Accepted python-pgsql 2.4.0-5sarge1 (source all i386)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 3 Jun 2006 01:27:11 +1000
Source: python-pgsql
Binary: python-pgsql python2.1-pgsql python2.3-pgsql python2.2-pgsql
Architecture: source all i386
Version: 2.4.0-5sarge1
Distribution: stable
Urgency: high
Maintainer: Ben Burton <bab@debian.org>
Changed-By: Ben Burton <bab@debian.org>
Description:
python-pgsql - A Python DB-API 2.0 interface to PostgreSQL v7.x
python2.1-pgsql - A Python DB-API 2.0 interface to PostgreSQL v7.x
python2.2-pgsql - A Python DB-API 2.0 interface to PostgreSQL v7.x
python2.3-pgsql - A Python DB-API 2.0 interface to PostgreSQL v7.x
Closes: 369250
Changes:
python-pgsql (2.4.0-5sarge1) stable; urgency=high
.
* In routines PgQuoteString() and PgQuoteBytea(), quotes are now escaped
as '', not as \' (closes: #369250). In some multi-byte encodings you
can exploit \' escaping to inject SQL code, and so \' no longer works
for such client encodings with newer PostgreSQL servers. Thanks to
Martin Pitt for the patch.
* Reference: CVE-2006-2314.
Files:
e1898a53d17f3a2ad684001ce70de7eb 716 python optional python-pgsql_2.4.0-5sarge1.dsc
07f605fc42cdb148d471d78bc4039fd5 11820 python optional python-pgsql_2.4.0-5sarge1.diff.gz
ca6480ec9a67920140dad29884772982 17512 python optional python-pgsql_2.4.0-5sarge1_all.deb
9736ea007546132ebba104739c911a8d 142396 python optional python2.1-pgsql_2.4.0-5sarge1_i386.deb
5c0d4b626a7f6640cfe30a6456c5d557 144704 python optional python2.2-pgsql_2.4.0-5sarge1_i386.deb
0181fc891ac16ed723189b630aabcac1 144722 python optional python2.3-pgsql_2.4.0-5sarge1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
iD8DBQFEhMSMMQNuxza4YcERAiXKAJ9YBOgwXWbEC5zgF5pQ7YfxmzvV+QCcD8Hf
jioszE5XHqLdpBgLJ2IG3hs=
=b2tg
-----END PGP SIGNATURE-----
Accepted:
python-pgsql_2.4.0-5sarge1.diff.gz
to pool/main/p/python-pgsql/python-pgsql_2.4.0-5sarge1.diff.gz
python-pgsql_2.4.0-5sarge1.dsc
to pool/main/p/python-pgsql/python-pgsql_2.4.0-5sarge1.dsc
python-pgsql_2.4.0-5sarge1_all.deb
to pool/main/p/python-pgsql/python-pgsql_2.4.0-5sarge1_all.deb
python2.1-pgsql_2.4.0-5sarge1_i386.deb
to pool/main/p/python-pgsql/python2.1-pgsql_2.4.0-5sarge1_i386.deb
python2.2-pgsql_2.4.0-5sarge1_i386.deb
to pool/main/p/python-pgsql/python2.2-pgsql_2.4.0-5sarge1_i386.deb
python2.3-pgsql_2.4.0-5sarge1_i386.deb
to pool/main/p/python-pgsql/python2.3-pgsql_2.4.0-5sarge1_i386.deb
Reply to: