Format: 1.8 Date: Tue, 02 Apr 2013 11:52:28 +0200 Source: postgresql-9.1 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-9.1 postgresql-9.1-dbg postgresql-client-9.1 postgresql-server-dev-9.1 postgresql-doc-9.1 postgresql-contrib-9.1 postgresql-plperl-9.1 postgresql-plpython-9.1 postgresql-plpython3-9.1 postgresql-pltcl-9.1 Architecture: powerpc powerpc_translations Version: 9.1.9-0ubuntu12.10 Distribution: quantal Urgency: low Maintainer: Ubuntu/powerpc Build Daemon Changed-By: Martin Pitt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 9.1 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql-9.1 - object-relational SQL database, version 9.1 server postgresql-9.1-dbg - debug symbols for postgresql-9.1 postgresql-client-9.1 - front-end programs for PostgreSQL 9.1 postgresql-contrib-9.1 - additional facilities for PostgreSQL postgresql-doc-9.1 - documentation for the PostgreSQL database management system postgresql-plperl-9.1 - PL/Perl procedural language for PostgreSQL 9.1 postgresql-plpython-9.1 - PL/Python procedural language for PostgreSQL 9.1 postgresql-plpython3-9.1 - PL/Python 3 procedural language for PostgreSQL 9.1 postgresql-pltcl-9.1 - PL/Tcl procedural language for PostgreSQL 9.1 postgresql-server-dev-9.1 - development files for PostgreSQL 9.1 server-side programming Launchpad-Bugs-Fixed: 1163184 Changes: postgresql-9.1 (9.1.9-0ubuntu12.10) quantal-security; urgency=low . * New upstream security/bug fix release: (LP: #1163184) - Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is eventually rejected. [CVE-2013-1899] - Reset OpenSSL randomness state in each postmaster child process. This avoids a scenario wherein random numbers generated by "contrib/pgcrypto" functions might be relatively easy for another database user to guess. The risk is only significant when the postmaster is configured with ssl = on but most connections don't use SSL encryption. [CVE-2013-1900] - Make REPLICATION privilege checks test current user not authenticated user. An unprivileged database user could exploit this mistake to call pg_start_backup() or pg_stop_backup(), thus possibly interfering with creation of routine backups. [CVE-2013-1901] - Fix GiST indexes to not use "fuzzy" geometric comparisons when it's not appropriate to do so. The core geometric types perform comparisons using "fuzzy" equality, but gist_box_same must do exact comparisons, else GiST indexes using it might become inconsistent. After installing this update, users should "REINDEX" any GiST indexes on box, polygon, circle, or point columns, since all of these use gist_box_same. - Fix erroneous range-union and penalty logic in GiST indexes that use "contrib/btree_gist" for variable-width data types, that is text, bytea, bit, and numeric columns. These errors could result in inconsistent indexes in which some keys that are present would not be found by searches, and also in useless index bloat. Users are advised to "REINDEX" such indexes after installing this update. - Fix bugs in GiST page splitting code for multi-column indexes. These errors could result in inconsistent indexes in which some keys that are present would not be found by searches, and also in indexes that are unnecessarily inefficient to search. Users are advised to "REINDEX" multi-column GiST indexes after installing this update. - See HISTORY/changelog.gz for details about the other bug fixes. Checksums-Sha1: a745444b1178d61e41b4f5098f257ed1e3c2e40c 146988 libpq-dev_9.1.9-0ubuntu12.10_powerpc.deb d95bc65786e2bfc1c54e3ac648e4a68b26521ace 69156 libpq5_9.1.9-0ubuntu12.10_powerpc.deb eed7cf262d2a06cf297f50baf02094d52be9e8cc 31284 libecpg6_9.1.9-0ubuntu12.10_powerpc.deb 8f8d3582edd1ae0e9c45dd67192801113cd6d515 182974 libecpg-dev_9.1.9-0ubuntu12.10_powerpc.deb 11ac3ad58eef3bddb60707f48c6d9657b5f91efa 10042 libecpg-compat3_9.1.9-0ubuntu12.10_powerpc.deb 2913f5cae5f85bdff207a40232b167bf747e01f5 39042 libpgtypes3_9.1.9-0ubuntu12.10_powerpc.deb 27fbbe35d348f2fd5dd3dddf9fa2d202a5147a30 2162882 postgresql-9.1_9.1.9-0ubuntu12.10_powerpc.deb 9c4d6cbec1c045d9ffe73f5f9fa764a06742aa43 6340272 postgresql-9.1-dbg_9.1.9-0ubuntu12.10_powerpc.deb fcee06ea20b72a5ce14f1f57ee79172f7b273cd2 655216 postgresql-client-9.1_9.1.9-0ubuntu12.10_powerpc.deb c302a8e427d76f67051744151b84d14e91a77e7e 527524 postgresql-server-dev-9.1_9.1.9-0ubuntu12.10_powerpc.deb 42ded624e99afb1a6bf4b2cf820560b95d90fa95 297614 postgresql-contrib-9.1_9.1.9-0ubuntu12.10_powerpc.deb a806879b50e75e764aa78049822e2c32f225f932 33108 postgresql-plperl-9.1_9.1.9-0ubuntu12.10_powerpc.deb 1755f2ee5336c304d4ca24f5c6cde3f932543d20 31126 postgresql-plpython-9.1_9.1.9-0ubuntu12.10_powerpc.deb ae2209a07c817717893ffbe5952d6e2fcf7b4d04 31046 postgresql-plpython3-9.1_9.1.9-0ubuntu12.10_powerpc.deb f91dc6310545f60e965d8674aa8939193df246fb 20236 postgresql-pltcl-9.1_9.1.9-0ubuntu12.10_powerpc.deb 506b6d9f4874aabc6ede0576219b583bc20ce8e5 4998658 postgresql-9.1_9.1.9-0ubuntu12.10_powerpc_translations.tar.gz Checksums-Sha256: a86db6d61e05cbdcd75436ed90b2315c7d8d51db44b35233e9e76a29112e11df 146988 libpq-dev_9.1.9-0ubuntu12.10_powerpc.deb 39d7d52e1eb9871983fe84ab55d76c668f2431fb16a815c8d9732a0be5e1ec8c 69156 libpq5_9.1.9-0ubuntu12.10_powerpc.deb a6a0a19b0e5f8df07beae565166b33bb52710ea42057cd5af846b231cc25f716 31284 libecpg6_9.1.9-0ubuntu12.10_powerpc.deb 828157cf2357cd5a1519ed6e502d5168ee74b9c32266e74bf328b1ae52f97588 182974 libecpg-dev_9.1.9-0ubuntu12.10_powerpc.deb da153002d1e5bb422bbe82a6d0fd5c507fdce9c3f9e40b1043e4b9dd3d51c399 10042 libecpg-compat3_9.1.9-0ubuntu12.10_powerpc.deb c15bd85a7016040be1ee4cd73be8170c55b44ecdd885d691a1ebb4818de459df 39042 libpgtypes3_9.1.9-0ubuntu12.10_powerpc.deb 43c2360d7b918e54a17f6871c1dfdb8fa46a6fa4a4d1c73765ffdc3f54c13a72 2162882 postgresql-9.1_9.1.9-0ubuntu12.10_powerpc.deb 4a2e575aa2858563e4fd9d8bcebc4d365f8910a20c08fdcc6fdf6213b288c241 6340272 postgresql-9.1-dbg_9.1.9-0ubuntu12.10_powerpc.deb 02fdde098a4a969f440bbf112454ca8854c4aa684d691a64e26d9828068c718f 655216 postgresql-client-9.1_9.1.9-0ubuntu12.10_powerpc.deb b61749bbdb67da2aec648948dc0eb2e52f27654b96d2f90772bff511e6969701 527524 postgresql-server-dev-9.1_9.1.9-0ubuntu12.10_powerpc.deb 362f6110697ad9285dbda0cd42ab7053af5cf3062c3902789007cf11e04857fc 297614 postgresql-contrib-9.1_9.1.9-0ubuntu12.10_powerpc.deb f7f9e0a8d2f09ad6cc5698fb6f88ee9a9cc2e5f4485ebcd287d2df0fa3d6e208 33108 postgresql-plperl-9.1_9.1.9-0ubuntu12.10_powerpc.deb 24f65bad57d99e35c4034da149018bf1f5bfab06d0e1b9c0b9a82f79a2fbc35c 31126 postgresql-plpython-9.1_9.1.9-0ubuntu12.10_powerpc.deb 43082ff54db6a724bec1825ff4c005ce69536b82b62c87b68a9c8d53141da951 31046 postgresql-plpython3-9.1_9.1.9-0ubuntu12.10_powerpc.deb d427083940fe4b1898ed9a3d7ebd99e3e7e38bdc58ac3b376a24e9670172d14f 20236 postgresql-pltcl-9.1_9.1.9-0ubuntu12.10_powerpc.deb 6faef26bef3463f813b1c98f621a153ac0093202f0c861d9a506e83d98cedf43 4998658 postgresql-9.1_9.1.9-0ubuntu12.10_powerpc_translations.tar.gz Files: 9778588b9ff8cc6128f71ddc4a25240d 146988 libdevel optional libpq-dev_9.1.9-0ubuntu12.10_powerpc.deb 73795e301a91ac7a2f619bf7936bb242 69156 libs optional libpq5_9.1.9-0ubuntu12.10_powerpc.deb 7cc1a861ac1edce2bd939190084b40a1 31284 libs optional libecpg6_9.1.9-0ubuntu12.10_powerpc.deb 176092c8f01b11e4b94995b8a0374c2f 182974 libdevel optional libecpg-dev_9.1.9-0ubuntu12.10_powerpc.deb b48a6e10fb174d0ba802a0bacc10c42d 10042 libs optional libecpg-compat3_9.1.9-0ubuntu12.10_powerpc.deb a41ee95de0bb42980a16bbd50977184c 39042 libs optional libpgtypes3_9.1.9-0ubuntu12.10_powerpc.deb fa56c4716141babfbd1b0fb85a6692b2 2162882 database optional postgresql-9.1_9.1.9-0ubuntu12.10_powerpc.deb 779bc8847dcc63ebea4c364c4ed0fcdd 6340272 debug extra postgresql-9.1-dbg_9.1.9-0ubuntu12.10_powerpc.deb d2299f78390f09f45259c7b4e0b48e0b 655216 database optional postgresql-client-9.1_9.1.9-0ubuntu12.10_powerpc.deb fc955b95199f3f8bd59066285d87ca67 527524 libdevel optional postgresql-server-dev-9.1_9.1.9-0ubuntu12.10_powerpc.deb 3aeaeb8b8bab9a08dea6dc49b40f3b33 297614 database optional postgresql-contrib-9.1_9.1.9-0ubuntu12.10_powerpc.deb 2e78f5edff61dcc467be8bf394757555 33108 database optional postgresql-plperl-9.1_9.1.9-0ubuntu12.10_powerpc.deb cfefec117642651e020b378708f83cdb 31126 database optional postgresql-plpython-9.1_9.1.9-0ubuntu12.10_powerpc.deb 9ede6ae453a6d67c14d0d77ecf3deddb 31046 database optional postgresql-plpython3-9.1_9.1.9-0ubuntu12.10_powerpc.deb dfcbd2319c86912007cc17a7fd91b993 20236 database optional postgresql-pltcl-9.1_9.1.9-0ubuntu12.10_powerpc.deb a36b2af0f67ef863624daaf171f9f8f1 4998658 raw-translations - postgresql-9.1_9.1.9-0ubuntu12.10_powerpc_translations.tar.gz Original-Maintainer: Debian PostgreSQL Maintainers