-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 14 Dec 2009 23:00:56 +0100 Source: postgresql-8.3 Binary: postgresql-8.3 postgresql-client-8.3 postgresql-server-dev-8.3 postgresql-doc-8.3 postgresql-contrib-8.3 postgresql-plperl-8.3 postgresql-plpython-8.3 postgresql-pltcl-8.3 Architecture: source all i386 Version: 8.3.9-1 Distribution: unstable Urgency: medium Maintainer: Martin Pitt <mpitt@debian.org> Changed-By: Martin Pitt <mpitt@debian.org> Description: postgresql-8.3 - object-relational SQL database, version 8.3 server postgresql-client-8.3 - front-end programs for PostgreSQL 8.3 postgresql-contrib-8.3 - additional facilities for PostgreSQL postgresql-doc-8.3 - documentation for the PostgreSQL database management system postgresql-plperl-8.3 - PL/Perl procedural language for PostgreSQL 8.3 postgresql-plpython-8.3 - PL/Python procedural language for PostgreSQL 8.3 postgresql-pltcl-8.3 - PL/Tcl procedural language for PostgreSQL 8.3 postgresql-server-dev-8.3 - development files for PostgreSQL 8.3 server-side programming Closes: 553828 Changes: postgresql-8.3 (8.3.9-1) unstable; urgency=medium . Urgency medium due to security fixes. . * New upstream security/bug fix release: - Protect against indirect security threats caused by index functions changing session-local state. This change prevents allegedly-immutable index functions from possibly subverting a superuser's session (CVE-2009-4136). - Reject SSL certificates containing an embedded null byte in the common name (CN) field. This prevents unintended matching of a certificate to a server or client name during SSL validation (CVE-2009-4034). - Fix possible crash during backend-startup-time cache initialization. - Avoid crash on empty thesaurus dictionary. - Prevent signals from interrupting VACUUM at unsafe times. - Fix possible crash due to integer overflow in hash table size calculation. - Fix very rare crash in inet/cidr comparisons. - Ensure that shared tuple-level locks held by prepared transactions are not ignored. - Fix premature drop of temporary files used for a cursor that is accessed within a subtransaction. - Fix memory leak in syslogger process when rotating to a new CSV logfile. - Fix incorrect logic for GiST index page splits, when the split depends on a non-first column of the index. - Don't error out if recycling or removing an old WAL file fails at the end of checkpoint. It's better to treat the problem as non-fatal and allow the checkpoint to complete. Future checkpoints will retry the removal. Such problems are not expected in normal operation, but have been seen to be caused by misdesigned Windows anti-virus and backup software. - Fix PAM password processing to be more robust. - Raise the maximum authentication token (Kerberos ticket) size in GSSAPI and SSPI authentication methods. While the old 2000-byte limit was more than enough for Unix Kerberos implementations, tickets issued by Windows Domain Controllers can be much larger. - Re-enable collection of access statistics for sequences. This used to work but was broken in 8.3. - Fix processing of ownership dependencies during CREATE OR REPLACE FUNCTION. - Fix incorrect handling of WHERE "x"="x" conditions. In some cases these could get ignored as redundant, but they aren't -- they're equivalent to "x" IS NOT NULL. - Make text search parser accept underscores in XML attributes. - Fix encoding handling in xml binary input. If the XML header doesn't specify an encoding, we now assume UTF-8 by default; the previous handling was inconsistent. - Fix bug with calling plperl from plperlu or vice versa. - Fix session-lifespan memory leak when a PL/Perl function is redefined. - Ensure that Perl arrays are properly converted to PostgreSQL arrays when returned by a set-returning PL/Perl function. - Fix rare crash in exception processing in PL/Python. - Make the postmaster ignore any application_name parameter in connection request packets, to improve compatibility with future libpq versions. * debian/control: libreadline5-dev → libreadline-dev. (Closes: #553828) Checksums-Sha1: 51dfb9e8fe56a9a1be51e4940178e2a34a7f94be 1518 postgresql-8.3_8.3.9-1.dsc 9c0536556707e22b10668c52b0689a0803a9e07e 13850244 postgresql-8.3_8.3.9.orig.tar.gz 614aee1475a3f204a651f11fb1f6c786965eb8ad 44168 postgresql-8.3_8.3.9-1.diff.gz db240e8171ba425d75e7d1e70aed845e0a74f519 2155802 postgresql-doc-8.3_8.3.9-1_all.deb bd9e6f7823bf51dbd23f4eb130ee79d8cafb102c 5269042 postgresql-8.3_8.3.9-1_i386.deb 50060843e1518c37ff748f21ff305111737b7a3b 1691164 postgresql-client-8.3_8.3.9-1_i386.deb e0cecc6c3e121097896dc7c9126334f4e6074046 822172 postgresql-server-dev-8.3_8.3.9-1_i386.deb a47a3bd83029387fb3eed627596ef29c742721e3 584628 postgresql-contrib-8.3_8.3.9-1_i386.deb e03e8b9cdd08770b6ac44b880f5391ce99ebca61 274120 postgresql-plperl-8.3_8.3.9-1_i386.deb 8edcc1f2f44274228226fdaec24f76c5eb06df41 267010 postgresql-plpython-8.3_8.3.9-1_i386.deb 792f6e8ac834d65e50552ddf580c4642e7b15b61 266022 postgresql-pltcl-8.3_8.3.9-1_i386.deb Checksums-Sha256: ad1a3b4086f34e27661c4f8b90959dd9339fcbbb2fdf0d283b31e842a2dc9f68 1518 postgresql-8.3_8.3.9-1.dsc e57ca26b47967cbee363275cb5509e7223256441152d1101a320c03e30839544 13850244 postgresql-8.3_8.3.9.orig.tar.gz bd82d75b88cbf0020b0e98accc1ebb9d4edab13cecf1dc513e2b989424db8e31 44168 postgresql-8.3_8.3.9-1.diff.gz f00fc7626c38aee702ae1071d9cf4c773d50e0f7124472e4648fdc5b297558ed 2155802 postgresql-doc-8.3_8.3.9-1_all.deb 0ff9a7d504a86319a8ac170b7c9c853815409b2b76ac58d13c8c3bca55c07378 5269042 postgresql-8.3_8.3.9-1_i386.deb 0b55c03f92ea4039dfea7a631bef8b7b89d94a11b82a7bac0e9cf1e564c547a2 1691164 postgresql-client-8.3_8.3.9-1_i386.deb c055166882f7aebcab4e1fb05dd3573785e4a87a543be454e6aa2778a8e43168 822172 postgresql-server-dev-8.3_8.3.9-1_i386.deb c5287336bc95b3c451906c45b359f79ba625dd788b1a0a0fd77cfdc263d08972 584628 postgresql-contrib-8.3_8.3.9-1_i386.deb 1b8b969aed03e3868895bf04234e11b3ae69b795e6729ebd4cec3616e228b0ff 274120 postgresql-plperl-8.3_8.3.9-1_i386.deb 758cc4668faa650083a753ff08d6f44c0627bfd67c56103d9674b06a9d4602f3 267010 postgresql-plpython-8.3_8.3.9-1_i386.deb 7b6774d584328dfd50577be4edd89506ea421db1a65e3b82c35ff904c012d3c4 266022 postgresql-pltcl-8.3_8.3.9-1_i386.deb Files: 8d33ec87e413af400cc52602899ad66c 1518 database optional postgresql-8.3_8.3.9-1.dsc 05088ab3b924a326914572eb77db541b 13850244 database optional postgresql-8.3_8.3.9.orig.tar.gz a2a371bc61e4cebff40dba1d017cb85e 44168 database optional postgresql-8.3_8.3.9-1.diff.gz d24ca2033915a8b803cb7507f19813f6 2155802 doc optional postgresql-doc-8.3_8.3.9-1_all.deb d89e2812eae05f6cbfdba4d1375b6c31 5269042 database optional postgresql-8.3_8.3.9-1_i386.deb 7590c833bca2ea2b369338179346e66f 1691164 database optional postgresql-client-8.3_8.3.9-1_i386.deb 16e3609d9f03dda55ee99b7a1c11e005 822172 libdevel optional postgresql-server-dev-8.3_8.3.9-1_i386.deb 4ba9e73b4ff0a09c5f484a93c40f827c 584628 database optional postgresql-contrib-8.3_8.3.9-1_i386.deb c6a66c033d9171c6a311839689ff8851 274120 database optional postgresql-plperl-8.3_8.3.9-1_i386.deb be319d907b8be39747fd0a06d53b5395 267010 database optional postgresql-plpython-8.3_8.3.9-1_i386.deb 545bacddb468f87a1ddf3c655054ced2 266022 database optional postgresql-pltcl-8.3_8.3.9-1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAksmyJAACgkQDecnbV4Fd/KcYACfctu1NACkIfQO7cd8s9dZDowc 1cUAoMjL++KjBga9fdUXFRYojBy0yfd0 =vMM8 -----END PGP SIGNATURE----- Accepted: postgresql-8.3_8.3.9-1.diff.gz to main/p/postgresql-8.3/postgresql-8.3_8.3.9-1.diff.gz postgresql-8.3_8.3.9-1.dsc to main/p/postgresql-8.3/postgresql-8.3_8.3.9-1.dsc postgresql-8.3_8.3.9-1_i386.deb to main/p/postgresql-8.3/postgresql-8.3_8.3.9-1_i386.deb postgresql-8.3_8.3.9.orig.tar.gz to main/p/postgresql-8.3/postgresql-8.3_8.3.9.orig.tar.gz postgresql-client-8.3_8.3.9-1_i386.deb to main/p/postgresql-8.3/postgresql-client-8.3_8.3.9-1_i386.deb postgresql-contrib-8.3_8.3.9-1_i386.deb to main/p/postgresql-8.3/postgresql-contrib-8.3_8.3.9-1_i386.deb postgresql-doc-8.3_8.3.9-1_all.deb to main/p/postgresql-8.3/postgresql-doc-8.3_8.3.9-1_all.deb postgresql-plperl-8.3_8.3.9-1_i386.deb to main/p/postgresql-8.3/postgresql-plperl-8.3_8.3.9-1_i386.deb postgresql-plpython-8.3_8.3.9-1_i386.deb to main/p/postgresql-8.3/postgresql-plpython-8.3_8.3.9-1_i386.deb postgresql-pltcl-8.3_8.3.9-1_i386.deb to main/p/postgresql-8.3/postgresql-pltcl-8.3_8.3.9-1_i386.deb postgresql-server-dev-8.3_8.3.9-1_i386.deb to main/p/postgresql-8.3/postgresql-server-dev-8.3_8.3.9-1_i386.deb
