Format: 1.8 Date: Wed, 28 Feb 2018 09:59:08 +0100 Source: postgresql-9.5 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-9.5 postgresql-9.5-dbg postgresql-client-9.5 postgresql-server-dev-9.5 postgresql-doc-9.5 postgresql-contrib-9.5 postgresql-plperl-9.5 postgresql-plpython-9.5 postgresql-plpython3-9.5 postgresql-pltcl-9.5 Architecture: powerpc powerpc_translations Version: 9.5.12-0ubuntu0.16.04 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Christian Ehrhardt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 9.5 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql-9.5 - object-relational SQL database, version 9.5 server postgresql-9.5-dbg - debug symbols for postgresql-9.5 postgresql-client-9.5 - front-end programs for PostgreSQL 9.5 postgresql-contrib-9.5 - additional facilities for PostgreSQL postgresql-doc-9.5 - documentation for the PostgreSQL database management system postgresql-plperl-9.5 - PL/Perl procedural language for PostgreSQL 9.5 postgresql-plpython-9.5 - PL/Python procedural language for PostgreSQL 9.5 postgresql-plpython3-9.5 - PL/Python 3 procedural language for PostgreSQL 9.5 postgresql-pltcl-9.5 - PL/Tcl procedural language for PostgreSQL 9.5 postgresql-server-dev-9.5 - development files for PostgreSQL 9.5 server-side programming Launchpad-Bugs-Fixed: 1752271 Changes: postgresql-9.5 (9.5.12-0ubuntu0.16.04) xenial-security; urgency=medium . * New upstream release (LP: #1752271) If you run an installation in which not all users are mutually trusting, or if you maintain an application or extension that is intended for use in arbitrary situations, it is strongly recommended that you read the documentation changes described in the first changelog entry below, and take suitable steps to ensure that your installation or code is secure. . Also, the changes described in the second changelog entry below may cause functions used in index expressions or materialized views to fail during auto-analyze, or when reloading from a dump. After upgrading, monitor the server logs for such problems, and fix affected functions. . - Document how to configure installations and applications to guard against search-path-dependent trojan-horse attacks from other users . Using a search_path setting that includes any schemas writable by a hostile user enables that user to capture control of queries and then run arbitrary SQL code with the permissions of the attacked user. While it is possible to write queries that are proof against such hijacking, it is notationally tedious, and it's very easy to overlook holes. Therefore, we now recommend configurations in which no untrusted schemas appear in one's search path. (CVE-2018-1058) . - Avoid use of insecure search_path settings in pg_dump and other client programs . pg_dump, pg_upgrade, vacuumdb and other PostgreSQL-provided applications were themselves vulnerable to the type of hijacking described in the previous changelog entry; since these applications are commonly run by superusers, they present particularly attractive targets. To make them secure whether or not the installation as a whole has been secured, modify them to include only the pg_catalog schema in their search_path settings. Autovacuum worker processes now do the same, as well. . In cases where user-provided functions are indirectly executed by these programs -- for example, user-provided functions in index expressions -- the tighter search_path may result in errors, which will need to be corrected by adjusting those user-provided functions to not assume anything about what search path they are invoked under. That has always been good practice, but now it will be necessary for correct behavior. (CVE-2018-1058) . - Details about other changes can be found at https://www.postgresql.org/docs/9.5/static/release-9-5-12.html Checksums-Sha1: ad379c59ba8c4e9706dccf6e05d8db9434e9a804 912 libecpg-compat3-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb ac8f5f06b6a23838ba2e8cf1f343506d65785cb3 9668 libecpg-compat3_9.5.12-0ubuntu0.16.04_powerpc.deb 4fa23ee507fec4ca16fe060d85f7c31030d2fa5a 1014 libecpg-dev-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb f8b2b6fd8020e829de4b88a2c5deef8eac920e93 193032 libecpg-dev_9.5.12-0ubuntu0.16.04_powerpc.deb 1a42ff3c056b47525b336804e4072e2d4f3d82b4 908 libecpg6-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 346cf24541505159fe7793665906bd8c96606086 31814 libecpg6_9.5.12-0ubuntu0.16.04_powerpc.deb d4ecec1ec531ccc7c9f0a912358124184869b631 908 libpgtypes3-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb c622e55beb23a8599d3e93981c9e5ab6d810d097 35112 libpgtypes3_9.5.12-0ubuntu0.16.04_powerpc.deb 312d2974801ba138fd7569d19f61bc4eeeb89f5d 934 libpq-dev-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb cf036698cad7fde1ef9eab1e4a04eeadf30b77d1 141474 libpq-dev_9.5.12-0ubuntu0.16.04_powerpc.deb 896fde6424817fd8d3b0893b4b56ccd749e43b8e 1018 libpq5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 22e41552304cb2ec36521afb853f7851eb3c2f44 69562 libpq5_9.5.12-0ubuntu0.16.04_powerpc.deb 455fa6a1869655a756b6d3f6cf28d83df5cdb099 13679126 postgresql-9.5-dbg_9.5.12-0ubuntu0.16.04_powerpc.deb 82ae9482956ad13bcc8ae929ab6c6ae3dd9ef4d5 1176 postgresql-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb cb4b35bf699f132405d6d161c9210c03c53c58b1 2529750 postgresql-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 49752056fead01b41b03efd2795b07c763e60275 5958773 postgresql-9.5_9.5.12-0ubuntu0.16.04_powerpc_translations.tar.gz 8e5e4bba4d3076366cc290387ee87897655ae16f 1068 postgresql-client-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 11457c75883ab7f935306c1e3d100de46ab9d739 783774 postgresql-client-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 0d8666d6ec4dcbbc39134b20ca494b006a8ac7c0 2152 postgresql-contrib-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb acb1fdd482e4bd0a4a9c34db826b4828c1cb6fc1 411114 postgresql-contrib-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 996a81b31a4c6de965254b1fc0dd7539bb1b1c28 952 postgresql-plperl-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 051072bae92dc415b34de4daba3793073ff0171a 33096 postgresql-plperl-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb b80c0b39ac1f66de45b84f35c6a48958493f061c 954 postgresql-plpython-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 979f4ad68d5cdeb87205883ef0c3bf57411698f6 37908 postgresql-plpython-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 860438458059b25c1135d40b075af431b7b835a5 960 postgresql-plpython3-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb a5c0ce0ad72870c0e0e8f0cf7692524bc7235e8f 36198 postgresql-plpython3-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 320ce6cb3fcb51e6abcc588d8d9d1efcd6ecc3f8 952 postgresql-pltcl-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb f906287f9a035d3eac893593de82a6c554eada3c 19784 postgresql-pltcl-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 572c437ecc415785fd722e94175d855628d480f7 1018 postgresql-server-dev-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb e8979e5936adf84036fdaf312175cc126397b8d7 717186 postgresql-server-dev-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb Checksums-Sha256: bd6b33bbff483031d0ea86edf9f24845216a257b1262e4a29a5763e25dd07ece 912 libecpg-compat3-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb a855518242543d27208335eb903f60a583422a6cc0b1b4bc46d53288c83928d5 9668 libecpg-compat3_9.5.12-0ubuntu0.16.04_powerpc.deb 637e9831e6a02596c4b95c7d6f0d24c7bb91ed13c513de23622d51ae4867ee2b 1014 libecpg-dev-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 0a961bd591db79cbdb44897890e3d0cb4854cc0e80e4935e1fd9a7a8bcb4c8ba 193032 libecpg-dev_9.5.12-0ubuntu0.16.04_powerpc.deb de0d78eb29c221b63cd9989825c6244ed98408e69fa4f39f4eb043e39110a65d 908 libecpg6-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 89e6d5bd3d255aead54980e3ee625f1c41d83b3202f2328600154d8bf1442fd3 31814 libecpg6_9.5.12-0ubuntu0.16.04_powerpc.deb 242b6ba0eebd77047a62c95d6d5087715ae0f8976cb5eaed0a88371d178c6a9f 908 libpgtypes3-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 5b83a40c86026259f38a8db3b4db924f406d465c6a70ad77782e4aad041eda8a 35112 libpgtypes3_9.5.12-0ubuntu0.16.04_powerpc.deb e8b782dc1d2b754f46e629580dc3c55d63d3285dde63de5034d98d7635c88721 934 libpq-dev-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 08cb9745b54545ff27bf203c481938dd3126cd0c187da2adf3c0c7f4f97a5937 141474 libpq-dev_9.5.12-0ubuntu0.16.04_powerpc.deb c8ae6682f6baccf0ecbb9ed01f2c7c51dcc9a34aa3af3ffd2bdda7a41d0ec34f 1018 libpq5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb d25114aa5989ed438d57d97abe1df82a046ab0c6754d78cb2d135b2b284bd756 69562 libpq5_9.5.12-0ubuntu0.16.04_powerpc.deb d2bfe26f16805eebc29105e8f5257645027d9d7fc68fc55ca925882aaaa0b4c9 13679126 postgresql-9.5-dbg_9.5.12-0ubuntu0.16.04_powerpc.deb ef3990fa6f04a99b4750984a288337c670a910c5a4d87672bb593a5bd1436455 1176 postgresql-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb dc7518c8b400e383239634c98d8fe19371ee5d8b5a7f1b7aad73265e871f0261 2529750 postgresql-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 2091b4fe4f2ecd06fa9c22898f49176546c006c277e5c5b07c720ebe3f15e018 5958773 postgresql-9.5_9.5.12-0ubuntu0.16.04_powerpc_translations.tar.gz 656e4d91b62e45c2b99e5229dd6621b866cab8ba8979ab54a32a05ed613577cf 1068 postgresql-client-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 4f58e43378dd5d5912a9852ba0e4293e19d1e3b0a9d0c707f0d221417e535632 783774 postgresql-client-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb e755a2742b2cc996d0e03d5cf7a0db1679129e6ab3f03fe299da8e49f5a85f92 2152 postgresql-contrib-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb c2df197305c97f1a8ed82eeb137249480cc754dfba238f42e462c6b3900a02d5 411114 postgresql-contrib-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 3898361ac358c3ed8fd8116f9361ca55688b208f62dc834877a615e2d1b19e60 952 postgresql-plperl-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 78e3d10ac9e2f82bd12cb26b48df393bcc1276910e8af099b99d3b1d09453fc7 33096 postgresql-plperl-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 45a4d73779277b8d4a118db9bf0ba3f5430b967e3bab0252416378665fd599dd 954 postgresql-plpython-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 9146460c48b9021b7e96e33cd79ef51f6f64f611fa13d5a78ccb962ba009a9dc 37908 postgresql-plpython-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb d3121e236bcfad6b78d58fe5ef1e4923f2ceecaee262c878801514eabb6e7cb1 960 postgresql-plpython3-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 6ac5f1adb30e1bf81b6ab4e3ee6dd9c520eaaf189ccb0af21367441156a732f7 36198 postgresql-plpython3-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb c9b7b7496937033ea0fef4fe0a5db955a415b45f9a20a4cf3510e1d62cd9bbe7 952 postgresql-pltcl-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb fb589ef1b697245217f00f9130d14ce0c7ac7a40bfe748e447fbbbb0bbcd14ba 19784 postgresql-pltcl-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb e4a7d1f1d9d95560c817b8e4fdb8481df38cab9614bfcfb1ff45ca70f5047792 1018 postgresql-server-dev-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb e23d2e36a502161f7f3c44cd54f5ea83f88547fb45b37cfdcdaee060344de11b 717186 postgresql-server-dev-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb Files: fa7302301fa828aeaca6a5b274883502 912 libs extra libecpg-compat3-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 2f825f8e42932c5aa455c56f9b175444 9668 libs optional libecpg-compat3_9.5.12-0ubuntu0.16.04_powerpc.deb 5b7ea5a8dc255584ef6ae0ee55531f57 1014 libdevel extra libecpg-dev-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 4fe14d2be875e59a8d81b83101912a4d 193032 libdevel optional libecpg-dev_9.5.12-0ubuntu0.16.04_powerpc.deb 8f2eb08d2121e8ddec8e3a2c20e1e68e 908 libs extra libecpg6-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 2d086de84fc93dc742b7fa3864c034fa 31814 libs optional libecpg6_9.5.12-0ubuntu0.16.04_powerpc.deb c26681884418cda67694ac645f6e8053 908 libs extra libpgtypes3-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 0623303ab77d6a1c8c8e9288e7d219d8 35112 libs optional libpgtypes3_9.5.12-0ubuntu0.16.04_powerpc.deb 7bd1754baa7b8e3f89d17947ed661537 934 libdevel extra libpq-dev-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 712cac947fed105c1a789f46a0bdf245 141474 libdevel optional libpq-dev_9.5.12-0ubuntu0.16.04_powerpc.deb 6f1f564765c3f85bae1c87f829e19252 1018 libs extra libpq5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 49624a162253937059d12a0415975b02 69562 libs optional libpq5_9.5.12-0ubuntu0.16.04_powerpc.deb 3cb2ee975fe02fbd49e344440e18a42a 13679126 debug extra postgresql-9.5-dbg_9.5.12-0ubuntu0.16.04_powerpc.deb f159bbc028d6eb94df5a969f6799b9f3 1176 database extra postgresql-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 31d138a764f289631f72937cee06cab6 2529750 database optional postgresql-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 32ba63ed025074b7b88cb1a7237424c5 5958773 raw-translations - postgresql-9.5_9.5.12-0ubuntu0.16.04_powerpc_translations.tar.gz f667bce29468ea8414b5d95f50c9499e 1068 database extra postgresql-client-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 341b3c43406c1935de65be093b4ba6a4 783774 database optional postgresql-client-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb b7f405e4223f725c3c48e65628df5b1f 2152 database extra postgresql-contrib-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb dae5a1af0732c688cc25adb9ba45e99e 411114 database optional postgresql-contrib-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 3f9010fc61d3fa270667d98cc4073d46 952 database extra postgresql-plperl-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb b6b25a81719c32d35ca24bcb3e3cddb6 33096 database optional postgresql-plperl-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 718dde9b6f07b705b4e4209b046ee122 954 database extra postgresql-plpython-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb c23446972a38894627f5b5250aa43327 37908 database optional postgresql-plpython-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb ee73fc5ab7c7006c294356a4da00ab8d 960 database extra postgresql-plpython3-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb c6915cf7fa1f2c94b88cad6064fc9d54 36198 database optional postgresql-plpython3-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb c7603cc5448c5cf851edc9fe973742c7 952 database extra postgresql-pltcl-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb 61a66e7dc02e06631917ca34b7256b32 19784 database optional postgresql-pltcl-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb 28907a75de543255578e7a19135d3a60 1018 libdevel extra postgresql-server-dev-9.5-dbgsym_9.5.12-0ubuntu0.16.04_powerpc.ddeb b2854f3b0041e36349d4bdce404cd550 717186 libdevel optional postgresql-server-dev-9.5_9.5.12-0ubuntu0.16.04_powerpc.deb Original-Maintainer: Debian PostgreSQL Maintainers