Format: 1.8 Date: Tue, 18 May 2021 12:13:14 +0200 Source: postgresql-12 Binary: libecpg-compat3 libecpg-dev libecpg6 libpgtypes3 libpq-dev libpq5 postgresql-12 postgresql-client-12 postgresql-plperl-12 postgresql-plpython3-12 postgresql-pltcl-12 postgresql-server-dev-12 Architecture: i386 i386_translations Version: 12.7-0ubuntu0.20.04.1 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Christian Ehrhardt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 12 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql-12 - object-relational SQL database, version 12 server postgresql-client-12 - front-end programs for PostgreSQL 12 postgresql-plperl-12 - PL/Perl procedural language for PostgreSQL 12 postgresql-plpython3-12 - PL/Python 3 procedural language for PostgreSQL 12 postgresql-pltcl-12 - PL/Tcl procedural language for PostgreSQL 12 postgresql-server-dev-12 - development files for PostgreSQL 12 server-side programming Launchpad-Bugs-Fixed: 1928773 Changes: postgresql-12 (12.7-0ubuntu0.20.04.1) focal-security; urgency=medium . * New upstream version (LP: #1928773). . + Prevent integer overflows in array subscripting calculations (Tom Lane) . The array code previously did not complain about cases where an array's lower bound plus length overflows an integer. This resulted in later entries in the array becoming inaccessible (since their subscripts could not be written as integers), but more importantly it confused subsequent assignment operations. This could lead to memory overwrites, with ensuing crashes or unwanted data modifications. (CVE-2021-32027) . + Fix mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (Tom Lane) . If the UPDATE list contains any multi-column sub-selects (which give rise to junk columns in addition to the results proper), the UPDATE path would end up storing tuples that include the values of the extra junk columns. That's fairly harmless in the short run, but if new columns are added to the table then the values would become accessible, possibly leading to malfunctions if they don't match the datatypes of the added columns. . In addition, in versions supporting cross-partition updates, a cross-partition update triggered by such a case had the reverse problem: the junk columns were removed from the target list, typically causing an immediate crash due to malfunction of the multi-column sub-select mechanism. (CVE-2021-32028) . + Fix possibly-incorrect computation of UPDATE ... RETURNING outputs for joined cross-partition updates (Amit Langote, Etsuro Fujita) . If an UPDATE for a partitioned table caused a row to be moved to another partition with a physically different row type (for example, one with a different set of dropped columns), computation of RETURNING results for that row could produce errors or wrong answers. No error is observed unless the UPDATE involves other tables being joined to the target table. (CVE-2021-32029) . + Details about these and many further changes can be found at: https://www.postgresql.org/docs/12/release-12-7.html Checksums-Sha1: 24f7fbd48562f4157acea8f2c2abaddd046b9c85 16444 libecpg-compat3-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb d246b3cdf52468b4aa0f8febc057796df7eaf5c5 13212 libecpg-compat3_12.7-0ubuntu0.20.04.1_i386.deb 5b50d935ce1a05a1afa61200b79f3f1f6358ccbc 245948 libecpg-dev-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 4b68485bc4f2aeff08e455c3908a30caa58638ba 251168 libecpg-dev_12.7-0ubuntu0.20.04.1_i386.deb 72ffe230b5b7de8f5e2744c5c0a1cc13451decb9 117428 libecpg6-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 015667e9e3ec1e21ad827a5f3d2ffec45bffe230 46844 libecpg6_12.7-0ubuntu0.20.04.1_i386.deb 57b2c0c5687648bfea8875445be7dec20690f4d7 84436 libpgtypes3-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb b63b7ad237030405ca8937feeadb4fe5f10a2829 47032 libpgtypes3_12.7-0ubuntu0.20.04.1_i386.deb 5174b8e605644dac748359bd3c2093e137280f5d 145560 libpq-dev_12.7-0ubuntu0.20.04.1_i386.deb 6c9e2bdedaae8c0e9ffd0bbf3c22e89c3603a94c 284824 libpq5-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 04c26599e3cd5945fa0b3f416435ab8901de260d 123996 libpq5_12.7-0ubuntu0.20.04.1_i386.deb ca456b7c3af044ce3bbfe95557632492bd147a26 20041280 postgresql-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb d1305852177d87004d5412ed6a415888123a40e4 16361 postgresql-12_12.7-0ubuntu0.20.04.1_i386.buildinfo e99015ea0ae2a8d67375acd263e909d758a3c078 13645316 postgresql-12_12.7-0ubuntu0.20.04.1_i386.deb 854a0f9940b76aed62a6e9ee18d31f1f81508f70 8553431 postgresql-12_12.7-0ubuntu0.20.04.1_i386_translations.tar.gz bb848d59ead6d713924b3c7951f4e29082cb2fb4 1835148 postgresql-client-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb bd1090c963ac56acf8b6116f243d2ca3debe7a4d 1068540 postgresql-client-12_12.7-0ubuntu0.20.04.1_i386.deb cd2127a503f43a8215911c2a817142afca8ae480 242020 postgresql-plperl-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb fbbf872496d58db76f492157dc1934f2b921fabd 70940 postgresql-plperl-12_12.7-0ubuntu0.20.04.1_i386.deb 408ab274c36d38d88b4d909c5790c0bec0729fcc 332484 postgresql-plpython3-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 132a05604a1a58f2e72cc82e4d5e3bfefb4f2169 77832 postgresql-plpython3-12_12.7-0ubuntu0.20.04.1_i386.deb 6ff2299f53c3d963d817e7a209ffd750c682de1e 96408 postgresql-pltcl-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb cda67a13724e759ed9392ebc6062024fe9b3aa65 31768 postgresql-pltcl-12_12.7-0ubuntu0.20.04.1_i386.deb be8c2cc2c4ce2b63c1018bbde2eb012cb8208806 927716 postgresql-server-dev-12_12.7-0ubuntu0.20.04.1_i386.deb Checksums-Sha256: dc28824404104902039014289dfa8469c2bfe98722f67ad5f132d955e93a5f83 16444 libecpg-compat3-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 746fb1e63d18b2fca13a13b236a0bd7963623732b85f3870ed2165c47488ceab 13212 libecpg-compat3_12.7-0ubuntu0.20.04.1_i386.deb 2df19c16e4bbb296875d1631df566f8b0a31599420f24816ff8de384aff460c1 245948 libecpg-dev-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 15608aeba4e3572b11b83b33481b68399b8559408e66c612a4e0b4db96444b6e 251168 libecpg-dev_12.7-0ubuntu0.20.04.1_i386.deb 44731e0de10d8676043abe8e3330deff31aa1549e6b2a2cb0811ddf46f112514 117428 libecpg6-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb c4bc3536bffa5bee443cd256f999ce77b86035d5803793e806be49378348e646 46844 libecpg6_12.7-0ubuntu0.20.04.1_i386.deb cb1ef323a6ed7ece1fd4e753739ff7e5d19b25f904e9a18c6ae9df9d06808cb3 84436 libpgtypes3-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 26d9d81cbfff7d07b260be95e6d008e74e4da58fe3087365a2c2fa21ad3ca5cb 47032 libpgtypes3_12.7-0ubuntu0.20.04.1_i386.deb 685f6bfd4a46bcd11c838dc5a302089e7852f783a953c8a38e00ee072f436df2 145560 libpq-dev_12.7-0ubuntu0.20.04.1_i386.deb 10ac670b32e2e12cb69b3caa3c65ed19483818407dc1c5c8dc1d3e5b602e5c41 284824 libpq5-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 04a673d53db27a489f80e2e5d1eabdc48015cf8f2120246a967e3c74f6ee5e2f 123996 libpq5_12.7-0ubuntu0.20.04.1_i386.deb ea2894bc9b7099c5fc9702db1ff13730d04c7188981132c5d8df16d52c373e0b 20041280 postgresql-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb e22f577d948b20d20ec319dacdefc2b4ef34ded496624943f6372573b0d4e29c 16361 postgresql-12_12.7-0ubuntu0.20.04.1_i386.buildinfo db4ae3718b03414ce047930d541f5f9bd5b0707cb134ff27227b81451a012e1d 13645316 postgresql-12_12.7-0ubuntu0.20.04.1_i386.deb 0467d89dd3a12554ac817987da742b088773d5ef7b0f663d0d0a132aaba0ff40 8553431 postgresql-12_12.7-0ubuntu0.20.04.1_i386_translations.tar.gz dfd6c8d9ea2e48551225d72be50def8a5dd8e02fa7ca52957e07357f8827e58b 1835148 postgresql-client-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb ea04dfa7e8311a63139b4d3bd20c5556d41628b5a6d016e631bdec13505e6758 1068540 postgresql-client-12_12.7-0ubuntu0.20.04.1_i386.deb 33f240e7ef1d7677180d2df2d1a38dcae048737fdc4ce1f8d0bf5ea6324a32be 242020 postgresql-plperl-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 2c43637667b777874b5b852a2de86262196833bcfe98371cdd34cebbe2d836e9 70940 postgresql-plperl-12_12.7-0ubuntu0.20.04.1_i386.deb bc55027c13e1d5eb8f962f88d5f2634a5cbd7c39ae8c726974c72c4e85b12cf2 332484 postgresql-plpython3-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 8c4588a6f5679846c66223cba9fc89056b5e43c74e2e970c1be1935c6e29756b 77832 postgresql-plpython3-12_12.7-0ubuntu0.20.04.1_i386.deb 804136b6ae9de288e88befc576eed863062b4c94b7390d43e529078e56a209f8 96408 postgresql-pltcl-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 8b9411ef4a930c066911247ea013c81a3af9fbc2965faf62b6b6322ed3bb6309 31768 postgresql-pltcl-12_12.7-0ubuntu0.20.04.1_i386.deb 18cfa867257b91b9bc597526bb0bcc1067a946ef479c9c52fff91bad3ee13729 927716 postgresql-server-dev-12_12.7-0ubuntu0.20.04.1_i386.deb Files: 53c6c6f89eebd0c301981dde97ee02c9 16444 debug optional libecpg-compat3-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb bf61788f349dcd7cead354f3c7d69bc4 13212 libs optional libecpg-compat3_12.7-0ubuntu0.20.04.1_i386.deb 8076abeb483ff4e3abee66018742b103 245948 debug optional libecpg-dev-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 73378abf81dfec496d7c2141d961c058 251168 libdevel optional libecpg-dev_12.7-0ubuntu0.20.04.1_i386.deb a614a2f6ff5fd6ec5bd3a25e1622cb2d 117428 debug optional libecpg6-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 99fbafcf29dfc8f43add307abba90619 46844 libs optional libecpg6_12.7-0ubuntu0.20.04.1_i386.deb 4b8ef3efc46992d6ebf870517dbc7664 84436 debug optional libpgtypes3-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb ca0a46ce7351afee30cc7794c573939e 47032 libs optional libpgtypes3_12.7-0ubuntu0.20.04.1_i386.deb f0594c9a8fd2a7c06df25e012024b696 145560 libdevel optional libpq-dev_12.7-0ubuntu0.20.04.1_i386.deb 4d4e5d9c44abaac9597590121fca362f 284824 debug optional libpq5-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 7206e4b09b60e6296bc2a03d01ad005b 123996 libs optional libpq5_12.7-0ubuntu0.20.04.1_i386.deb 7bc8f08fef32389b130d761956b89cb8 20041280 debug optional postgresql-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb e9dd81a8936bfd6712922cce4246236b 16361 database optional postgresql-12_12.7-0ubuntu0.20.04.1_i386.buildinfo a75e7f7bee3c40fecf8ad0cdff4e0bf5 13645316 database optional postgresql-12_12.7-0ubuntu0.20.04.1_i386.deb 9fe8688135b55bf7b3bcfe3bd81d575a 8553431 raw-translations - postgresql-12_12.7-0ubuntu0.20.04.1_i386_translations.tar.gz bdc634a5ebe56b9f3b5d810ef4fce6bb 1835148 debug optional postgresql-client-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb fd02b0db892921da14c75ef5fdcb204b 1068540 database optional postgresql-client-12_12.7-0ubuntu0.20.04.1_i386.deb b104c20f1ca3754bbcc82a0023cd36e8 242020 debug optional postgresql-plperl-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb 56cfce9332a0a147a00962306e214b32 70940 database optional postgresql-plperl-12_12.7-0ubuntu0.20.04.1_i386.deb 36f51ce16ec9524c00a521002042c116 332484 debug optional postgresql-plpython3-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb d2d271dde33d0a0fd171bfe46b0a89be 77832 database optional postgresql-plpython3-12_12.7-0ubuntu0.20.04.1_i386.deb 24d94f34a190438fb548f9f339731951 96408 debug optional postgresql-pltcl-12-dbgsym_12.7-0ubuntu0.20.04.1_i386.ddeb ffe386a9c66a2fb39d046fa029c7f613 31768 database optional postgresql-pltcl-12_12.7-0ubuntu0.20.04.1_i386.deb df41cb7a7ddf743291462859db32f1e2 927716 libdevel optional postgresql-server-dev-12_12.7-0ubuntu0.20.04.1_i386.deb Original-Maintainer: Debian PostgreSQL Maintainers