Format: 1.8 Date: Mon, 04 Jun 2012 08:33:03 +0200 Source: postgresql-8.4 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-8.4 postgresql-client-8.4 postgresql-server-dev-8.4 postgresql-doc-8.4 postgresql-contrib-8.4 postgresql-plperl-8.4 postgresql-plpython-8.4 postgresql-pltcl-8.4 postgresql postgresql-client postgresql-doc postgresql-contrib Architecture: armel armel_translations Version: 8.4.12-0ubuntu11.04 Distribution: natty Urgency: low Maintainer: Ubuntu/armel Build Daemon Changed-By: Martin Pitt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 8.4 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql - object-relational SQL database (supported version) postgresql-8.4 - object-relational SQL database, version 8.4 server postgresql-client - front-end programs for PostgreSQL (supported version) postgresql-client-8.4 - front-end programs for PostgreSQL 8.4 postgresql-contrib - additional facilities for PostgreSQL (supported version) postgresql-contrib-8.4 - additional facilities for PostgreSQL postgresql-doc - documentation for the PostgreSQL database management system postgresql-doc-8.4 - documentation for the PostgreSQL database management system postgresql-plperl-8.4 - PL/Perl procedural language for PostgreSQL 8.4 postgresql-plpython-8.4 - PL/Python procedural language for PostgreSQL 8.4 postgresql-pltcl-8.4 - PL/Tcl procedural language for PostgreSQL 8.4 postgresql-server-dev-8.4 - development files for PostgreSQL 8.4 server-side programming Launchpad-Bugs-Fixed: 1008317 Changes: postgresql-8.4 (8.4.12-0ubuntu11.04) natty-security; urgency=low . * New upstream security/bug fix release: (LP: #1008317) - Fix incorrect password transformation in "contrib/pgcrypto"'s DES crypt() function. If a password string contained the byte value 0x80, the remainder of the password was ignored, causing the password to be much weaker than it appeared. With this fix, the rest of the string is properly included in the DES hash. Any stored password values that are affected by this bug will thus no longer match, so the stored values may need to be updated. (CVE-2012-2143) - Ignore SECURITY DEFINER and SET attributes for a procedural language's call handler. Applying such attributes to a call handler could crash the server. (CVE-2012-2655) - Allow numeric timezone offsets in timestamp input to be up to 16 hours away from UTC. Some historical time zones have offsets larger than 15 hours, the previous limit. This could result in dumped data values being rejected during reload. - Fix timestamp conversion to cope when the given time is exactly the last DST transition time for the current timezone. This oversight has been there a long time, but was not noticed previously because most DST-using zones are presumed to have an indefinite sequence of future DST transitions. - Fix text to name and char to name casts to perform string truncation correctly in multibyte encodings. - Fix memory copying bug in to_tsquery(). - Fix planner's handling of outer PlaceHolderVars within subqueries. This bug concerns sub-SELECTs that reference variables coming from the nullable side of an outer join of the surrounding query. In 9.1, queries affected by this bug would fail with "ERROR: Upper-level PlaceHolderVar found where not expected". But in 9.0 and 8.4, you'd silently get possibly-wrong answers, since the value transmitted into the subquery wouldn't go to null when it should. - Fix slow session startup when pg_attribute is very large. If pg_attribute exceeds one-fourth of shared_buffers, cache rebuilding code that is sometimes needed during session start would trigger the synchronized-scan logic, causing it to take many times longer than normal. The problem was particularly acute if many new sessions were starting at once. - Ensure sequential scans check for query cancel reasonably often. A scan encountering many consecutive pages that contain no live tuples would not respond to interrupts meanwhile. - Ensure the Windows implementation of PGSemaphoreLock() clears ImmediateInterruptOK before returning. This oversight meant that a query-cancel interrupt received later in the same query could be accepted at an unsafe time, with unpredictable but not good consequences. - Show whole-row variables safely when printing views or rules. Corner cases involving ambiguous names (that is, the name could be either a table or column name of the query) were printed in an ambiguous way, risking that the view or rule would be interpreted differently after dump and reload. Avoid the ambiguous case by attaching a no-op cast. - Fix "COPY FROM" to properly handle null marker strings that correspond to invalid encoding. A null marker string such as E'\\0' should work, and did work in the past, but the case got broken in 8.4. - Ensure autovacuum worker processes perform stack depth checking properly. Previously, infinite recursion in a function invoked by auto-"ANALYZE" could crash worker processes. - Fix logging collector to not lose log coherency under high load. The collector previously could fail to reassemble large messages if it got too busy. - Fix logging collector to ensure it will restart file rotation after receiving SIGHUP. - Fix WAL replay logic for GIN indexes to not fail if the index was subsequently dropped> - Fix memory leak in PL/pgSQL's "RETURN NEXT" command. - Fix PL/pgSQL's "GET DIAGNOSTICS" command when the target is the function's first variable. - Fix potential access off the end of memory in psql's expanded display ("\x") mode. - Fix several performance problems in pg_dump when the database contains many objects. pg_dump could get very slow if the database contained many schemas, or if many objects are in dependency loops, or if there are many owned sequences. - Fix "contrib/dblink"'s dblink_exec() to not leak temporary database connections upon error. - Fix "contrib/dblink" to report the correct connection name in error messages. Checksums-Sha1: 7617843c54c431ab9014a101d62c3418c6b14679 181704 libpq-dev_8.4.12-0ubuntu11.04_armel.deb 9c22e31e688dbae21ada703c5cf0c762b8758295 2277987 postgresql-8.4_8.4.12-0ubuntu11.04_armel_translations.tar.gz b4c73ef6f6872a1fb6e5ff3eb9d1ab913f9b7650 74018 libpq5_8.4.12-0ubuntu11.04_armel.deb 8f68796f72293b303e43aed919b8378a067e3001 29244 libecpg6_8.4.12-0ubuntu11.04_armel.deb cdeadc8ce1777654354d7d2611a96cc87dc1c3a0 217360 libecpg-dev_8.4.12-0ubuntu11.04_armel.deb 8d50f6b8ae80c0c22d1d1aea40689660cabcbd53 9664 libecpg-compat3_8.4.12-0ubuntu11.04_armel.deb e25b9bc6ad2cb6eeb12b33377dd573c85fdc4fde 46780 libpgtypes3_8.4.12-0ubuntu11.04_armel.deb 836722048f6308cd4f387b4773778cc841ef815d 3742966 postgresql-8.4_8.4.12-0ubuntu11.04_armel.deb f39278f9aef7d2f44c73c3fb8ccc3130541028b9 752396 postgresql-client-8.4_8.4.12-0ubuntu11.04_armel.deb 470f966e5aa1310d7decc5b6e1c45b7f7c718dee 630766 postgresql-server-dev-8.4_8.4.12-0ubuntu11.04_armel.deb 38b7cee188ceb76eb9619e346cab8371d3a830a7 353936 postgresql-contrib-8.4_8.4.12-0ubuntu11.04_armel.deb 7afeefc9446b48c37b34558b1f08323627d4284c 43572 postgresql-plperl-8.4_8.4.12-0ubuntu11.04_armel.deb 13a5cd81168bbe3c2fbc4a818c0aca69a051711a 37036 postgresql-plpython-8.4_8.4.12-0ubuntu11.04_armel.deb 23180e5c01bfcd9e6a8a383f9ce2f2b20bcc648d 35650 postgresql-pltcl-8.4_8.4.12-0ubuntu11.04_armel.deb Checksums-Sha256: c0b66198d026f5df074ce859d81d43230f3021178b841744f1db7cffce54dfdc 181704 libpq-dev_8.4.12-0ubuntu11.04_armel.deb a2393c703b909a4bff771f26953681cd4fbc3e61148ccf0d42bfc17cc978b7cc 2277987 postgresql-8.4_8.4.12-0ubuntu11.04_armel_translations.tar.gz a396e3a5b2275408b23040edc226aeb26594db96f484b0e338b5924250460f15 74018 libpq5_8.4.12-0ubuntu11.04_armel.deb c0e1037122f7ca0255d0578cdf6caabc789694b6bb6e8c281793eb257e112fbb 29244 libecpg6_8.4.12-0ubuntu11.04_armel.deb 5e4423bc01149c066553ad95a1c0316134f44b9dc01dbda63195cfe55227b050 217360 libecpg-dev_8.4.12-0ubuntu11.04_armel.deb 5c51f809362b8b85df0b38feb27a750920ba98453f6f49299d51e17885dcc80b 9664 libecpg-compat3_8.4.12-0ubuntu11.04_armel.deb eef015f9ae00f65345336ffd768bcb7d34bf6568bfe3e62cf2d362eff93d3aac 46780 libpgtypes3_8.4.12-0ubuntu11.04_armel.deb 3039787e9a54bbe480feffcb5c3d8dfe49168c31ad3ee32d56f71e88abc90440 3742966 postgresql-8.4_8.4.12-0ubuntu11.04_armel.deb 270e8d8bcc9a183fc23691a075a8b26bf409f671199ab6fa602e0232bca05174 752396 postgresql-client-8.4_8.4.12-0ubuntu11.04_armel.deb ed4cca9e1bda224b9b78bdeeef89a8e1a0307067df7b9e2dfdbb5e9211ce4b5e 630766 postgresql-server-dev-8.4_8.4.12-0ubuntu11.04_armel.deb ac554ef3a71d73f766df0e936be52caa22e1315ccd599e4bee9b715698b068f1 353936 postgresql-contrib-8.4_8.4.12-0ubuntu11.04_armel.deb b180796ec04427a7f70640d339a54fae256860aa20b2f39434004f54bccfafe1 43572 postgresql-plperl-8.4_8.4.12-0ubuntu11.04_armel.deb f38492487bb3e11cf9e7e7e96643be2222c0acd23b43468d8ea901fad861b5ee 37036 postgresql-plpython-8.4_8.4.12-0ubuntu11.04_armel.deb 2c11b05f78f2763f7fdea5869908250cc2be2747e2fb3ea77e85f4992088a5da 35650 postgresql-pltcl-8.4_8.4.12-0ubuntu11.04_armel.deb Files: 7941c1a78ed7df87c053ac0338e50ae4 181704 libdevel optional libpq-dev_8.4.12-0ubuntu11.04_armel.deb 7dcb3beaf333024d136c113c26571d87 2277987 raw-translations - postgresql-8.4_8.4.12-0ubuntu11.04_armel_translations.tar.gz 4928cb068dfddb47d1aa94a26d316b8e 74018 libs optional libpq5_8.4.12-0ubuntu11.04_armel.deb 72f3c1470370e41d7745fe7ed8e752a2 29244 libs optional libecpg6_8.4.12-0ubuntu11.04_armel.deb ce805e0901595dbfc85ec7eb733cf9d3 217360 libdevel optional libecpg-dev_8.4.12-0ubuntu11.04_armel.deb 2a989000d7df5a0575024eeabf454637 9664 libs optional libecpg-compat3_8.4.12-0ubuntu11.04_armel.deb c439d54cfab4291926faa4446c9ae8ed 46780 libs optional libpgtypes3_8.4.12-0ubuntu11.04_armel.deb 562682f34bf57a8f6830bcb209ca6ded 3742966 database optional postgresql-8.4_8.4.12-0ubuntu11.04_armel.deb ee732499d14abee298cf290a7650c80b 752396 database optional postgresql-client-8.4_8.4.12-0ubuntu11.04_armel.deb b8ca0da7735fabe84253e86537472009 630766 libdevel optional postgresql-server-dev-8.4_8.4.12-0ubuntu11.04_armel.deb 07e38957eb0adee38a80593b5903eb33 353936 database optional postgresql-contrib-8.4_8.4.12-0ubuntu11.04_armel.deb 572787249ea3df04fcbb9e8279ce387e 43572 database optional postgresql-plperl-8.4_8.4.12-0ubuntu11.04_armel.deb 1cbaa69fc6511486d23219a7fc813efc 37036 database optional postgresql-plpython-8.4_8.4.12-0ubuntu11.04_armel.deb a26fca4a2fbd23eba88b3c4be07c6bdb 35650 database optional postgresql-pltcl-8.4_8.4.12-0ubuntu11.04_armel.deb Original-Maintainer: Martin Pitt