Accepted postgresql-8.3 8.3.9-0lenny1 (source all i386)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Tue, 15 Dec 2009 12:03:15 +0100
Source: postgresql-8.3
Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-8.3 postgresql-client-8.3 postgresql-server-dev-8.3 postgresql-doc-8.3 postgresql-contrib-8.3 postgresql-plperl-8.3 postgresql-plpython-8.3 postgresql-pltcl-8.3 postgresql postgresql-client postgresql-doc postgresql-contrib
Architecture: source all i386
Version: 8.3.9-0lenny1
Distribution: stable-security
Urgency: high
Maintainer: Martin Pitt <mpitt@debian.org>
Changed-By: Martin Pitt <mpitt@debian.org>
Description:
libecpg-compat3 - older version of run-time library for ECPG programs
libecpg-dev - development files for ECPG (Embedded PostgreSQL for C)
libecpg6 - run-time library for ECPG programs
libpgtypes3 - shared library libpgtypes for PostgreSQL 8.3
libpq-dev - header files for libpq5 (PostgreSQL library)
libpq5 - PostgreSQL C client library
postgresql - object-relational SQL database (supported version)
postgresql-8.3 - object-relational SQL database, version 8.3 server
postgresql-client - front-end programs for PostgreSQL (supported version)
postgresql-client-8.3 - front-end programs for PostgreSQL 8.3
postgresql-contrib - additional facilities for PostgreSQL (supported version)
postgresql-contrib-8.3 - additional facilities for PostgreSQL
postgresql-doc - documentation for the PostgreSQL database management system
postgresql-doc-8.3 - documentation for the PostgreSQL database management system
postgresql-plperl-8.3 - PL/Perl procedural language for PostgreSQL 8.3
postgresql-plpython-8.3 - PL/Python procedural language for PostgreSQL 8.3
postgresql-pltcl-8.3 - PL/Tcl procedural language for PostgreSQL 8.3
postgresql-server-dev-8.3 - development files for PostgreSQL 8.3 server-side programming
Changes:
postgresql-8.3 (8.3.9-0lenny1) stable-security; urgency=high
.
* New upstream security/bug fix release:
- Protect against indirect security threats caused by index functions
changing session-local state. This change prevents allegedly-immutable
index functions from possibly subverting a superuser's session
(CVE-2009-4136).
- Reject SSL certificates containing an embedded null byte in the
common name (CN) field. This prevents unintended matching of a
certificate to a server or client name during SSL validation
(CVE-2009-4034).
- Fix possible crash during backend-startup-time cache initialization.
- Avoid crash on empty thesaurus dictionary.
- Prevent signals from interrupting VACUUM at unsafe times.
- Fix possible crash due to integer overflow in hash table size
calculation.
- Fix very rare crash in inet/cidr comparisons.
- Ensure that shared tuple-level locks held by prepared transactions
are not ignored.
- Fix premature drop of temporary files used for a cursor that is
accessed within a subtransaction.
- Fix memory leak in syslogger process when rotating to a new CSV
logfile.
- Fix incorrect logic for GiST index page splits, when the split
depends on a non-first column of the index.
- Don't error out if recycling or removing an old WAL file fails at
the end of checkpoint. It's better to treat the problem as non-fatal and
allow the checkpoint to complete. Future checkpoints will retry the
removal. Such problems are not expected in normal operation, but have
been seen to be caused by misdesigned Windows anti-virus and backup
software.
- Fix PAM password processing to be more robust.
- Raise the maximum authentication token (Kerberos ticket) size in
GSSAPI and SSPI authentication methods. While the old 2000-byte limit
was more than enough for Unix Kerberos implementations, tickets issued
by Windows Domain Controllers can be much larger.
- Re-enable collection of access statistics for sequences. This used to
work but was broken in 8.3.
- Fix processing of ownership dependencies during CREATE OR REPLACE
FUNCTION.
- Fix incorrect handling of WHERE "x"="x" conditions.
In some cases these could get ignored as redundant, but they aren't
-- they're equivalent to "x" IS NOT NULL.
- Make text search parser accept underscores in XML attributes.
- Fix encoding handling in xml binary input. If the XML header doesn't
specify an encoding, we now assume UTF-8 by default; the previous
handling was inconsistent.
- Fix bug with calling plperl from plperlu or vice versa.
- Fix session-lifespan memory leak when a PL/Perl function is
redefined.
- Ensure that Perl arrays are properly converted to PostgreSQL arrays
when returned by a set-returning PL/Perl function.
- Fix rare crash in exception processing in PL/Python.
- Make the postmaster ignore any application_name parameter in
connection request packets, to improve compatibility with future
libpq versions.
Checksums-Sha1:
21175b2eeed885cd413fddd0e5ae5c121d285e0b 1665 postgresql-8.3_8.3.9-0lenny1.dsc
9c0536556707e22b10668c52b0689a0803a9e07e 13850244 postgresql-8.3_8.3.9.orig.tar.gz
99beb657fe259cb61b4ade38c1d62b792b5653d9 45140 postgresql-8.3_8.3.9-0lenny1.diff.gz
9b1d7c8a5f8ef921297c8190579e05c7874a8c57 2155508 postgresql-doc-8.3_8.3.9-0lenny1_all.deb
1fb5c4da1ca2293a8393d6fff80269df5a3d3c4c 247844 postgresql_8.3.9-0lenny1_all.deb
b9520930afcaecc078cde81086d7a6eb77b7c025 247808 postgresql-client_8.3.9-0lenny1_all.deb
8666920ff033aaf00fc40a100574c0504f111dc8 247646 postgresql-doc_8.3.9-0lenny1_all.deb
81507c1dca0016b06c9ae3ba4f44be1b7fb91b15 247706 postgresql-contrib_8.3.9-0lenny1_all.deb
268e89ae5b04b1e1dfa3b3818a9a030c35fd0250 441474 libpq-dev_8.3.9-0lenny1_i386.deb
0ff6fb75509c1bd9eaec89baa593f1779b54865f 376552 libpq5_8.3.9-0lenny1_i386.deb
c1cb0a6fcef050808cb5f078e786bfb528c20379 275768 libecpg6_8.3.9-0lenny1_i386.deb
7cc1ce4522e5b5664c8e8fdf076cbdaf9e248d59 458124 libecpg-dev_8.3.9-0lenny1_i386.deb
08a60b9cdf1c326821ae96d9d28324e491377d9c 254864 libecpg-compat3_8.3.9-0lenny1_i386.deb
46b6a6928c51a36ba45c92f274aa5f63bc0a1c1c 276428 libpgtypes3_8.3.9-0lenny1_i386.deb
e19d9b15fddff5c008a99bc5b402fc5b5a54b269 5237200 postgresql-8.3_8.3.9-0lenny1_i386.deb
c05f1b6474c4ca19ad195799c028e37b0ba4c6ea 1664860 postgresql-client-8.3_8.3.9-0lenny1_i386.deb
d3bf8f92e990165b23867f1a551380c515aeded5 819722 postgresql-server-dev-8.3_8.3.9-0lenny1_i386.deb
35275b85c943bbb25549ee2d4958ea05c7ed9452 576904 postgresql-contrib-8.3_8.3.9-0lenny1_i386.deb
62893021cc2fd9413231cd23744b023c5a34d1db 273536 postgresql-plperl-8.3_8.3.9-0lenny1_i386.deb
bf7083b87fddaf71a2cc670b951d5d8bc8d59711 266374 postgresql-plpython-8.3_8.3.9-0lenny1_i386.deb
0fb2d5e58da6472ae0537a2f8f4eb04327b9b53c 265352 postgresql-pltcl-8.3_8.3.9-0lenny1_i386.deb
Checksums-Sha256:
d50b7e25e2021297be6c3128c5d171be33ed7c5a4c98e79a33b4cd95d3b822b1 1665 postgresql-8.3_8.3.9-0lenny1.dsc
e57ca26b47967cbee363275cb5509e7223256441152d1101a320c03e30839544 13850244 postgresql-8.3_8.3.9.orig.tar.gz
c2f87e86aa17e227af56b88d1fae8b4619121a4aa45492702b4927b05bfcccd0 45140 postgresql-8.3_8.3.9-0lenny1.diff.gz
add8fa046da26ea60915e67c874cbd6a5a63a1a5e7b7a9f9c234c7bed6002862 2155508 postgresql-doc-8.3_8.3.9-0lenny1_all.deb
5f35248dfc82f0d608a6692c19f92daa92ba0d163ec82d22bc103e94d0c8be49 247844 postgresql_8.3.9-0lenny1_all.deb
96391e256d7beed683a1295ae1c2137a147f0f069f396ce2d0740a127df110e1 247808 postgresql-client_8.3.9-0lenny1_all.deb
313e7bb21ef07a539712cb7f3f857f3abc60ad47686192fc2876201d02c0ccfa 247646 postgresql-doc_8.3.9-0lenny1_all.deb
a622bd1628e819347d1efb208e8a774314b31afea8824c6611685b69eb20d122 247706 postgresql-contrib_8.3.9-0lenny1_all.deb
adefc192687202346679a0bbcd1c2f7377c1b274f33eadb99a29e5f407d91146 441474 libpq-dev_8.3.9-0lenny1_i386.deb
69aede9954b0da49d02ec717f1d49c3ff263bf42df8c44da927101ceed9c4026 376552 libpq5_8.3.9-0lenny1_i386.deb
114697d44638b15db2e859760a2e90455ecc3ea0821c7e97572ac1d83c7abacb 275768 libecpg6_8.3.9-0lenny1_i386.deb
f6ec0f55dc89d7c570d041025b05b086c34bc3179ed438be27d9149dc7d1a359 458124 libecpg-dev_8.3.9-0lenny1_i386.deb
ee56e838d8035e89d72c31fea8aba27a1bf294a285c3a2397d38fcea58722f3a 254864 libecpg-compat3_8.3.9-0lenny1_i386.deb
2f756ee42fba991f214c74c3b1897c7110a950add01d339641c2ca8768a3c1f3 276428 libpgtypes3_8.3.9-0lenny1_i386.deb
1f9304989355070717259fcc488a50b9f872e951051ca9d5d089baa2614d21fd 5237200 postgresql-8.3_8.3.9-0lenny1_i386.deb
f32bd9ef911875627c12c5c335a3671f17389719fdb4f28892090e1d36a378e8 1664860 postgresql-client-8.3_8.3.9-0lenny1_i386.deb
ab015a01bcd8824ea9d3d39a9419275b3a1c45e51b593bebe71b3adc753a231f 819722 postgresql-server-dev-8.3_8.3.9-0lenny1_i386.deb
0de6f01012bf310ee1ef25f057013d7b0d111cd1308359ea7d481378217be647 576904 postgresql-contrib-8.3_8.3.9-0lenny1_i386.deb
fb8d8e9ff65338dfa75a358310793be95f5b0cd90d642b78755ce226831605cb 273536 postgresql-plperl-8.3_8.3.9-0lenny1_i386.deb
1b122bb2798c4ef82cb88f7cbb2bcc3eabb21ec098a0b18614a8a32e9f55877c 266374 postgresql-plpython-8.3_8.3.9-0lenny1_i386.deb
bacab44305baa5f3e4b696005287743c1a0711354ccf569faba6f087f16a22c6 265352 postgresql-pltcl-8.3_8.3.9-0lenny1_i386.deb
Files:
1ef1bcb1f66dbf3aaedaa438ca96c6ae 1665 misc optional postgresql-8.3_8.3.9-0lenny1.dsc
05088ab3b924a326914572eb77db541b 13850244 misc optional postgresql-8.3_8.3.9.orig.tar.gz
0ab48c65a1c42e677e63c49a3198b65b 45140 misc optional postgresql-8.3_8.3.9-0lenny1.diff.gz
b0c862dd5a120683369859f098d58968 2155508 doc optional postgresql-doc-8.3_8.3.9-0lenny1_all.deb
bb2a8b43ddcfd84d36534748fa282867 247844 misc optional postgresql_8.3.9-0lenny1_all.deb
063f66f5cde6932b9ce8565ec618b259 247808 misc optional postgresql-client_8.3.9-0lenny1_all.deb
92f36e64dd46940994d3d6679c5a370e 247646 doc optional postgresql-doc_8.3.9-0lenny1_all.deb
fcef243b109aadb0afe5e24af72fadfd 247706 misc optional postgresql-contrib_8.3.9-0lenny1_all.deb
7e3641bd006806bac083ff9108c56f16 441474 libdevel optional libpq-dev_8.3.9-0lenny1_i386.deb
9c96aef09b3c784e45c891942d135bfc 376552 libs optional libpq5_8.3.9-0lenny1_i386.deb
4f0e17c03222cb633769cfff540f93e5 275768 libs optional libecpg6_8.3.9-0lenny1_i386.deb
5e4ebbede87bbb425c56802c53b7fbfd 458124 libdevel optional libecpg-dev_8.3.9-0lenny1_i386.deb
0a2a7133b674bab426787ed16cb98ee5 254864 libs optional libecpg-compat3_8.3.9-0lenny1_i386.deb
372deb0521a5c848d745d628c5fa4e3b 276428 libs optional libpgtypes3_8.3.9-0lenny1_i386.deb
bea3a11c86370a7cb86471c70e387f1f 5237200 misc optional postgresql-8.3_8.3.9-0lenny1_i386.deb
137f4ca86aab020004fbfaa0b8664bef 1664860 misc optional postgresql-client-8.3_8.3.9-0lenny1_i386.deb
559ea45c296e95648357fd543ee5e9f0 819722 libdevel optional postgresql-server-dev-8.3_8.3.9-0lenny1_i386.deb
08c665f45f01603dcb4809bfaa926050 576904 misc optional postgresql-contrib-8.3_8.3.9-0lenny1_i386.deb
d8762bca2f54744fbc4783db6ae74708 273536 misc optional postgresql-plperl-8.3_8.3.9-0lenny1_i386.deb
0f02afd659d1d32957ff4ad039c91fc6 266374 misc optional postgresql-plpython-8.3_8.3.9-0lenny1_i386.deb
bea561d80fddd839554d3ca6c93d9ae0 265352 misc optional postgresql-pltcl-8.3_8.3.9-0lenny1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAksncV8ACgkQDecnbV4Fd/IhTwCfWfxByIMGywwGSZVxJ1yBI/i+
CbwAn1GWWyglewU1GUuZPknKEgIB9iVr
=2bav
-----END PGP SIGNATURE-----
Accepted:
libecpg-compat3_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/libecpg-compat3_8.3.9-0lenny1_i386.deb
libecpg-dev_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/libecpg-dev_8.3.9-0lenny1_i386.deb
libecpg6_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/libecpg6_8.3.9-0lenny1_i386.deb
libpgtypes3_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/libpgtypes3_8.3.9-0lenny1_i386.deb
libpq-dev_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/libpq-dev_8.3.9-0lenny1_i386.deb
libpq5_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/libpq5_8.3.9-0lenny1_i386.deb
postgresql-8.3_8.3.9-0lenny1.diff.gz
to main/p/postgresql-8.3/postgresql-8.3_8.3.9-0lenny1.diff.gz
postgresql-8.3_8.3.9-0lenny1.dsc
to main/p/postgresql-8.3/postgresql-8.3_8.3.9-0lenny1.dsc
postgresql-8.3_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/postgresql-8.3_8.3.9-0lenny1_i386.deb
postgresql-client-8.3_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/postgresql-client-8.3_8.3.9-0lenny1_i386.deb
postgresql-client_8.3.9-0lenny1_all.deb
to main/p/postgresql-8.3/postgresql-client_8.3.9-0lenny1_all.deb
postgresql-contrib-8.3_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/postgresql-contrib-8.3_8.3.9-0lenny1_i386.deb
postgresql-contrib_8.3.9-0lenny1_all.deb
to main/p/postgresql-8.3/postgresql-contrib_8.3.9-0lenny1_all.deb
postgresql-doc-8.3_8.3.9-0lenny1_all.deb
to main/p/postgresql-8.3/postgresql-doc-8.3_8.3.9-0lenny1_all.deb
postgresql-doc_8.3.9-0lenny1_all.deb
to main/p/postgresql-8.3/postgresql-doc_8.3.9-0lenny1_all.deb
postgresql-plperl-8.3_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/postgresql-plperl-8.3_8.3.9-0lenny1_i386.deb
postgresql-plpython-8.3_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/postgresql-plpython-8.3_8.3.9-0lenny1_i386.deb
postgresql-pltcl-8.3_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/postgresql-pltcl-8.3_8.3.9-0lenny1_i386.deb
postgresql-server-dev-8.3_8.3.9-0lenny1_i386.deb
to main/p/postgresql-8.3/postgresql-server-dev-8.3_8.3.9-0lenny1_i386.deb
postgresql_8.3.9-0lenny1_all.deb
to main/p/postgresql-8.3/postgresql_8.3.9-0lenny1_all.deb
Reply to: