Accepted postgresql-8.4 8.4.17-0squeeze1 (source all amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 02 Apr 2013 11:27:17 +0200
Source: postgresql-8.4
Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-8.4 postgresql-client-8.4 postgresql-server-dev-8.4 postgresql-doc-8.4 postgresql-contrib-8.4 postgresql-plperl-8.4 postgresql-plpython-8.4 postgresql-pltcl-8.4 postgresql postgresql-client postgresql-doc postgresql-contrib
Architecture: source all amd64
Version: 8.4.17-0squeeze1
Distribution: stable-security
Urgency: high
Maintainer: Martin Pitt <mpitt@debian.org>
Changed-By: Martin Pitt <mpitt@debian.org>
Description:
libecpg-compat3 - older version of run-time library for ECPG programs
libecpg-dev - development files for ECPG (Embedded PostgreSQL for C)
libecpg6 - run-time library for ECPG programs
libpgtypes3 - shared library libpgtypes for PostgreSQL 8.4
libpq-dev - header files for libpq5 (PostgreSQL library)
libpq5 - PostgreSQL C client library
postgresql - object-relational SQL database (supported version)
postgresql-8.4 - object-relational SQL database, version 8.4 server
postgresql-client - front-end programs for PostgreSQL (supported version)
postgresql-client-8.4 - front-end programs for PostgreSQL 8.4
postgresql-contrib - additional facilities for PostgreSQL (supported version)
postgresql-contrib-8.4 - additional facilities for PostgreSQL
postgresql-doc - documentation for the PostgreSQL database management system
postgresql-doc-8.4 - documentation for the PostgreSQL database management system
postgresql-plperl-8.4 - PL/Perl procedural language for PostgreSQL 8.4
postgresql-plpython-8.4 - PL/Python procedural language for PostgreSQL 8.4
postgresql-pltcl-8.4 - PL/Tcl procedural language for PostgreSQL 8.4
postgresql-server-dev-8.4 - development files for PostgreSQL 8.4 server-side programming
Changes:
postgresql-8.4 (8.4.17-0squeeze1) stable-security; urgency=high
.
* New upstream security/bug fix release:
- Reset OpenSSL randomness state in each postmaster child process.
This avoids a scenario wherein random numbers generated by
"contrib/pgcrypto" functions might be relatively easy for another
database user to guess. The risk is only significant when the
postmaster is configured with ssl = on but most connections don't
use SSL encryption. [CVE-2013-1900]
- Fix GiST indexes to not use "fuzzy" geometric comparisons when it's
not appropriate to do so.
The core geometric types perform comparisons using "fuzzy"
equality, but gist_box_same must do exact comparisons, else GiST
indexes using it might become inconsistent. After installing this
update, users should "REINDEX" any GiST indexes on box, polygon,
circle, or point columns, since all of these use gist_box_same.
- Fix erroneous range-union and penalty logic in GiST indexes that
use "contrib/btree_gist" for variable-width data types, that is
text, bytea, bit, and numeric columns.
These errors could result in inconsistent indexes in which some
keys that are present would not be found by searches, and also in
useless index bloat. Users are advised to "REINDEX" such indexes
after installing this update.
- Fix bugs in GiST page splitting code for multi-column indexes.
These errors could result in inconsistent indexes in which some
keys that are present would not be found by searches, and also in
indexes that are unnecessarily inefficient to search. Users are
advised to "REINDEX" multi-column GiST indexes after installing
this update.
- See HISTORY/changelog.gz for the other bug fixes.
Checksums-Sha1:
7b0f0b862e54e55ac0b96c614f53638f07c54b8c 2532 postgresql-8.4_8.4.17-0squeeze1.dsc
82717f9f7b3cee7810b021fe0c9c3e99430ac79c 18587782 postgresql-8.4_8.4.17.orig.tar.gz
9bd2c83f2275ae9234badfd892b9c2a38ce28ce4 59391 postgresql-8.4_8.4.17-0squeeze1.diff.gz
706a7beb08f205aecb849ad919c6b63c83934e9b 2204278 postgresql-doc-8.4_8.4.17-0squeeze1_all.deb
6ba99ee262810d27970cb50f51738e2b378ced05 32338 postgresql_8.4.17-0squeeze1_all.deb
894ebf9984bc53e48a3d8ef8363bca3386e0fff9 32308 postgresql-client_8.4.17-0squeeze1_all.deb
496561ff794a0c7d0e3cdde101b23545389e1972 32148 postgresql-doc_8.4.17-0squeeze1_all.deb
17b100e2270637e9a3c09a4bcd24bcb3412078f6 32208 postgresql-contrib_8.4.17-0squeeze1_all.deb
88faa36cecef36b570605d1f4c802bfa5295ba87 252750 libpq-dev_8.4.17-0squeeze1_amd64.deb
c60c07c9a4d527479bc1a0324807c98097d66c8a 170538 libpq5_8.4.17-0squeeze1_amd64.deb
c9753db148bc710e0c9055f827430af6fa2d1425 109430 libecpg6_8.4.17-0squeeze1_amd64.deb
3603dda5d491a64ce843c9a95320117b7f0a03b2 270076 libecpg-dev_8.4.17-0squeeze1_amd64.deb
cff14db121da6d7a0fbbed0db02c750d29ee9ab2 40242 libecpg-compat3_8.4.17-0squeeze1_amd64.deb
dea7d017ebd047521cfb4a2a381abf22132f4a63 64032 libpgtypes3_8.4.17-0squeeze1_amd64.deb
07e4f399a36c1bce1467ae7f54d49f8483091c30 5747036 postgresql-8.4_8.4.17-0squeeze1_amd64.deb
bab85be6b973f25ec96d75d4c15dfeb6fdcc6874 1596706 postgresql-client-8.4_8.4.17-0squeeze1_amd64.deb
d898b0dd9a38b3d41f6b242bc7b0578af91df417 651554 postgresql-server-dev-8.4_8.4.17-0squeeze1_amd64.deb
d8d569282e00a69a03946ef1ab7f235f8ba9e465 443398 postgresql-contrib-8.4_8.4.17-0squeeze1_amd64.deb
aebe52ea28fca579882e08cef14c4a0a280d3378 71020 postgresql-plperl-8.4_8.4.17-0squeeze1_amd64.deb
8170add4de405ced140c0829580ccfd0de2b6416 72868 postgresql-plpython-8.4_8.4.17-0squeeze1_amd64.deb
9ccb720488ee8a201187ae2e9a8068a2e2f105f2 55720 postgresql-pltcl-8.4_8.4.17-0squeeze1_amd64.deb
Checksums-Sha256:
32dc5efbf8a17b7be3f7b7aa9cde771185e0300a63e1d162b30d52fd55aeda29 2532 postgresql-8.4_8.4.17-0squeeze1.dsc
f4942d80bf61f488f5b36358c1a3e312172d4d2e6bd26e5727d838a8cb81bc1e 18587782 postgresql-8.4_8.4.17.orig.tar.gz
01a6efc63e860de3e429ae5371c2e302435599316b6837e808fe8e3a29bc066b 59391 postgresql-8.4_8.4.17-0squeeze1.diff.gz
de0cdbe07d1c563337bf961ca485d7c84592e53e9f19259a6bf32ed589616e32 2204278 postgresql-doc-8.4_8.4.17-0squeeze1_all.deb
03eb85c2c64056f7a18a3548f6bdb87c43b5526d4bff204477b818f48a92bf68 32338 postgresql_8.4.17-0squeeze1_all.deb
8437059685780206b450c6cd373764d4e4251a1bfb18473046e626721dc602a4 32308 postgresql-client_8.4.17-0squeeze1_all.deb
b36e14e67597c524a453e0264aa82cda0e58dee43c79145494f7514f9b274c9c 32148 postgresql-doc_8.4.17-0squeeze1_all.deb
51c752342d1496574c3f7f833a3f75a8c15ed8a2b09dbbf30db32da7afa7117e 32208 postgresql-contrib_8.4.17-0squeeze1_all.deb
13a220a847effcf2ad916c745b4a9c71b5fb46122971a478d115ab4bb56631e7 252750 libpq-dev_8.4.17-0squeeze1_amd64.deb
92f877de73780880fd058b0f641b1b2841453495d4a05ff6c7205d86a0db9236 170538 libpq5_8.4.17-0squeeze1_amd64.deb
1cb405c5d0d616d6c5d8cadcda6d80d341751bea1ce31ea6370c25d68ff59a57 109430 libecpg6_8.4.17-0squeeze1_amd64.deb
4802a9ebb2456be5a0f6b1d012a7e1a021ad38b4278f9c186df85c09f6904e1b 270076 libecpg-dev_8.4.17-0squeeze1_amd64.deb
c9b60c7f897994e545e055f38157967af23ac04b136b6698e6f38ad83b0866b8 40242 libecpg-compat3_8.4.17-0squeeze1_amd64.deb
a04b36521ddc816dcf23a070f6608c9c802722bc6552b5e0e46805a94c9b1a19 64032 libpgtypes3_8.4.17-0squeeze1_amd64.deb
8254a073bea7577d1df14666bceba260d9a715f729160e580c5e1eb3deca34d0 5747036 postgresql-8.4_8.4.17-0squeeze1_amd64.deb
c710523e9c939ed0c1ab4cb410e99e0fa18e8b0db1704e5851fb0e64502e58e5 1596706 postgresql-client-8.4_8.4.17-0squeeze1_amd64.deb
2f7a4f7a89ea87ca6aed3ff9c7ecdf13218c15cbfff82364760e01a947712648 651554 postgresql-server-dev-8.4_8.4.17-0squeeze1_amd64.deb
f47309a967e4f785d033181f1d66b36738f36766d4950c4e62c28feab8797e06 443398 postgresql-contrib-8.4_8.4.17-0squeeze1_amd64.deb
3b57f7f070da048e77bfb5de11d3d26f92835df12b8c31ea8784b095f2e011c5 71020 postgresql-plperl-8.4_8.4.17-0squeeze1_amd64.deb
510a3364e7a37ee67c4f4422ebb6d8f3c419e09ec774ee64ba6946bc36c18949 72868 postgresql-plpython-8.4_8.4.17-0squeeze1_amd64.deb
272444ebdd620f5d7ad7aa98ad629e1eb5cc1252c6e9b66fe0caa4be16385b96 55720 postgresql-pltcl-8.4_8.4.17-0squeeze1_amd64.deb
Files:
ab7fa9edafecaac27e09a9bdbb62da2a 2532 database optional postgresql-8.4_8.4.17-0squeeze1.dsc
e128152d990e0bea9fd8372ed2f9a978 18587782 database optional postgresql-8.4_8.4.17.orig.tar.gz
5f657e1310d1e2c043c6cbff2ce0386e 59391 database optional postgresql-8.4_8.4.17-0squeeze1.diff.gz
3f240b0230b74867cdb81e3335af0436 2204278 doc optional postgresql-doc-8.4_8.4.17-0squeeze1_all.deb
0a062dc9cdb6e87abc6b5d641fd1417a 32338 database optional postgresql_8.4.17-0squeeze1_all.deb
04604f9c42390801f728f58c58a483c8 32308 database optional postgresql-client_8.4.17-0squeeze1_all.deb
4bea1f7b5c843c62e944f94084b53267 32148 doc optional postgresql-doc_8.4.17-0squeeze1_all.deb
edf4536f2bfe7e9978fcce28c01535ad 32208 database optional postgresql-contrib_8.4.17-0squeeze1_all.deb
ce78f0a0365404dac834573b96881754 252750 libdevel optional libpq-dev_8.4.17-0squeeze1_amd64.deb
7ff41c591c0da6f83bf002c4947dd215 170538 libs optional libpq5_8.4.17-0squeeze1_amd64.deb
df1388dfedaae2157273a10df4e35112 109430 libs optional libecpg6_8.4.17-0squeeze1_amd64.deb
b76df96e75e64bd2df52cc806e8abf36 270076 libdevel optional libecpg-dev_8.4.17-0squeeze1_amd64.deb
71439d0d557ae4d5dc35a265e4c06000 40242 libs optional libecpg-compat3_8.4.17-0squeeze1_amd64.deb
b1ef863d56b663c6703259c8ea620c0e 64032 libs optional libpgtypes3_8.4.17-0squeeze1_amd64.deb
6a4256d7fb2d3341a8e9425355b1dc5e 5747036 database optional postgresql-8.4_8.4.17-0squeeze1_amd64.deb
44b00519186748395bcea8b11711a016 1596706 database optional postgresql-client-8.4_8.4.17-0squeeze1_amd64.deb
1e457482b3838b56b36fbba57dfe2d46 651554 libdevel optional postgresql-server-dev-8.4_8.4.17-0squeeze1_amd64.deb
0fae915084d2f82678072c2e61409533 443398 database optional postgresql-contrib-8.4_8.4.17-0squeeze1_amd64.deb
6b056bcffedbafa02605a5b524f75c18 71020 database optional postgresql-plperl-8.4_8.4.17-0squeeze1_amd64.deb
17593b30b736ff6f529af5032bc5c159 72868 database optional postgresql-plpython-8.4_8.4.17-0squeeze1_amd64.deb
44981cf6260f3796156da6f381e90a07 55720 database optional postgresql-pltcl-8.4_8.4.17-0squeeze1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=4QBn
-----END PGP SIGNATURE-----
Reply to: