Format: 1.8 Date: Tue, 18 May 2021 12:17:37 +0200 Source: postgresql-10 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-10 postgresql-client-10 postgresql-server-dev-10 postgresql-doc-10 postgresql-plperl-10 postgresql-plpython-10 postgresql-plpython3-10 postgresql-pltcl-10 Architecture: amd64 amd64_translations all Version: 10.17-0ubuntu0.18.04.1 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Christian Ehrhardt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 10 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql-10 - object-relational SQL database, version 10 server postgresql-client-10 - front-end programs for PostgreSQL 10 postgresql-doc-10 - documentation for the PostgreSQL database management system postgresql-plperl-10 - PL/Perl procedural language for PostgreSQL 10 postgresql-plpython-10 - PL/Python procedural language for PostgreSQL 10 postgresql-plpython3-10 - PL/Python 3 procedural language for PostgreSQL 10 postgresql-pltcl-10 - PL/Tcl procedural language for PostgreSQL 10 postgresql-server-dev-10 - development files for PostgreSQL 10 server-side programming Launchpad-Bugs-Fixed: 1928773 Changes: postgresql-10 (10.17-0ubuntu0.18.04.1) bionic-security; urgency=medium . * New upstream version (LP: #1928773). . + Prevent integer overflows in array subscripting calculations (Tom Lane) . The array code previously did not complain about cases where an array's lower bound plus length overflows an integer. This resulted in later entries in the array becoming inaccessible (since their subscripts could not be written as integers), but more importantly it confused subsequent assignment operations. This could lead to memory overwrites, with ensuing crashes or unwanted data modifications. (CVE-2021-32027) . + Fix mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (Tom Lane) . If the UPDATE list contains any multi-column sub-selects (which give rise to junk columns in addition to the results proper), the UPDATE path would end up storing tuples that include the values of the extra junk columns. That's fairly harmless in the short run, but if new columns are added to the table then the values would become accessible, possibly leading to malfunctions if they don't match the datatypes of the added columns. . In addition, in versions supporting cross-partition updates, a cross-partition update triggered by such a case had the reverse problem: the junk columns were removed from the target list, typically causing an immediate crash due to malfunction of the multi-column sub-select mechanism. (CVE-2021-32028) . + Details about these and many further changes can be found at: https://www.postgresql.org/docs/10/release-10-17.html Checksums-Sha1: 3e7c6d98f66b5b2159639cf46a6e300200b55e91 16356 libecpg-compat3-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 133f3b8bbe10f587064ed07d17b5b37d351c12e9 12148 libecpg-compat3_10.17-0ubuntu0.18.04.1_amd64.deb 28726f4e7d9b18a640f5a6cd60d0f00a1a325fe4 192204 libecpg-dev-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 4adc31d53fff66265a3dffe0b031696469e7e1f9 229272 libecpg-dev_10.17-0ubuntu0.18.04.1_amd64.deb cfd1dc541255bec3075b9339d2682f9f0d069ff3 91824 libecpg6-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 0072a58e0a3ef99cd9b3a7c18973aa606ca5247e 36664 libecpg6_10.17-0ubuntu0.18.04.1_amd64.deb ebd3a6bcf1391410371020248637507cffbc4d07 61700 libpgtypes3-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb a1dfeaf8af9a34c761577d5b65471e7a478544fc 39060 libpgtypes3_10.17-0ubuntu0.18.04.1_amd64.deb b78476c8cf25dd2c7e5f58c171de915d4f55f502 218176 libpq-dev_10.17-0ubuntu0.18.04.1_amd64.deb 2b793995d7432a57b84826d2d35d31400d56257e 243816 libpq5-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb a35d86fa79600f1f8db2d60a7349c000fcb00c62 107460 libpq5_10.17-0ubuntu0.18.04.1_amd64.deb 60f8b2bd41a9df764b2612b4290a107307204b89 15103492 postgresql-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 22390abe826b6756e31ac0d15af4f2d9968a1fb1 18509 postgresql-10_10.17-0ubuntu0.18.04.1_amd64.buildinfo 2e408583e50c8423d51a99cd9e0441318d2a8535 3768012 postgresql-10_10.17-0ubuntu0.18.04.1_amd64.deb b549fa45b67f95e8c3b0ec53e35b3cf271e73585 7883792 postgresql-10_10.17-0ubuntu0.18.04.1_amd64_translations.tar.gz 012412611a28ae358a26440bf9f7d78f0ad8dff4 1593956 postgresql-client-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 8dd5d2cbb86648c4e1496ed4864aad96beb306f4 939912 postgresql-client-10_10.17-0ubuntu0.18.04.1_amd64.deb 44ee01c33aeae33337ae5646624b891bd86e47f7 1798176 postgresql-doc-10_10.17-0ubuntu0.18.04.1_all.deb e98e83425eea000b7802e3a983b51a19e8fe7f7d 191044 postgresql-plperl-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb d27c15a3bc9f742f4fa560830b8dedbb921f2d5b 44644 postgresql-plperl-10_10.17-0ubuntu0.18.04.1_amd64.deb d6d2bb46bad14c013132bcd67ee22e54e5d8f5da 257436 postgresql-plpython-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 1b0679f8e5e53b4a2218d20fa3e742dcf909225d 52532 postgresql-plpython-10_10.17-0ubuntu0.18.04.1_amd64.deb 2d3deb501c2da4034aa8f012d20ca119a593530c 251192 postgresql-plpython3-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 93c4aa1c7ad5c0ac4485269d5f30b7856666ee21 51128 postgresql-plpython3-10_10.17-0ubuntu0.18.04.1_amd64.deb befe20c6ea632786c8bed2ce3cdc341004163433 88940 postgresql-pltcl-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 41608b4f4f425573d777a98692eb8a11c19e89d8 29536 postgresql-pltcl-10_10.17-0ubuntu0.18.04.1_amd64.deb 7a3ba4c32da2a1a5263a32d630cbf1e4a01fc54b 88384 postgresql-server-dev-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 7f7444cbcdb21d5a61997ae58a1e70b9549c8f0b 838932 postgresql-server-dev-10_10.17-0ubuntu0.18.04.1_amd64.deb Checksums-Sha256: d16d2f03410889fb1fa64b9bf53e9457eebed6cdccc5e592a8db7391b3f49b47 16356 libecpg-compat3-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb dc38d2362a4fe1de5d59dd3b2d086c74ae94cbf15bb4eed33e12c59dea538985 12148 libecpg-compat3_10.17-0ubuntu0.18.04.1_amd64.deb 902e6a77cbf41fa0dbe987beb42b4b7efc2684b874645b342787d3d86ec1841a 192204 libecpg-dev-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb dc0ca5e87dcb63b69c6412a597a38ad2b9d60137a2d16308998d8c3a87716074 229272 libecpg-dev_10.17-0ubuntu0.18.04.1_amd64.deb 3fe2506024c950df2db6e8ce10d9ef53b4043bb2025f56a696005af9a9c7b528 91824 libecpg6-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 71092a09da7bbbd26054a8ec9f56a25135025f75bc41147b28b8d6192986d9a3 36664 libecpg6_10.17-0ubuntu0.18.04.1_amd64.deb 1f03d472f3fdaf1d8b45b005245700750690d908af472701f00457c92b331f6e 61700 libpgtypes3-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 36c2029c59177271423752095876e593735321b39edc67da04cd10940133af71 39060 libpgtypes3_10.17-0ubuntu0.18.04.1_amd64.deb 253f3f7b41ab8735375e7eea87f5bb27bb62025ce589504011ff0d5a8363ad66 218176 libpq-dev_10.17-0ubuntu0.18.04.1_amd64.deb 646176563bcd70cd126b6e4cac4ce18ac7ef90c97faad556c429d801aa1af4dc 243816 libpq5-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb cf48c5fa33d19e92d536ad2849cbb22ec1b86e344c00c0d2f4552e4de0307dbb 107460 libpq5_10.17-0ubuntu0.18.04.1_amd64.deb 9b0fafc900428ba13e57677413acaff53f0a0d27494714866f828aaa83dbf540 15103492 postgresql-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb bd06cb21ed2751e167fbfe5af2f311d57694598a6f71a16dd0562d6835e1aa51 18509 postgresql-10_10.17-0ubuntu0.18.04.1_amd64.buildinfo 59ed9869b9afb6dc5ac0b6bd449252c215cff04b709c7cf10873f2979fac7f6a 3768012 postgresql-10_10.17-0ubuntu0.18.04.1_amd64.deb 1c1e560fa60c2f883ecd0119025cd59735e410805bddadab123e076fdfce3b6c 7883792 postgresql-10_10.17-0ubuntu0.18.04.1_amd64_translations.tar.gz 7550eeb0f0cff5bcfea577677066651a378c54b274d1a1ba43bed4687aee8027 1593956 postgresql-client-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb f3e45b6d432705395e5fcca1359f63e1a3fbaff189b78e60fccfdfd3516dd577 939912 postgresql-client-10_10.17-0ubuntu0.18.04.1_amd64.deb 00fbcc5d4595c6891969469ba09f8ebdb6b2d46e2cfca61b719708f49c880054 1798176 postgresql-doc-10_10.17-0ubuntu0.18.04.1_all.deb 625f114f63cce7965a18314fc69d52cd12da60fbb445c218eda1959fb11448ae 191044 postgresql-plperl-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb da8fb05897eece4bcafb4a3949ecba5507c5143d4a8c21406217c779f0f08877 44644 postgresql-plperl-10_10.17-0ubuntu0.18.04.1_amd64.deb 4dc76c391df16fdecaefa4a759e883c481c3dc00e4e01d64327737b1fde37604 257436 postgresql-plpython-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb c347ca4c1bddfc7a3ded31f3e43866e2904dbeba7c04386d1bde4a4ac70861bd 52532 postgresql-plpython-10_10.17-0ubuntu0.18.04.1_amd64.deb 2c8c440c99c2dbc2ac644ed07cc5d51e496cd8d8664adadfb818b96d1a90527f 251192 postgresql-plpython3-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 068c76e6a8288e5eb3250035f5cb32cfef2e772f4d705a586e114fafe93f136f 51128 postgresql-plpython3-10_10.17-0ubuntu0.18.04.1_amd64.deb f96141016e50eb13efc1a48adcad1ee2b5d7f6e18e5e10751684dc546d5628ba 88940 postgresql-pltcl-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 3693d4ff346152aab7b644eb39afda9f256704c481a56db1da9ab020898be59a 29536 postgresql-pltcl-10_10.17-0ubuntu0.18.04.1_amd64.deb 12610dd6c6433a62bc2caf8f6dd3fa7d927fb29ea470e1b08e2006f15e3ee078 88384 postgresql-server-dev-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 79f3a6ca2e27a43ec07ed32464075f69e807f2a89e8bcdbbc0fdbce321a500ae 838932 postgresql-server-dev-10_10.17-0ubuntu0.18.04.1_amd64.deb Files: a5c48b769effe922fe778fd1e9496ef5 16356 debug optional libecpg-compat3-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 84dc8265fba3e03c0f3641acfa0733f2 12148 libs optional libecpg-compat3_10.17-0ubuntu0.18.04.1_amd64.deb 6b93fe4386c064b91583c532acb29951 192204 debug optional libecpg-dev-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb dc82f6e6d479c14ddb3354faf6aa328d 229272 libdevel optional libecpg-dev_10.17-0ubuntu0.18.04.1_amd64.deb c4f13aeb40496e6a89b4bc3972ddf90e 91824 debug optional libecpg6-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 721d8f0b659d9f4b28710c62fbc74426 36664 libs optional libecpg6_10.17-0ubuntu0.18.04.1_amd64.deb d611ddea11967ea0a82ba82c5b3e1085 61700 debug optional libpgtypes3-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 0445ba236e4ecfd3a3f7346854cda8e5 39060 libs optional libpgtypes3_10.17-0ubuntu0.18.04.1_amd64.deb db075c35224480a00fe490ac1c5f7c17 218176 libdevel optional libpq-dev_10.17-0ubuntu0.18.04.1_amd64.deb 6489e1ed6f3cff15c5a5a927d6f76885 243816 debug optional libpq5-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 50481e835814580c5fb2c461d2ed8e5f 107460 libs optional libpq5_10.17-0ubuntu0.18.04.1_amd64.deb d93ce3052ca83b8193683688a8ba6c0f 15103492 debug optional postgresql-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 9d849bd53f0f18ca24fc56271f7a67c2 18509 database optional postgresql-10_10.17-0ubuntu0.18.04.1_amd64.buildinfo 1efd94e769dbd0a3a1d2a489874ecadd 3768012 database optional postgresql-10_10.17-0ubuntu0.18.04.1_amd64.deb add5007342714cc0b516227d32af8705 7883792 raw-translations - postgresql-10_10.17-0ubuntu0.18.04.1_amd64_translations.tar.gz 23fffd257963c8f1f28f0500372f602e 1593956 debug optional postgresql-client-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb fb0d21b99e2cd90771f90b356ade1f58 939912 database optional postgresql-client-10_10.17-0ubuntu0.18.04.1_amd64.deb 339646bc077402dd152a6bfc6cccff7f 1798176 doc optional postgresql-doc-10_10.17-0ubuntu0.18.04.1_all.deb abed649a8d9608168d9714363ddfdfe0 191044 debug optional postgresql-plperl-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 175dabdc859f06eb37c3edab16ba945e 44644 database optional postgresql-plperl-10_10.17-0ubuntu0.18.04.1_amd64.deb 63c204268e9420bca0b9e95d721bd78a 257436 debug optional postgresql-plpython-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb f618045a0e3e248075fba7feeeb2b6f2 52532 database optional postgresql-plpython-10_10.17-0ubuntu0.18.04.1_amd64.deb c59e82805bd1f38cc80aebeebcc7b36f 251192 debug optional postgresql-plpython3-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 03067c6ba1431097e3e27ea97c923cea 51128 database optional postgresql-plpython3-10_10.17-0ubuntu0.18.04.1_amd64.deb e18f87b362ef1b9605d594420c44b639 88940 debug optional postgresql-pltcl-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 98d5b925c0e5ed7125d6ffc16621547a 29536 database optional postgresql-pltcl-10_10.17-0ubuntu0.18.04.1_amd64.deb c21fde9b09ed4af3eac10995278ff8f7 88384 debug optional postgresql-server-dev-10-dbgsym_10.17-0ubuntu0.18.04.1_amd64.ddeb 4ab42ba4b23cc81bf9e4f0983d226ebb 838932 libdevel optional postgresql-server-dev-10_10.17-0ubuntu0.18.04.1_amd64.deb Original-Maintainer: Debian PostgreSQL Maintainers