-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sat, 3 Jun 2006 01:27:11 +1000 Source: python-pgsql Binary: python-pgsql python2.1-pgsql python2.3-pgsql python2.2-pgsql Architecture: source all i386 Version: 2.4.0-5sarge1 Distribution: stable Urgency: high Maintainer: Ben Burton <bab@debian.org> Changed-By: Ben Burton <bab@debian.org> Description: python-pgsql - A Python DB-API 2.0 interface to PostgreSQL v7.x python2.1-pgsql - A Python DB-API 2.0 interface to PostgreSQL v7.x python2.2-pgsql - A Python DB-API 2.0 interface to PostgreSQL v7.x python2.3-pgsql - A Python DB-API 2.0 interface to PostgreSQL v7.x Closes: 369250 Changes: python-pgsql (2.4.0-5sarge1) stable; urgency=high . * In routines PgQuoteString() and PgQuoteBytea(), quotes are now escaped as '', not as \' (closes: #369250). In some multi-byte encodings you can exploit \' escaping to inject SQL code, and so \' no longer works for such client encodings with newer PostgreSQL servers. Thanks to Martin Pitt for the patch. * Reference: CVE-2006-2314. Files: e1898a53d17f3a2ad684001ce70de7eb 716 python optional python-pgsql_2.4.0-5sarge1.dsc 07f605fc42cdb148d471d78bc4039fd5 11820 python optional python-pgsql_2.4.0-5sarge1.diff.gz ca6480ec9a67920140dad29884772982 17512 python optional python-pgsql_2.4.0-5sarge1_all.deb 9736ea007546132ebba104739c911a8d 142396 python optional python2.1-pgsql_2.4.0-5sarge1_i386.deb 5c0d4b626a7f6640cfe30a6456c5d557 144704 python optional python2.2-pgsql_2.4.0-5sarge1_i386.deb 0181fc891ac16ed723189b630aabcac1 144722 python optional python2.3-pgsql_2.4.0-5sarge1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (GNU/Linux) iD8DBQFEhMSMMQNuxza4YcERAiXKAJ9YBOgwXWbEC5zgF5pQ7YfxmzvV+QCcD8Hf jioszE5XHqLdpBgLJ2IG3hs= =b2tg -----END PGP SIGNATURE----- Accepted: python-pgsql_2.4.0-5sarge1.diff.gz to pool/main/p/python-pgsql/python-pgsql_2.4.0-5sarge1.diff.gz python-pgsql_2.4.0-5sarge1.dsc to pool/main/p/python-pgsql/python-pgsql_2.4.0-5sarge1.dsc python-pgsql_2.4.0-5sarge1_all.deb to pool/main/p/python-pgsql/python-pgsql_2.4.0-5sarge1_all.deb python2.1-pgsql_2.4.0-5sarge1_i386.deb to pool/main/p/python-pgsql/python2.1-pgsql_2.4.0-5sarge1_i386.deb python2.2-pgsql_2.4.0-5sarge1_i386.deb to pool/main/p/python-pgsql/python2.2-pgsql_2.4.0-5sarge1_i386.deb python2.3-pgsql_2.4.0-5sarge1_i386.deb to pool/main/p/python-pgsql/python2.3-pgsql_2.4.0-5sarge1_i386.deb