Format: 1.8 Date: Mon, 04 Jun 2012 06:31:48 +0200 Source: postgresql-9.1 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-9.1 postgresql-9.1-dbg postgresql-client-9.1 postgresql-server-dev-9.1 postgresql-doc-9.1 postgresql-contrib-9.1 postgresql-plperl-9.1 postgresql-plpython-9.1 postgresql-plpython3-9.1 postgresql-pltcl-9.1 Architecture: amd64 amd64_translations Version: 9.1.4-0ubuntu12.04 Distribution: precise Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Martin Pitt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 9.1 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql-9.1 - object-relational SQL database, version 9.1 server postgresql-9.1-dbg - debug symbols for postgresql-9.1 postgresql-client-9.1 - front-end programs for PostgreSQL 9.1 postgresql-contrib-9.1 - additional facilities for PostgreSQL postgresql-doc-9.1 - documentation for the PostgreSQL database management system postgresql-plperl-9.1 - PL/Perl procedural language for PostgreSQL 9.1 postgresql-plpython-9.1 - PL/Python procedural language for PostgreSQL 9.1 postgresql-plpython3-9.1 - PL/Python 3 procedural language for PostgreSQL 9.1 postgresql-pltcl-9.1 - PL/Tcl procedural language for PostgreSQL 9.1 postgresql-server-dev-9.1 - development files for PostgreSQL 9.1 server-side programming Launchpad-Bugs-Fixed: 1008317 Changes: postgresql-9.1 (9.1.4-0ubuntu12.04) precise-security; urgency=low . * New upstream bug fix/security release: (LP: #1008317) - Fix incorrect password transformation in "contrib/pgcrypto"'s DES crypt() function. If a password string contained the byte value 0x80, the remainder of the password was ignored, causing the password to be much weaker than it appeared. With this fix, the rest of the string is properly included in the DES hash. Any stored password values that are affected by this bug will thus no longer match, so the stored values may need to be updated. (CVE-2012-2143) - Ignore SECURITY DEFINER and SET attributes for a procedural language's call handler. Applying such attributes to a call handler could crash the server. (CVE-2012-2655) - Make "contrib/citext"'s upgrade script fix collations of citext arrays and domains over citext. Release 9.1.2 provided a fix for collations of citext columns and indexes in databases upgraded or reloaded from pre-9.1 installations, but that fix was incomplete: it neglected to handle arrays and domains over citext. This release extends the module's upgrade script to handle these cases. As before, if you have already run the upgrade script, you'll need to run the collation update commands by hand instead. See the 9.1.2 release notes for more information about doing this. - Allow numeric timezone offsets in timestamp input to be up to 16 hours away from UTC. Some historical time zones have offsets larger than 15 hours, the previous limit. This could result in dumped data values being rejected during reload. - Fix timestamp conversion to cope when the given time is exactly the last DST transition time for the current timezone. This oversight has been there a long time, but was not noticed previously because most DST-using zones are presumed to have an indefinite sequence of future DST transitions. - Fix text to name and char to name casts to perform string truncation correctly in multibyte encodings. - Fix memory copying bug in to_tsquery(). - Ensure txid_current() reports the correct epoch when executed in hot standby. - Fix planner's handling of outer PlaceHolderVars within subqueries. This bug concerns sub-SELECTs that reference variables coming from the nullable side of an outer join of the surrounding query. In 9.1, queries affected by this bug would fail with "ERROR: Upper-level PlaceHolderVar found where not expected". But in 9.0 and 8.4, you'd silently get possibly-wrong answers, since the value transmitted into the subquery wouldn't go to null when it should. - Fix planning of UNION ALL subqueries with output columns that are not simple variables. Planning of such cases got noticeably worse in 9.1 as a result of a misguided fix for "MergeAppend child's targetlist doesn't match MergeAppend" errors. Revert that fix and do it another way. - Fix slow session startup when pg_attribute is very large. If pg_attribute exceeds one-fourth of shared_buffers, cache rebuilding code that is sometimes needed during session start would trigger the synchronized-scan logic, causing it to take many times longer than normal. The problem was particularly acute if many new sessions were starting at once. - Ensure sequential scans check for query cancel reasonably often. A scan encountering many consecutive pages that contain no live tuples would not respond to interrupts meanwhile. - Ensure the Windows implementation of PGSemaphoreLock() clears ImmediateInterruptOK before returning. This oversight meant that a query-cancel interrupt received later in the same query could be accepted at an unsafe time, with unpredictable but not good consequences. - Show whole-row variables safely when printing views or rules. Corner cases involving ambiguous names (that is, the name could be either a table or column name of the query) were printed in an ambiguous way, risking that the view or rule would be interpreted differently after dump and reload. Avoid the ambiguous case by attaching a no-op cast. - Fix "COPY FROM" to properly handle null marker strings that correspond to invalid encoding. A null marker string such as E'\\0' should work, and did work in the past, but the case got broken in 8.4. - Fix "EXPLAIN VERBOSE" for writable CTEs containing RETURNING clauses. - Fix "PREPARE TRANSACTION" to work correctly in the presence of advisory locks. Historically, "PREPARE TRANSACTION" has simply ignored any session-level advisory locks the session holds, but this case was accidentally broken in 9.1. - Fix truncation of unlogged tables. - Ignore missing schemas during non-interactive assignments of search_path. This re-aligns 9.1's behavior with that of older branches. Previously 9.1 would throw an error for nonexistent schemas mentioned in search_path settings obtained from places such as "ALTER DATABASE SET". - Fix bugs with temporary or transient tables used in extension scripts. This includes cases such as a rewriting "ALTER TABLE" within an extension update script, since that uses a transient table behind the scenes. - Ensure autovacuum worker processes perform stack depth checking properly. Previously, infinite recursion in a function invoked by auto-"ANALYZE" could crash worker processes. - Fix logging collector to not lose log coherency under high load. The collector previously could fail to reassemble large messages if it got too busy. - Fix logging collector to ensure it will restart file rotation after receiving SIGHUP. - Fix "too many LWLocks taken" failure in GiST indexes. - Fix WAL replay logic for GIN indexes to not fail if the index was subsequently dropped. - Correctly detect SSI conflicts of prepared transactions after a crash. - Avoid synchronous replication delay when committing a transaction that only modified temporary tables. In such a case the transaction's commit record need not be flushed to standby servers, but some of the code didn't know that and waited for it to happen anyway. - Fix error handling in pg_basebackup. - Fix walsender to not go into a busy loop if connection is terminated. - Fix memory leak in PL/pgSQL's "RETURN NEXT" command. - Fix PL/pgSQL's "GET DIAGNOSTICS" command when the target is the function's first variable. - Ensure that PL/Perl package-qualifies the _TD variable. This bug caused trigger invocations to fail when they are nested within a function invocation that changes the current package. - Fix PL/Python functions returning composite types to accept a string for their result value. This case was accidentally broken by the 9.1 additions to allow a composite result value to be supplied in other formats, such as dictionaries. - Fix potential access off the end of memory in psql's expanded display ("\x") mode. - Fix several performance problems in pg_dump when the database contains many objects. pg_dump could get very slow if the database contained many schemas, or if many objects are in dependency loops, or if there are many owned sequences. - Fix memory and file descriptor leaks in pg_restore when reading a directory-format archive. - Fix pg_upgrade for the case that a database stored in a non-default tablespace contains a table in the cluster's default tablespace. - In ecpg, fix rare memory leaks and possible overwrite of one byte after the sqlca_t structure. - Fix "contrib/dblink"'s dblink_exec() to not leak temporary database connections upon error. - Fix "contrib/dblink" to report the correct connection name in error messages. - Fix "contrib/vacuumlo" to use multiple transactions when dropping many large objects. This change avoids exceeding max_locks_per_transaction when many objects need to be dropped. The behavior can be adjusted with the new -l (limit) option. Checksums-Sha1: 5c943db912108ebf40ff61bbd0f1e4a706e46762 212350 libpq-dev_9.1.4-0ubuntu12.04_amd64.deb e8e090cd950ef4831b01d1d11f3bd7ebbeab0807 96818 libpq5_9.1.4-0ubuntu12.04_amd64.deb bc40c2f0b60a0be15fa13585bb4ebebd2f4f7207 39980 libecpg6_9.1.4-0ubuntu12.04_amd64.deb 3500bdc66f9bf7a23bdf10bafd0710900c17df04 262874 libecpg-dev_9.1.4-0ubuntu12.04_amd64.deb 17da177ca757fc5c4fb582ffdf813bf70f9de16c 12638 libecpg-compat3_9.1.4-0ubuntu12.04_amd64.deb 8c5945e9bd1a28334114b881b0969dac045c8080 50786 libpgtypes3_9.1.4-0ubuntu12.04_amd64.deb d62a1f0b2d30a4c5342193bcb26be2e9b5901c3c 4290396 postgresql-9.1_9.1.4-0ubuntu12.04_amd64.deb c400dac98699b854ab924098f3421477ee5441ec 8593840 postgresql-9.1-dbg_9.1.4-0ubuntu12.04_amd64.deb 549b945e27ab49fc43c571739d188d74558330cb 956228 postgresql-client-9.1_9.1.4-0ubuntu12.04_amd64.deb 1cadbc7796f611b5e389afd79a67de72d528893b 678804 postgresql-server-dev-9.1_9.1.4-0ubuntu12.04_amd64.deb 3263936f9988a697295029b6bae3ac6e03410442 460200 postgresql-contrib-9.1_9.1.4-0ubuntu12.04_amd64.deb 57c8a5f2c57eddf962adacf39dfed097fde5861c 45790 postgresql-plperl-9.1_9.1.4-0ubuntu12.04_amd64.deb bbb7096abb19c9c53977fd9a7553022fb9d5fd6e 43146 postgresql-plpython-9.1_9.1.4-0ubuntu12.04_amd64.deb 58cdfd3484dd3e5eaca809013498f1559fdef959 42944 postgresql-plpython3-9.1_9.1.4-0ubuntu12.04_amd64.deb 461a36dd8a467525b6291c176472e4d3f5b244be 24952 postgresql-pltcl-9.1_9.1.4-0ubuntu12.04_amd64.deb 12d0ed3c8ce096218b402bf4b82d3f9f734a400c 4670512 postgresql-9.1_9.1.4-0ubuntu12.04_amd64_translations.tar.gz Checksums-Sha256: 503bd987e28980af420c3f156ed1fd700d5ae65361eaf48fee1bd9c0dcf798b0 212350 libpq-dev_9.1.4-0ubuntu12.04_amd64.deb 2dd3bde7d5d758df1e8ee47514ff9e396662a0fd3b958bbc680abd68198c7b2d 96818 libpq5_9.1.4-0ubuntu12.04_amd64.deb 47d22f7dce8a56e1fe63b57830115524733f75a1ab5ff98f50789eca7282e2bd 39980 libecpg6_9.1.4-0ubuntu12.04_amd64.deb 468987d37a07939879af1272628445bce49f33d568c9c8c4b44e05398ec9801b 262874 libecpg-dev_9.1.4-0ubuntu12.04_amd64.deb 053ff363fccfdb7f7801d37eb61bfecf33cb3a71a71263caca107303404a5cd7 12638 libecpg-compat3_9.1.4-0ubuntu12.04_amd64.deb c65f93ad0b24c3a3d6d4144885958d24826b8b798eceaf5560a256efd56330a9 50786 libpgtypes3_9.1.4-0ubuntu12.04_amd64.deb fdce751b386d11ccc7726bc7fed19d4696878a3461abd2c899c6503f995fed30 4290396 postgresql-9.1_9.1.4-0ubuntu12.04_amd64.deb c79bd074dc18e0c596969056ae0961e9b3fb9260382856ba3325d8942ef4df26 8593840 postgresql-9.1-dbg_9.1.4-0ubuntu12.04_amd64.deb f6d1f828e99ed268fadcf58906c619b12459ba1ebbc3eaaae7a8b1a70ed7919b 956228 postgresql-client-9.1_9.1.4-0ubuntu12.04_amd64.deb cc4f115113e10b7c17b753aa2820cf770e146f184c291ef070ea78ec5bf77dd3 678804 postgresql-server-dev-9.1_9.1.4-0ubuntu12.04_amd64.deb e8f1fa27ea8f78181544c8c4d3140ee6775ee33d8133c3ffb0887e33d5239c84 460200 postgresql-contrib-9.1_9.1.4-0ubuntu12.04_amd64.deb bc950ef3b55308fb01df40aa4169d4e634e035831fa1e217ff0825cdd42345bb 45790 postgresql-plperl-9.1_9.1.4-0ubuntu12.04_amd64.deb 1db6a1accac5282aefadc9bce2114f7f074b8f3a3467bd1ee7523b60dc26ee90 43146 postgresql-plpython-9.1_9.1.4-0ubuntu12.04_amd64.deb da7edf6fc3a658f5bf60c418bdf51fd518dadf40b6dc7f97228bf056e3e6bbb1 42944 postgresql-plpython3-9.1_9.1.4-0ubuntu12.04_amd64.deb 0a5a058758f6bef509c67a92883d889d173a5f9bb1470b245b3f9cdd71eb9510 24952 postgresql-pltcl-9.1_9.1.4-0ubuntu12.04_amd64.deb 85920c7ac0f70ed53e05883b4929dc779607f9509fdc67d53d225ac8bebbab51 4670512 postgresql-9.1_9.1.4-0ubuntu12.04_amd64_translations.tar.gz Files: f355be24bbb0d81640ffb423011ee5e6 212350 libdevel optional libpq-dev_9.1.4-0ubuntu12.04_amd64.deb c9dee89532bd0d8bc1d2830d1978f603 96818 libs optional libpq5_9.1.4-0ubuntu12.04_amd64.deb b7fab1f152e9cf410cba745b1379e312 39980 libs optional libecpg6_9.1.4-0ubuntu12.04_amd64.deb 68f26e379189b2abb378706d887f4de9 262874 libdevel optional libecpg-dev_9.1.4-0ubuntu12.04_amd64.deb af44e8ab56b8d73ade3322f457c028ca 12638 libs optional libecpg-compat3_9.1.4-0ubuntu12.04_amd64.deb b37f4e3c2ab4aaa286c3e7fee4b53eda 50786 libs optional libpgtypes3_9.1.4-0ubuntu12.04_amd64.deb f43f5fc39149916599d06f05e69c1e69 4290396 database optional postgresql-9.1_9.1.4-0ubuntu12.04_amd64.deb fb9ca16fd3eb31cdc2fdfe760930366e 8593840 debug extra postgresql-9.1-dbg_9.1.4-0ubuntu12.04_amd64.deb 2d4c0ec63807810a27f731e07a47ac3a 956228 database optional postgresql-client-9.1_9.1.4-0ubuntu12.04_amd64.deb 263862e340a325f7dd8e1b892424fbea 678804 libdevel optional postgresql-server-dev-9.1_9.1.4-0ubuntu12.04_amd64.deb 8a2b6a62e49133822ce7d6940e2cf3cb 460200 database optional postgresql-contrib-9.1_9.1.4-0ubuntu12.04_amd64.deb aea9773442984bdbe8a16e1214a1e695 45790 database optional postgresql-plperl-9.1_9.1.4-0ubuntu12.04_amd64.deb 6ee6e64ecf4b08fa6ba078ca722eda9e 43146 database optional postgresql-plpython-9.1_9.1.4-0ubuntu12.04_amd64.deb 34c10c8ff536985dd9eec7e1e1d14ef8 42944 database optional postgresql-plpython3-9.1_9.1.4-0ubuntu12.04_amd64.deb de72f2339f8ec8b438f30197542e85c4 24952 database optional postgresql-pltcl-9.1_9.1.4-0ubuntu12.04_amd64.deb 23f4191d372a95cc32f7445cbf8e4625 4670512 raw-translations - postgresql-9.1_9.1.4-0ubuntu12.04_amd64_translations.tar.gz Original-Maintainer: Martin Pitt