-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 04 Oct 2011 11:32:12 +0200 Source: postgresql-8.4 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-8.4 postgresql-client-8.4 postgresql-server-dev-8.4 postgresql-doc-8.4 postgresql-contrib-8.4 postgresql-plperl-8.4 postgresql-plpython-8.4 postgresql-pltcl-8.4 postgresql postgresql-client postgresql-doc postgresql-contrib Architecture: kfreebsd-i386 Version: 8.4.9-0squeeze1 Distribution: squeeze-security Urgency: low Maintainer: kfreebsd-i386 Build Daemon (finzi) Changed-By: Martin Pitt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 8.4 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql - object-relational SQL database (supported version) postgresql-8.4 - object-relational SQL database, version 8.4 server postgresql-client - front-end programs for PostgreSQL (supported version) postgresql-client-8.4 - front-end programs for PostgreSQL 8.4 postgresql-contrib - additional facilities for PostgreSQL (supported version) postgresql-contrib-8.4 - additional facilities for PostgreSQL postgresql-doc - documentation for the PostgreSQL database management system postgresql-doc-8.4 - documentation for the PostgreSQL database management system postgresql-plperl-8.4 - PL/Perl procedural language for PostgreSQL 8.4 postgresql-plpython-8.4 - PL/Python procedural language for PostgreSQL 8.4 postgresql-pltcl-8.4 - PL/Tcl procedural language for PostgreSQL 8.4 postgresql-server-dev-8.4 - development files for PostgreSQL 8.4 server-side programming Closes: 628503 631285 Changes: postgresql-8.4 (8.4.9-0squeeze1) stable-security; urgency=low . * New upstream bug fix/security release: - Fix bugs in indexing of in-doubt HOT-updated tuples. These bugs could result in index corruption after reindexing a system catalog. They are not believed to affect user indexes. - Fix multiple bugs in GiST index page split processing. The probability of occurrence was low, but these could lead to index corruption. - Fix possible buffer overrun in tsvector_concat(). The function could underestimate the amount of memory needed for its result, leading to server crashes. - Fix crash in xml_recv when processing a "standalone" parameter. - Make pg_options_to_table return NULL for an option with no value. Previously such cases would result in a server crash. - Avoid possibly accessing off the end of memory in "ANALYZE" and in SJIS-2004 encoding conversion. This fixes some very-low-probability server crash scenarios. - Prevent intermittent hang in interactions of startup process with bgwriter process. This affected recovery in non-hot-standby cases. - Fix race condition in relcache init file invalidation. There was a window wherein a new backend process could read a stale init file but miss the inval messages that would tell it the data is stale. The result would be bizarre failures in catalog accesses, typically "could not read block 0 in file ..." later during startup. - Fix memory leak at end of a GiST index scan. Commands that perform many separate GiST index scans, such as verification of a new GiST-based exclusion constraint on a table already containing many rows, could transiently require large amounts of memory due to this leak. - Fix incorrect memory accounting (leading to possible memory bloat) in tuplestores supporting holdable cursors and plpgsql's RETURN NEXT command. - Fix performance problem when constructing a large, lossy bitmap. - Fix join selectivity estimation for unique columns. This fixes an erroneous planner heuristic that could lead to poor estimates of the result size of a join. - Fix nested PlaceHolderVar expressions that appear only in sub-select target lists. This mistake could result in outputs of an outer join incorrectly appearing as NULL. - Allow nested EXISTS queries to be optimized properly. - Fix array- and path-creating functions to ensure padding bytes are zeroes. This avoids some situations where the planner will think that semantically-equal constants are not equal, resulting in poor optimization. - Fix "EXPLAIN" to handle gating Result nodes within inner-indexscan subplans. The usual symptom of this oversight was "bogus varno" errors. - Work around gcc 4.6.0 bug that breaks WAL replay. This could lead to loss of committed transactions after a server crash. - Fix dump bug for VALUES in a view. - Disallow SELECT FOR UPDATE/SHARE on sequences. This operation doesn't work as expected and can lead to failures. - Fix "VACUUM" so that it always updates pg_class.reltuples/relpages. This fixes some scenarios where autovacuum could make increasingly poor decisions about when to vacuum tables. - Defend against integer overflow when computing size of a hash table. - Fix cases where "CLUSTER" might attempt to access already-removed TOAST data. - Fix portability bugs in use of credentials control messages for "peer" authentication. - Fix SSPI login when multiple roundtrips are required. The typical symptom of this problem was "The function requested is not supported" errors during SSPI login. - Throw an error if "pg_hba.conf" contains hostssl but SSL is disabled. This was concluded to be more user-friendly than the previous behavior of silently ignoring such lines. - Fix typo in pg_srand48 seed initialization. This led to failure to use all bits of the provided seed. This function is not used on most platforms (only those without srandom), and the potential security exposure from a less-random-than-expected seed seems minimal in any case. - Avoid integer overflow when the sum of LIMIT and OFFSET values exceeds 2^63. - Add overflow checks to int4 and int8 versions of generate_series(). - Fix trailing-zero removal in to_char(). In a format with FM and no digit positions after the decimal point, zeroes to the left of the decimal point could be removed incorrectly. - Fix pg_size_pretty() to avoid overflow for inputs close to 2^63. - Weaken plpgsql's check for typmod matching in record values. An overly enthusiastic check could lead to discarding length modifiers that should have been kept. - Fix pg_upgrade to preserve toast tables' relfrozenxids during an upgrade from 8.3. Failure to do this could lead to "pg_clog" files being removed too soon after the upgrade. - Fix psql's counting of script file line numbers during COPY from a different file. - Fix pg_restore's direct-to-database mode for standard_conforming_strings. pg_restore could emit incorrect commands when restoring directly to a database server from an archive file that had been made with standard_conforming_strings set to on. - Be more user-friendly about unsupported cases for parallel pg_restore. This change ensures that such cases are detected and reported before any restore actions have been taken. - Fix write-past-buffer-end and memory leak in libpq's LDAP service lookup code. - In libpq, avoid failures when using nonblocking I/O and an SSL connection. - Improve libpq's handling of failures during connection startup. In particular, the response to a server report of fork() failure during SSL connection startup is now saner. - Improve libpq's error reporting for SSL failures. - Fix PQsetvalue() to avoid possible crash when adding a new tuple to a PGresult originally obtained from a server query. - Make ecpglib write double values with 15 digits precision. - In ecpglib, be sure LC_NUMERIC setting is restored after an error. - Apply upstream fix for blowfish signed-character bug (CVE-2011-2483) (Closes: #631285) "contrib/pg_crypto"'s blowfish encryption code could give wrong results on platforms where char is signed (which is most), leading to encrypted passwords being weaker than they should be. - Fix memory leak in "contrib/seg". - Fix pgstatindex() to give consistent results for empty indexes. - Allow building with perl 5.14. (Closes: #628503) * 15-revert-typmod-check.patch: Update for new upstream release. Checksums-Sha1: ad26a89dab86120a3aa46cc7851b98a420eed183 233618 libpq-dev_8.4.9-0squeeze1_kfreebsd-i386.deb 7ccda49788174339bc4447441db6c467e2162f02 154310 libpq5_8.4.9-0squeeze1_kfreebsd-i386.deb 65a6acd8d85315b154a3f4ed7797f0da348eb225 94400 libecpg6_8.4.9-0squeeze1_kfreebsd-i386.deb 0aa3ad0591f6acd937b7ef63eabe9773660bf386 244902 libecpg-dev_8.4.9-0squeeze1_kfreebsd-i386.deb df8f047986b396ce982db17f75ce326d18c4a8ee 30696 libecpg-compat3_8.4.9-0squeeze1_kfreebsd-i386.deb 8e9b9255d00200e86f808a7ae9f7d882f73c195c 54314 libpgtypes3_8.4.9-0squeeze1_kfreebsd-i386.deb dc6740fae2175837d20feb4da13cb18f20989eda 5309720 postgresql-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 6ef178489341eef12715a17e8921c4f022ca7346 1436630 postgresql-client-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 59a4b3d00e1fac33108afa0ba193ff5f46918d13 633634 postgresql-server-dev-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb f659480fc03bb6bf7c9516395d166f0747535e7b 389156 postgresql-contrib-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 29b34e7319d8ff78fb25d2c787e25b1f286bb32c 59578 postgresql-plperl-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb ea972685c34141885a78929367446eebb87c8e52 58016 postgresql-plpython-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 550dc08eaaebcac939193bc3659903463e7b190f 45764 postgresql-pltcl-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb Checksums-Sha256: 58349a99305d00dad0a5a88f004c19ceb67fb520e18be7faeb45e6fd3dbf3315 233618 libpq-dev_8.4.9-0squeeze1_kfreebsd-i386.deb a8ff430b2977f8d306dfbfc1b7602315cc5fd6b78e4e6979116fe9cc70e04feb 154310 libpq5_8.4.9-0squeeze1_kfreebsd-i386.deb 24cd71e13e56d5bdd49ad7aca79f79988ef7255576d64d5115a047944dc745d1 94400 libecpg6_8.4.9-0squeeze1_kfreebsd-i386.deb ba0381803a26f9c1d5719078883cfc062de569da3cf7ab97e201d0a26430aee5 244902 libecpg-dev_8.4.9-0squeeze1_kfreebsd-i386.deb f4dba50acbe6c8f3e10c107a281bb147c2741d1194600aa5c5122f6426d02618 30696 libecpg-compat3_8.4.9-0squeeze1_kfreebsd-i386.deb ab438170337c034128de40ffc79116bd6df0cf1b2c780238d0942cc06dd818ec 54314 libpgtypes3_8.4.9-0squeeze1_kfreebsd-i386.deb 15d79621a9d8dd5aedbf1cee8f42c35e9583173d619dbf89d0f57df96096cb07 5309720 postgresql-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 9cb6647abe3b994b99725c50aebc048019b9a480007c72fd1c5d2de431bae314 1436630 postgresql-client-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 8eb9089ed04b2e56d87b5083bd7c00abdd38ee82b9546ea9f91e3122938ed168 633634 postgresql-server-dev-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 64397e75fbbef8c5da5f03bc3aca6726c588434305089e02e2ba63450bdc004b 389156 postgresql-contrib-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 9dab7402644d5fd0582c9d37332c89b44df9dca28fac8884f97c5cdad988bc7c 59578 postgresql-plperl-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 2e0ec85b4a52a8887319cef78b3a0cf1a905427bd46b98e44d31fd6eb2904fe3 58016 postgresql-plpython-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 0219664eae476a6d6b26278cb8e156222f719c202ee9def4a9cdeb242614a3a9 45764 postgresql-pltcl-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb Files: f4901c14cda91a24fc0467a9d08931cc 233618 libdevel optional libpq-dev_8.4.9-0squeeze1_kfreebsd-i386.deb 7aa02affff9cf39eb3032024555d0f8c 154310 libs optional libpq5_8.4.9-0squeeze1_kfreebsd-i386.deb 2df5eb73d35206efdae851767e7c5771 94400 libs optional libecpg6_8.4.9-0squeeze1_kfreebsd-i386.deb 255a0a5abfd4e20687b33d1d8e31fe13 244902 libdevel optional libecpg-dev_8.4.9-0squeeze1_kfreebsd-i386.deb 01527de6364be49cbe09c5fd65e6219f 30696 libs optional libecpg-compat3_8.4.9-0squeeze1_kfreebsd-i386.deb 0e982b7ca9ffdadd8a2fd99d133344cf 54314 libs optional libpgtypes3_8.4.9-0squeeze1_kfreebsd-i386.deb 000c8f632ffd6ea9dc49f637a8f94715 5309720 database optional postgresql-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 16c36e7ffb440047813af8c3e377cf88 1436630 database optional postgresql-client-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb f4f47d6755ac9347f2dcac34aff6bde6 633634 libdevel optional postgresql-server-dev-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb fb35ce88981c794cd1a562a41582c490 389156 database optional postgresql-contrib-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb d7fb2f9db5df03c2f3f03d4e058e4954 59578 database optional postgresql-plperl-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 580a8b59961f6f2ae481d168bc1ae6ef 58016 database optional postgresql-plpython-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb 1711f58a278f317fd4d1fce6244b36a6 45764 database optional postgresql-pltcl-8.4_8.4.9-0squeeze1_kfreebsd-i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/kFreeBSD) iQIcBAEBAgAGBQJOm8BnAAoJEDlOvsTBpkgLrwIP/AmYWRyWwKVl8+CNob27DiIp BYX+9j2SiL+y1ef32Cu3nbyJgOq+2Hog7x6myHvaog8awTGuD7v6Z1d3dnondZwl I/VX2aqYOIMQ24KA/2Y3pp9d7Qq86WRvK3Rtpmm467KzqtkGTNXNiEaR7TEjTEzk L/yPs6eOrOjBUvzjUZTRelyNiGgiqHzQ+Xckxfh0/G/yezUuynqLISgNUj441Dxt bO5WwemJ8463LQbhASaikEnZiYOmnufkBb3RiAl8+7Dx7fnqNhHPBhXql6+kesIt FnOZyCz0STT3rDGfXVib5jDXOLylNOzDP6AXIg7UiFPtFriezZCG/G0rH0gRHC47 NT312/+s7UIgEqqgsLSmqgjMc1H/diMNvC+U//hetq6BzLTuO+NPb9v1rCLlBsZP RgGBHXh0Lh2BJ0L9+SksQB41rVChIs+foReTBK1o+CdZCeA6N3uKigpic8l2diNi y68fDzpNRE80PbHYAMaRrVW356MNDO3IHkQOMYUCLzzeKz20w8J54OUDdsDBMfkl 1+ngJ1hu960tCKGqteoyy5DaXFIwSziDMdNYpv8ie+LynEdkV7aYL20GwFCYxXLZ t6AmPJ0AD8Rncnr75WzCX3aW93yok1GsY3CTvQIrMKtrZPZBTtBOH06mK+sI8rw4 RzvhcpynZK9Utsip/Nsy =VrZ/ -----END PGP SIGNATURE-----