Format: 1.7 Date: Tue, 04 Oct 2011 12:55:04 +0200 Source: postgresql-8.3 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-8.3 postgresql-client-8.3 postgresql-server-dev-8.3 postgresql-doc-8.3 postgresql-contrib-8.3 postgresql-plperl-8.3 postgresql-plpython-8.3 postgresql-pltcl-8.3 postgresql postgresql-client postgresql-doc postgresql-contrib Architecture: hppa_translations hppa Version: 8.3.16-0ubuntu0.8.04 Distribution: hardy Urgency: low Maintainer: Ubuntu/hppa Build Daemon Changed-By: Martin Pitt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 8.3 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql - object-relational SQL database (latest version) postgresql-8.3 - object-relational SQL database, version 8.3 server postgresql-client - front-end programs for PostgreSQL (latest version) postgresql-client-8.3 - front-end programs for PostgreSQL 8.3 postgresql-contrib - additional facilities for PostgreSQL (latest version) postgresql-contrib-8.3 - additional facilities for PostgreSQL postgresql-doc - documentation for the PostgreSQL database management system postgresql-doc-8.3 - documentation for the PostgreSQL database management system postgresql-plperl-8.3 - PL/Perl procedural language for PostgreSQL 8.3 postgresql-plpython-8.3 - PL/Python procedural language for PostgreSQL 8.3 postgresql-pltcl-8.3 - PL/Tcl procedural language for PostgreSQL 8.3 postgresql-server-dev-8.3 - development files for PostgreSQL 8.3 server-side programming Launchpad-Bugs-Fixed: 866049 Changes: postgresql-8.3 (8.3.16-0ubuntu0.8.04) hardy-security; urgency=low . * New upstream bug fix/security release 8.3.16: (LP: #866049) - Fix bugs in indexing of in-doubt HOT-updated tuples. These bugs could result in index corruption after reindexing a system catalog. They are not believed to affect user indexes. - Fix multiple bugs in GiST index page split processing. The probability of occurrence was low, but these could lead to index corruption. - Fix possible buffer overrun in tsvector_concat(). The function could underestimate the amount of memory needed for its result, leading to server crashes. - Fix crash in xml_recv when processing a "standalone" parameter. - Avoid possibly accessing off the end of memory in "ANALYZE" and in SJIS-2004 encoding conversion. This fixes some very-low-probability server crash scenarios. - Fix race condition in relcache init file invalidation. There was a window wherein a new backend process could read a stale init file but miss the inval messages that would tell it the data is stale. The result would be bizarre failures in catalog accesses, typically "could not read block 0 in file ..." later during startup. - Fix memory leak at end of a GiST index scan. Commands that perform many separate GiST index scans, such as verification of a new GiST-based exclusion constraint on a table already containing many rows, could transiently require large amounts of memory due to this leak. - Fix performance problem when constructing a large, lossy bitmap. - Fix array- and path-creating functions to ensure padding bytes are zeroes. This avoids some situations where the planner will think that semantically-equal constants are not equal, resulting in poor optimization. - Fix dump bug for VALUES in a view. - Disallow SELECT FOR UPDATE/SHARE on sequences. This operation doesn't work as expected and can lead to failures. - Defend against integer overflow when computing size of a hash table. - Fix cases where "CLUSTER" might attempt to access already-removed TOAST data. - Fix portability bugs in use of credentials control messages for "peer" authentication. - Fix SSPI login when multiple roundtrips are required. The typical symptom of this problem was "The function requested is not supported" errors during SSPI login. - Fix typo in pg_srand48 seed initialization. This led to failure to use all bits of the provided seed. This function is not used on most platforms (only those without srandom), and the potential security exposure from a less-random-than-expected seed seems minimal in any case. - Avoid integer overflow when the sum of LIMIT and OFFSET values exceeds 2^63. - Add overflow checks to int4 and int8 versions of generate_series(). - Fix trailing-zero removal in to_char(). In a format with FM and no digit positions after the decimal point, zeroes to the left of the decimal point could be removed incorrectly. - Fix pg_size_pretty() to avoid overflow for inputs close to 2^63. - Fix psql's counting of script file line numbers during COPY from a different file. - Fix pg_restore's direct-to-database mode for standard_conforming_strings. pg_restore could emit incorrect commands when restoring directly to a database server from an archive file that had been made with standard_conforming_strings set to on. - Fix write-past-buffer-end and memory leak in libpq's LDAP service lookup code. - In libpq, avoid failures when using nonblocking I/O and an SSL connection. - Improve libpq's handling of failures during connection startup. In particular, the response to a server report of fork() failure during SSL connection startup is now saner. - Improve libpq's error reporting for SSL failures. - Make ecpglib write double values with 15 digits precision. - In ecpglib, be sure LC_NUMERIC setting is restored after an error. - Apply upstream fix for blowfish signed-character bug (CVE-2011-2483). "contrib/pg_crypto"'s blowfish encryption code could give wrong results on platforms where char is signed (which is most), leading to encrypted passwords being weaker than they should be. - Fix memory leak in "contrib/seg". - Fix pgstatindex() to give consistent results for empty indexes. - Allow building with perl 5.14 (Alex Hunsaker) Files: d484e16f5ed35c60c672e45d78ddc28e 2651227 raw-translations - postgresql-8.3_8.3.16-0ubuntu0.8.04_hppa_translations.tar.gz 98e5ff06bda3a07e3c4874567f5ede63 195850 libdevel optional libpq-dev_8.3.16-0ubuntu0.8.04_hppa.deb a3fd2a8db43041f2a82a212c97038e85 353990 libs optional libpq5_8.3.16-0ubuntu0.8.04_hppa.deb f8ec37bc8375bb7a1a712883d735c89d 36146 libs optional libecpg6_8.3.16-0ubuntu0.8.04_hppa.deb d52a78b7e9145b24f04a6d52eb74f40e 229516 libdevel optional libecpg-dev_8.3.16-0ubuntu0.8.04_hppa.deb 00f21edf453a9b8098cf616f8342cd2b 12080 libs optional libecpg-compat3_8.3.16-0ubuntu0.8.04_hppa.deb 1206f5bec9aa1966016d078518fc52ca 320086 libs optional libpgtypes3_8.3.16-0ubuntu0.8.04_hppa.deb 175dba46c5be514609efc4777a276d74 4207302 misc optional postgresql-8.3_8.3.16-0ubuntu0.8.04_hppa.deb e1fca432f36d0bd612e7ba788186d7dd 769236 misc optional postgresql-client-8.3_8.3.16-0ubuntu0.8.04_hppa.deb 0c3fc9dce83e6d7f14c29b0cc68ac140 856308 libdevel optional postgresql-server-dev-8.3_8.3.16-0ubuntu0.8.04_hppa.deb b56e335f3f50e1dad2446af36cce76a6 383444 misc optional postgresql-contrib-8.3_8.3.16-0ubuntu0.8.04_hppa.deb fbcfbde14c026486c193056c2fd29ff1 319320 misc optional postgresql-plperl-8.3_8.3.16-0ubuntu0.8.04_hppa.deb b1272cc0286e8f83646330db57ff012c 309252 misc optional postgresql-plpython-8.3_8.3.16-0ubuntu0.8.04_hppa.deb b6ccd4e8baeca30660fa5e2e1fe2aa8e 306646 misc optional postgresql-pltcl-8.3_8.3.16-0ubuntu0.8.04_hppa.deb Original-Maintainer: Martin Pitt