a3fa8f832e56f99548cd20374618c62716166f9c8de5ba04f277be9ccb3eb8 314992 postgresql-pltcl-9.0_9.0.1-1~bpo50+1_i386.deb
Files:
c138483b63b9853d8a37ca339f3bfc83 2240 database optional postgresql-9.0_9.0.1-1~bpo50+1.dsc
57ba57e43cfe29e16dacbf5789be98d1 13773951 database optional postgresql-9.0_9.0.1.orig.tar.bz2
b9d790689bffef118d1763932b62643a 20270 database optional postgresql-9.0_9.0.1-1~bpo50+1.debian.tar.gz
8125a231eb6d648e2e47fe98a4648631 2300140 doc optional postgresql-doc-9.0_9.0.1-1~bpo50+1_all.deb
91dede6910d2cc6c976a83446820d56c 292798 database optional postgresql_9.0.1-1~bpo50+1_all.deb
53498bb9ad4baba8199838a0a595e18b 292764 database optional postgresql-client_9.0.1-1~bpo50+1_all.deb
ac98d0b4b5f37ad2a798b3e0266f8632 292604 doc optional postgresql-doc_9.0.1-1~bpo50+1_all.deb
de40e5cf171e7c282891e636980e80d3 292666 database optional postgresql-contrib_9.0.1-1~bpo50+1_all.deb
495fbec7b6d58ee92072a52c11c830c1 506568 libdevel optional libpq-dev_9.0.1-1~bpo50+1_i386.deb
bb44b3bca72354ab038b3a7e9e17256d 424504 libs optional libpq5_9.0.1-1~bpo50+1_i386.deb
5a50d11347b1a7624f7a3460ad499e75 360012 libs optional libecpg6_9.0.1-1~bpo50+1_i386.deb
920c259d16e412e60c9b32d153121e39 536950 libdevel optional libecpg-dev_9.0.1-1~bpo50+1_i386.deb
000cf3aac7720bfc294f6769130dc198 300402 libs optional libecpg-compat3_9.0.1-1~bpo50+1_i386.deb
f3a16c3b4d8fc5eac685cb3ad464a01c 324408 libs optional libpgtypes3_9.0.1-1~bpo50+1_i386.deb
c42a835581937d01440ea2da8b55123e 5263078 database optional postgresql-9.0_9.0.1-1~bpo50+1_i386.deb
0ed0a88871ab261796f52b450b846597 1531970 database optional postgresql-client-9.0_9.0.1-1~bpo50+1_i386.deb
51e876ee934293b93c74802c1dac419d 927356 libdevel optional postgresql-server-dev-9.0_9.0.1-1~bpo50+1_i386.deb
b8387f4ebb332a2efae9247cc8380e18 683394 database optional postgresql-contrib-9.0_9.0.1-1~bpo50+1_i386.deb
78766edc9f95fd6e24d74c435597fcc0 332830 database optional postgresql-plperl-9.0_9.0.1-1~bpo50+1_i386.deb
dc20f07213fb7c307c49bb2c329210aa 332918 database optional postgresql-plpython-9.0_9.0.1-1~bpo50+1_i386.deb
781f23053765f3c9039bf2f32900692f 314992 database optional postgresql-pltcl-9.0_9.0.1-1~bpo50+1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iQEcBAEBCAAGBQJMrICZAAoJEDH85+fdB5RhAmMH/RabVexOrzn2HFdOy6qFRFef
+pfxNX0GOmLi24Z7uA7Yxm7VGbhaYMhajli4QL5o/S81kqwkAfWZVHcjFQ8j+VUL
yxSMdUc2qcxvwfKtcKnhCIxB3cqm6RgBOUIzCTXEzfo+Zqcfa3oC2Z/gdWP9afr1
Cx5Ss9LPeded7Rr/x6jbST5/c9z0SarN3W+vfIRoLKEc7f4z0nHiAY8K8SNk/tsr
lfgdvp6o2ma6yKik92Za8Hb8CiFf4CqG+tJwSe+DX6Gp5PF/pLznwigMQ8uLDMdU
W83GRuOUn3o/6MiB9jr7PZ65mMYDOKCqsIBqmHXIxGewrNOsEsum0Zmxmu0fzAk=
=3dFt
-----END PGP SIGNATURE-----
Accepted:
libecpg-compat3_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/libecpg-compat3_9.0.1-1~bpo50+1_i386.deb
libecpg-dev_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/libecpg-dev_9.0.1-1~bpo50+1_i386.deb
libecpg6_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/libecpg6_9.0.1-1~bpo50+1_i386.deb
libpgtypes3_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/libpgtypes3_9.0.1-1~bpo50+1_i386.deb
libpq-dev_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/libpq-dev_9.0.1-1~bpo50+1_i386.deb
libpq5_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/libpq5_9.0.1-1~bpo50+1_i386.deb
postgresql-9.0_9.0.1-1~bpo50+1.debian.tar.gz
to main/p/postgresql-9.0/postgresql-9.0_9.0.1-1~bpo50+1.debian.tar.gz
postgresql-9.0_9.0.1-1~bpo50+1.dsc
to main/p/postgresql-9.0/postgresql-9.0_9.0.1-1~bpo50+1.dsc
postgresql-9.0_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/postgresql-9.0_9.0.1-1~bpo50+1_i386.deb
postgresql-9.0_9.0.1.orig.tar.bz2
to main/p/postgresql-9.0/postgresql-9.0_9.0.1.orig.tar.bz2
postgresql-client-9.0_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/postgresql-client-9.0_9.0.1-1~bpo50+1_i386.deb
postgresql-client_9.0.1-1~bpo50+1_all.deb
to main/p/postgresql-9.0/postgresql-client_9.0.1-1~bpo50+1_all.deb
postgresql-contrib-9.0_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/postgresql-contrib-9.0_9.0.1-1~bpo50+1_i386.deb
postgresql-contrib_9.0.1-1~bpo50+1_all.deb
to main/p/postgresql-9.0/postgresql-contrib_9.0.1-1~bpo50+1_all.deb
postgresql-doc-9.0_9.0.1-1~bpo50+1_all.deb
to main/p/postgresql-9.0/postgresql-doc-9.0_9.0.1-1~bpo50+1_all.deb
postgresql-doc_9.0.1-1~bpo50+1_all.deb
to main/p/postgresql-9.0/postgresql-doc_9.0.1-1~bpo50+1_all.deb
postgresql-plperl-9.0_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/postgresql-plperl-9.0_9.0.1-1~bpo50+1_i386.deb
postgresql-plpython-9.0_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/postgresql-plpython-9.0_9.0.1-1~bpo50+1_i386.deb
postgresql-pltcl-9.0_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/postgresql-pltcl-9.0_9.0.1-1~bpo50+1_i386.deb
postgresql-server-dev-9.0_9.0.1-1~bpo50+1_i386.deb
to main/p/postgresql-9.0/postgresql-server-dev-9.0_9.0.1-1~bpo50+1_i386.deb
postgresql_9.0.1-1~bpo50+1_all.deb
to main/p/postgresql-9.0/postgresql_9.0.1-1~bpo50+1_all.deb
Reply to: