-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Fri, 04 Jan 2008 16:30:36 +0100 Source: postgresql-8.2 Binary: libpq5 postgresql-doc-8.2 libpgtypes2 libpq-dev postgresql-doc postgresql postgresql-contrib postgresql-plpython-8.2 postgresql-plperl-8.2 postgresql-client postgresql-server-dev-8.2 postgresql-contrib-8.2 postgresql-client-8.2 postgresql-8.2 libecpg-compat2 libecpg5 libecpg-dev postgresql-pltcl-8.2 Architecture: source all i386 Version: 8.2.6-1 Distribution: unstable Urgency: medium Maintainer: Martin Pitt <mpitt@debian.org> Changed-By: Martin Pitt <mpitt@debian.org> Description: libecpg-compat2 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg5 - run-time library for ECPG programs libpgtypes2 - shared library libpgtypes for PostgreSQL 8.2 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql - object-relational SQL database (latest version) postgresql-8.2 - object-relational SQL database, version 8.2 server postgresql-client - front-end programs for PostgreSQL (latest version) postgresql-client-8.2 - front-end programs for PostgreSQL 8.2 postgresql-contrib - additional facilities for PostgreSQL (latest version) postgresql-contrib-8.2 - additional facilities for PostgreSQL postgresql-doc - documentation for the PostgreSQL database management system postgresql-doc-8.2 - documentation for the PostgreSQL database management system postgresql-plperl-8.2 - PL/Perl procedural language for PostgreSQL 8.2 postgresql-plpython-8.2 - PL/Python procedural language for PostgreSQL 8.2 postgresql-pltcl-8.2 - PL/Tcl procedural language for PostgreSQL 8.2 postgresql-server-dev-8.2 - development files for PostgreSQL 8.2 server-side programming Closes: 455509 Changes: postgresql-8.2 (8.2.6-1) unstable; urgency=medium . * New upstream security/bugfix release: - Prevent functions in indexes from executing with the privileges of the user running "VACUUM", "ANALYZE", etc. "SET ROLE" is now forbidden within a SECURITY DEFINER context. [CVE-2007-6600] - Suitably crafted regular-expression patterns could cause crashes, infinite or near-infinite looping, and/or massive memory consumption, all of which pose denial-of-service hazards for applications that accept regex search patterns from untrustworthy sources. [CVE-2007-4769, CVE-2007-4772, CVE-2007-6067] - Require non-superusers who use "/contrib/dblink" to use only password authentication, as a security measure. The fix that appeared for this in 8.2.5 was incomplete, as it plugged the hole for only some "dblink" functions. [CVE-2007-6601, CVE-2007-3278] - Fix bugs in WAL replay for GIN indexes. - Fix GIN index build to work properly when maintenance_work_mem is 4GB or more. - Improve planner's handling of LIKE/regex estimation in non-C locales. - Fix planning-speed problem for deep outer-join nests, as well as possible poor choice of join order. - Fix planner failure in some cases of WHERE false AND var IN (SELECT ...). - Make "CREATE TABLE ... SERIAL" and "ALTER SEQUENCE ... OWNED BY" not change the currval() state of the sequence. - Preserve the tablespace and storage parameters of indexes that are rebuilt by "ALTER TABLE ... ALTER COLUMN TYPE". - Make archive recovery always start a new WAL timeline, rather than only when a recovery stop time was used. This avoids a corner-case risk of trying to overwrite an existing archived copy of the last WAL segment, and seems simpler and cleaner than the original definition. - Make "VACUUM" not use all of maintenance_work_mem when the table is too small for it to be useful. - Fix potential crash in translate() when using a multibyte database encoding. - Make corr() return the correct result for negative correlation values. - Fix overflow in extract(epoch from interval) for intervals exceeding 68 years. - Fix PL/Perl to not fail when a UTF-8 regular expression is used in a trusted function. - Fix PL/Python to work correctly with Python 2.5 on 64-bit machines (Marko Kreen) - Fix PL/Python to not crash on long exception messages. - Fix pg_dump to correctly handle inheritance child tables that have default expressions different from their parent's. - Fix libpq crash when PGPASSFILE refers to a file that is not a plain file. - ecpg parser fixes. - Make "contrib/tablefunc"'s crosstab() handle NULL rowid as a category in its own right, rather than crashing. - Fix tsvector and tsquery output routines to escape backslashes correctly. (LP: #146382) - Fix crash of to_tsvector() on huge input strings. * Drop debian/patches/00upstream-tsearch2-compareWORD.patch, upstream. * Ship pg_config in postgresql-server-dev, and ship a copy in /usr/bin in libpq-dev, instead of libpq-dev shipping it in /usr/lib/postgresql/<version>/bin. This makes it possible to use a libpq-dev from a different major version (like 8.3 from experimental). (Closes: #455509) * Bump Standards-Version to 3.7.3 (no changes necessary). Files: 2c969ce37e38a226aaba4f7919d95c36 1159 misc optional postgresql-8.2_8.2.6-1.dsc 75de71c7fa102b8e56f5fabd1f79584e 12264131 misc optional postgresql-8.2_8.2.6.orig.tar.gz b72b16de4a9854a03d606a25223c633a 31661 misc optional postgresql-8.2_8.2.6-1.diff.gz f21099f8e5a4f003b0871a732d09eb58 1748452 doc optional postgresql-doc-8.2_8.2.6-1_all.deb e30130f54e5ec83d995fcdaf1536c405 179606 misc optional postgresql_8.2.6-1_all.deb cc812d0131dc7acf046c1c86bfa0d317 179586 misc optional postgresql-client_8.2.6-1_all.deb 900e60241112def0b3f5eb1121affdf5 179416 doc optional postgresql-doc_8.2.6-1_all.deb 402f3414f8f6b861452981ae047b5492 179478 misc optional postgresql-contrib_8.2.6-1_all.deb 69f9658af0cfd0c37ce621537a6d7039 356622 libdevel optional libpq-dev_8.2.6-1_i386.deb 8d4b4c8f35cd22c731f79dbbd38dbe59 298450 libs optional libpq5_8.2.6-1_i386.deb a8d1432444d1adbed571ca652ec7c4bd 205114 libs optional libecpg5_8.2.6-1_i386.deb 0495298dea76be2ddfaff7ffdf521bf7 377194 libdevel optional libecpg-dev_8.2.6-1_i386.deb fe045e36974115e9703daae939e672d3 186398 libs optional libecpg-compat2_8.2.6-1_i386.deb 6b44d215c3d03606ad75086016a44745 208910 libs optional libpgtypes2_8.2.6-1_i386.deb cebb25d6ec2f6a3e12b62f5bf76db538 4490746 misc optional postgresql-8.2_8.2.6-1_i386.deb 88406c3adf961553102d1fddea497ac9 1494774 misc optional postgresql-client-8.2_8.2.6-1_i386.deb bfb9619624caf6e2c152f37eb3771906 686916 libdevel optional postgresql-server-dev-8.2_8.2.6-1_i386.deb a0e409eaf87ce03a4bae55eb18bf974d 664302 misc optional postgresql-contrib-8.2_8.2.6-1_i386.deb 12909345150e24877f8bd86c735f7f56 206794 misc optional postgresql-plperl-8.2_8.2.6-1_i386.deb fa1c564274330fe154c2597f172248cb 197664 misc optional postgresql-plpython-8.2_8.2.6-1_i386.deb 474601f7ff367fb071c1e74a4439c0a4 196870 misc optional postgresql-pltcl-8.2_8.2.6-1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHggLvDecnbV4Fd/IRAmYVAJ9ZrI+adCKgBnc1VR6LY2rhuMvU0wCg2iLk VK6Zpdv9WmXj0e0po/Nn3Co= =H0oZ -----END PGP SIGNATURE----- Accepted: libecpg-compat2_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/libecpg-compat2_8.2.6-1_i386.deb libecpg-dev_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/libecpg-dev_8.2.6-1_i386.deb libecpg5_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/libecpg5_8.2.6-1_i386.deb libpgtypes2_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/libpgtypes2_8.2.6-1_i386.deb libpq-dev_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/libpq-dev_8.2.6-1_i386.deb libpq5_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/libpq5_8.2.6-1_i386.deb postgresql-8.2_8.2.6-1.diff.gz to pool/main/p/postgresql-8.2/postgresql-8.2_8.2.6-1.diff.gz postgresql-8.2_8.2.6-1.dsc to pool/main/p/postgresql-8.2/postgresql-8.2_8.2.6-1.dsc postgresql-8.2_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/postgresql-8.2_8.2.6-1_i386.deb postgresql-8.2_8.2.6.orig.tar.gz to pool/main/p/postgresql-8.2/postgresql-8.2_8.2.6.orig.tar.gz postgresql-client-8.2_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/postgresql-client-8.2_8.2.6-1_i386.deb postgresql-client_8.2.6-1_all.deb to pool/main/p/postgresql-8.2/postgresql-client_8.2.6-1_all.deb postgresql-contrib-8.2_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/postgresql-contrib-8.2_8.2.6-1_i386.deb postgresql-contrib_8.2.6-1_all.deb to pool/main/p/postgresql-8.2/postgresql-contrib_8.2.6-1_all.deb postgresql-doc-8.2_8.2.6-1_all.deb to pool/main/p/postgresql-8.2/postgresql-doc-8.2_8.2.6-1_all.deb postgresql-doc_8.2.6-1_all.deb to pool/main/p/postgresql-8.2/postgresql-doc_8.2.6-1_all.deb postgresql-plperl-8.2_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/postgresql-plperl-8.2_8.2.6-1_i386.deb postgresql-plpython-8.2_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/postgresql-plpython-8.2_8.2.6-1_i386.deb postgresql-pltcl-8.2_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/postgresql-pltcl-8.2_8.2.6-1_i386.deb postgresql-server-dev-8.2_8.2.6-1_i386.deb to pool/main/p/postgresql-8.2/postgresql-server-dev-8.2_8.2.6-1_i386.deb postgresql_8.2.6-1_all.deb to pool/main/p/postgresql-8.2/postgresql_8.2.6-1_all.deb
