-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 01 Feb 2011 17:14:21 +0100 Source: postgresql-8.4 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-8.4 postgresql-client-8.4 postgresql-server-dev-8.4 postgresql-doc-8.4 postgresql-contrib-8.4 postgresql-plperl-8.4 postgresql-plpython-8.4 postgresql-pltcl-8.4 postgresql postgresql-client postgresql-doc postgresql-contrib Architecture: ia64 Version: 8.4.7-0squeeze2 Distribution: squeeze-security Urgency: high Maintainer: ia64 Build Daemon (caballero) Changed-By: Martin Pitt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 8.4 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql - object-relational SQL database (supported version) postgresql-8.4 - object-relational SQL database, version 8.4 server postgresql-client - front-end programs for PostgreSQL (supported version) postgresql-client-8.4 - front-end programs for PostgreSQL 8.4 postgresql-contrib - additional facilities for PostgreSQL (supported version) postgresql-contrib-8.4 - additional facilities for PostgreSQL postgresql-doc - documentation for the PostgreSQL database management system postgresql-doc-8.4 - documentation for the PostgreSQL database management system postgresql-plperl-8.4 - PL/Perl procedural language for PostgreSQL 8.4 postgresql-plpython-8.4 - PL/Python procedural language for PostgreSQL 8.4 postgresql-pltcl-8.4 - PL/Tcl procedural language for PostgreSQL 8.4 postgresql-server-dev-8.4 - development files for PostgreSQL 8.4 server-side programming Changes: postgresql-8.4 (8.4.7-0squeeze2) stable-security; urgency=high . * New upstream security/bug fix release: - Fix buffer overrun in "contrib/intarray"'s input function for the query_int type. This bug is a security risk since the function's return address could be overwritten. Thanks to Apple Inc's security team for reporting this issue and supplying the fix. (CVE-2010-4015) - Avoid failures when "EXPLAIN" tries to display a simple-form CASE expression. If the CASE's test expression was a constant, the planner could simplify the CASE into a form that confused the expression-display code, resulting in "unexpected CASE WHEN clause" errors. - Fix assignment to an array slice that is before the existing range of subscripts. If there was a gap between the newly added subscripts and the first pre-existing subscript, the code miscalculated how many entries needed to be copied from the old array's null bitmap, potentially leading to data corruption or crash. - Avoid unexpected conversion overflow in planner for very distant date values. The date type supports a wider range of dates than can be represented by the timestamp types, but the planner assumed it could always convert a date to timestamp with impunity. - Fix pg_restore's text output for large objects (BLOBs) when standard_conforming_strings is on. Although restoring directly to a database worked correctly, string escaping was incorrect if pg_restore was asked for SQL text output and standard_conforming_strings had been enabled in the source database. - Fix erroneous parsing of tsquery values containing ... & !(subexpression) | ... . Queries containing this combination of operators were not executed correctly. The same error existed in "contrib/intarray"'s query_int type and "contrib/ltree"'s ltxtquery type. - Fix bug in "contrib/seg"'s GiST picksplit algorithm. This could result in considerable inefficiency, though not actually incorrect answers, in a GiST index on a seg column. If you have such an index, consider "REINDEX"ing it after installing this update. (This is identical to the bug that was fixed in "contrib/cube" in the previous update.) Checksums-Sha1: 684515aec2e9ca42965878862ba9f75d33809424 279816 libpq-dev_8.4.7-0squeeze2_ia64.deb 3eefb96a4d7e24870c3dc45c2c19e249a06ab5e8 179350 libpq5_8.4.7-0squeeze2_ia64.deb d1e4742850d09d54e109f83d680bd6cae2b9c264 100750 libecpg6_8.4.7-0squeeze2_ia64.deb a81677d609a8a3449637c8e7dd1a4179b798792c 342434 libecpg-dev_8.4.7-0squeeze2_ia64.deb d61fb46a839186a4a3170bc46812bcca5b8af9f1 30722 libecpg-compat3_8.4.7-0squeeze2_ia64.deb 3f9d29ac3bb4c0b3a189abd40d0ffff7f3f4a4a6 68816 libpgtypes3_8.4.7-0squeeze2_ia64.deb 5c04b8d67125aa8bb581eca38f5ae2cd1443c725 6332260 postgresql-8.4_8.4.7-0squeeze2_ia64.deb ee5aa5c0b556223e24d9e6daa8dac251095814c0 1657302 postgresql-client-8.4_8.4.7-0squeeze2_ia64.deb 29b8fd33e4609f706f7570a23d767c763229f66b 647426 postgresql-server-dev-8.4_8.4.7-0squeeze2_ia64.deb c286f84eb69fc355109dea480bb7d83145d5b46e 567486 postgresql-contrib-8.4_8.4.7-0squeeze2_ia64.deb 382097fe59636ca111a4f28a337cd8955f3969dd 72782 postgresql-plperl-8.4_8.4.7-0squeeze2_ia64.deb f7bce6c866538a4bb9414e24038d810c422956ff 69594 postgresql-plpython-8.4_8.4.7-0squeeze2_ia64.deb 2116c99ba8b19f1e921d0718b090ebedc7fe4f02 50054 postgresql-pltcl-8.4_8.4.7-0squeeze2_ia64.deb Checksums-Sha256: ab4fc75da655c1cb36797e5c031e24af87e8527c15fae5fa2b6f383d025f2724 279816 libpq-dev_8.4.7-0squeeze2_ia64.deb 0586af2190b4ac97ab37115a1e91906caafe324ff9768d7adea0c119e3c0c599 179350 libpq5_8.4.7-0squeeze2_ia64.deb 8937d1e94393c446899ae4415361f53f69f5ccdcfd9f9c1611f2dbf871e0cb8f 100750 libecpg6_8.4.7-0squeeze2_ia64.deb 438a062a34bcd1c69754f19028850885aa9dbab6f93ac6a4cf69ea5e59c78d31 342434 libecpg-dev_8.4.7-0squeeze2_ia64.deb b0264dae688e4c8c5f53ede95986eb1b4c7ef36e82e7872ce3b12dba88e9bfd0 30722 libecpg-compat3_8.4.7-0squeeze2_ia64.deb 88de689c6e9e2c3cfd8a7a7a012713d39306a2070f8882430003f60f38c0a4f5 68816 libpgtypes3_8.4.7-0squeeze2_ia64.deb e6ea763c2ce3b5997dd528795b0ff0f5caff490b2f7a177e21b1b8011887763f 6332260 postgresql-8.4_8.4.7-0squeeze2_ia64.deb 6d02ef924d1d0a089bc9e997977a6b5679dd4966da7748c05d8cba529f07c709 1657302 postgresql-client-8.4_8.4.7-0squeeze2_ia64.deb 46ad1e2aefe0bb4fe3f95fa83c3456a696218acf7c06fe83d3357cc1b8b84b95 647426 postgresql-server-dev-8.4_8.4.7-0squeeze2_ia64.deb 9b19e1a0f058b681219121168454338851ffd2d5929eb88a3c82020018ce9f40 567486 postgresql-contrib-8.4_8.4.7-0squeeze2_ia64.deb 88f8ee72259678c9d64a6ff203dbdca8b77d602d876db439eb3c070fc9f74f1c 72782 postgresql-plperl-8.4_8.4.7-0squeeze2_ia64.deb fdae5e8192b77ead4e3a7c0279babafb122ba01aa680087e7c92d53b00c98643 69594 postgresql-plpython-8.4_8.4.7-0squeeze2_ia64.deb be50a4c96c7b591187f7d50b5191c6ee4141775dad2e2af24f0683d2ea64e28a 50054 postgresql-pltcl-8.4_8.4.7-0squeeze2_ia64.deb Files: 0691c6eca9ec73bde8818724bef03443 279816 libdevel optional libpq-dev_8.4.7-0squeeze2_ia64.deb e7db012678b5df4c44e2491c17464974 179350 libs optional libpq5_8.4.7-0squeeze2_ia64.deb dee35ec5f078c34d650b3cf8868c4f38 100750 libs optional libecpg6_8.4.7-0squeeze2_ia64.deb 2409c4af4440c485709366ad7f1a491f 342434 libdevel optional libecpg-dev_8.4.7-0squeeze2_ia64.deb a00fa1e4f8db779006d1cfef9fce3ab7 30722 libs optional libecpg-compat3_8.4.7-0squeeze2_ia64.deb 0a9dde7b0a173ecaeeeef64f789f0d14 68816 libs optional libpgtypes3_8.4.7-0squeeze2_ia64.deb 6791b05f3c9c413d5d656642bf14cd2d 6332260 database optional postgresql-8.4_8.4.7-0squeeze2_ia64.deb 0c6f6f2602f52b346b50186bb3a78503 1657302 database optional postgresql-client-8.4_8.4.7-0squeeze2_ia64.deb 70cfd4e8a18944e5277c887d2d053cce 647426 libdevel optional postgresql-server-dev-8.4_8.4.7-0squeeze2_ia64.deb 71cfcd592b68786431ef977ae3cd1ac1 567486 database optional postgresql-contrib-8.4_8.4.7-0squeeze2_ia64.deb aea99ebca032abe1732b63b059c08218 72782 database optional postgresql-plperl-8.4_8.4.7-0squeeze2_ia64.deb 78c2d65f31018d143ec89656002d8b2a 69594 database optional postgresql-plpython-8.4_8.4.7-0squeeze2_ia64.deb 9ba4129fa1b059b247405eb370cf0a34 50054 database optional postgresql-pltcl-8.4_8.4.7-0squeeze2_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iQEcBAEBAgAGBQJNUefHAAoJEL97/wQC1SS+87wH/j4AzXL2B3nppmSv5Lntl37g LoiJAapV+2euIgv/wboAzVBNTbR4BZRKnX7QE6Cp98/HmK5U/sMnbIwQWzrI7lv3 PARByiXzjFdDto8rvVnGxBWdUvcAkquwf/etZjgTsoDNF32MjsB0g0x58oKssCcH HkS85hhUbw9wgiytaOFalRgfkcYxnXaDwXNLn9Zkoa4wtwLMkxux1OVKKsQ/RQFO xscpS6HgdkU5rlNB0Xv4fc98LP2ae867uRp+RkgCfxq0Hw4o3fWd0ITBxdgyJFNL 4ETBYOUyAmyk4XiqSQUqYlhzT7P+qcTs2WdD4g+pgI+0jfoXw5NlPgzpNPCH/rU= =Xe0v -----END PGP SIGNATURE-----