-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 21 Apr 2007 19:38:57 +0200
Source: postgresql-7.4
Binary: postgresql-plpython-7.4 postgresql-client-7.4 postgresql-7.4 postgresql-contrib-7.4 postgresql-doc-7.4 postgresql-plperl-7.4 postgresql-server-dev-7.4 postgresql-pltcl-7.4
Architecture: source i386 all
Version: 1:7.4.17-0etch1
Distribution: stable-security
Urgency: low
Maintainer: Martin Pitt <mpitt DeleteThis @debian.org>
Changed-By: Martin Pitt <mpitt DeleteThis @debian.org>
Description:
postgresql-7.4 - object-relational SQL database, version 7.4 server
postgresql-client-7.4 - front-end programs for PostgreSQL 7.4
postgresql-contrib-7.4 - additional facilities for PostgreSQL
postgresql-doc-7.4 - documentation for the PostgreSQL database management system
postgresql-plperl-7.4 - PL/Perl procedural language for PostgreSQL 7.4
postgresql-plpython-7.4 - PL/Python procedural language for PostgreSQL 7.4
postgresql-pltcl-7.4 - PL/Tcl procedural language for PostgreSQL 7.4
postgresql-server-dev-7.4 - development files for PostgreSQL 7.4 server-side programming
Changes:
postgresql-7.4 (1:7.4.17-0etch1) stable-security; urgency=low
.
* New upstream security/bugfix release:
- Support explicit placement of the temporary-table schema within
search_path, and disable searching it for functions and operators
This is needed to allow a security-definer function to set a truly
secure value of search_path. Without it, an unprivileged SQL user
can use temporary objects to execute code with the privileges of
the security-definer function (CVE-2007-2138). See "CREATE
FUNCTION" for more information.
- "/contrib/tsearch2" crash fixes.
- Fix potential-data-corruption bug in how "VACUUM FULL" handles
"UPDATE" chains.
- Fix PANIC during enlargement of a hash index.
Files:
13fbbc6d28c838411b8c0b250711475b 1126 misc optional postgresql-7.4_7.4.17-0etch1.dsc
e8850eb8950c37ad7a636e665447268d 10015601 misc optional postgresql-7.4_7.4.17.orig.tar.gz
b54781126a06e30d0cb1b45bc5098797 32632 misc optional postgresql-7.4_7.4.17-0etch1.diff.gz
4cabd3b8ffeac88d5376f15a244d0689 1173220 doc optional postgresql-doc-7.4_7.4.17-0etch1_all.deb
876f2313730e814ca2a470cae3ad089a 519790 libdevel optional postgresql-server-dev-7.4_7.4.17-0etch1_all.deb
7d15bc221eaa17822173b0051dbfab2d 3379346 misc optional postgresql-7.4_7.4.17-0etch1_i386.deb
1b682e101057d4eeec1f2408c1d358ec 1104588 misc optional postgresql-client-7.4_7.4.17-0etch1_i386.deb
3641b4c1622146f099e438dadd8d3f63 567526 misc optional postgresql-contrib-7.4_7.4.17-0etch1_i386.deb
cb8d48a4d503e4bfbedd4daaab0d0688 118948 misc optional postgresql-plperl-7.4_7.4.17-0etch1_i386.deb
6526b3a46c712093d769c1b65ea2a339 121334 misc optional postgresql-plpython-7.4_7.4.17-0etch1_i386.deb
30608f858f530541477dfc1d7251ca23 123290 misc optional postgresql-pltcl-7.4_7.4.17-0etch1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGZwKcXm3vHE4uyloRAsxFAKDL7WA/OhncTfM6PiyMTlIpJEEL5wCfVuR8
R94ifs0tIvexec2GY3OtjBI=
=cWHO
-----END PGP SIGNATURE-----
Accepted:
postgresql-7.4_7.4.17-0etch1.diff.gz
to pool/main/p/postgresql-7.4/postgresql-7.4_7.4.17-0etch1.diff.gz
postgresql-7.4_7.4.17-0etch1.dsc
to pool/main/p/postgresql-7.4/postgresql-7.4_7.4.17-0etch1.dsc
postgresql-7.4_7.4.17-0etch1_i386.deb
to pool/main/p/postgresql-7.4/postgresql-7.4_7.4.17-0etch1_i386.deb
postgresql-client-7.4_7.4.17-0etch1_i386.deb
to pool/main/p/postgresql-7.4/postgresql-client-7.4_7.4.17-0etch1_i386.deb
postgresql-contrib-7.4_7.4.17-0etch1_i386.deb
to pool/main/p/postgresql-7.4/postgresql-contrib-7.4_7.4.17-0etch1_i386.deb
postgresql-doc-7.4_7.4.17-0etch1_all.deb
to pool/main/p/postgresql-7.4/postgresql-doc-7.4_7.4.17-0etch1_all.deb
postgresql-plperl-7.4_7.4.17-0etch1_i386.deb
to pool/main/p/postgresql-7.4/postgresql-plperl-7.4_7.4.17-0etch1_i386.deb
postgresql-plpython-7.4_7.4.17-0etch1_i386.deb
to pool/main/p/postgresql-7.4/postgresql-plpython-7.4_7.4.17-0etch1_i386.deb
postgresql-pltcl-7.4_7.4.17-0etch1_i386.deb
to pool/main/p/postgresql-7.4/postgresql-pltcl-7.4_7.4.17-0etch1_i386.deb
postgresql-server-dev-7.4_7.4.17-0etch1_all.deb
to pool/main/p/postgresql-7.4/postgresql-server-dev-7.4_7.4.17-0etch1_all.deb
--
To UNSUBSCRIBE, email to debian-changes-REQUEST DeleteThis @lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster DeleteThis @lists.debian.org
Linux