-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Tue, 30 May 2006 22:15:06 +0200 Source: psycopg Binary: python-psycopg python2.3-psycopg zope-psycopgda python2.4-psycopg Architecture: source all i386 Version: 1.1.21-5 Distribution: unstable Urgency: high Maintainer: Fabio Tranchitella <kobold@debian.org> Changed-By: Fabio Tranchitella <kobold@debian.org> Description: python-psycopg - Python module for PostgreSQL [dummy package] python2.3-psycopg - Python 2.3 module for PostgreSQL python2.4-psycopg - Python 2.4 module for PostgreSQL zope-psycopgda - Zope database adapter based on python-psycopg Closes: 369230 Changes: psycopg (1.1.21-5) unstable; urgency=high . * ypemod.c, new_psyco_bufferobject(): - Escape quotes psycopg.Binary() results as '', not as \', since the latter does not work any more with some client encodings with the latest PostgreSQL (in some multi-byte encodings you can exploit \' escaping to inject SQL code, see CVE-2006-2314). (Closes: #369230) Thanks to Martin Pitt and Ubuntu security team for the patch. Files: 63e7afb4c869bd449ac940dd994bfb11 812 python optional psycopg_1.1.21-5.dsc bda1621716bee15839b3d3e9c403c293 6745 python optional psycopg_1.1.21-5.diff.gz 0ebea473a6c8ffc96ad2dedbb50aa548 19368 python optional zope-psycopgda_1.1.21-5_all.deb 27246f94c9cf51f9a85d76d747b2c28c 6220 python optional python-psycopg_1.1.21-5_i386.deb 060bd5cb6687cd24b83898d15f255571 141704 python optional python2.3-psycopg_1.1.21-5_i386.deb 979bdb0445bb91ecc0695942c7a3a624 140840 python optional python2.4-psycopg_1.1.21-5_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (GNU/Linux) iD8DBQFEfKf6K/juK3+WFWQRAsGgAKCGxmHbS4dAkwnckx/h5ll0eq5tKQCgkZsQ lEc8CxFCKYRKPW+/xLaMEAs= =jp2T -----END PGP SIGNATURE----- Accepted: psycopg_1.1.21-5.diff.gz to pool/main/p/psycopg/psycopg_1.1.21-5.diff.gz psycopg_1.1.21-5.dsc to pool/main/p/psycopg/psycopg_1.1.21-5.dsc python-psycopg_1.1.21-5_i386.deb to pool/main/p/psycopg/python-psycopg_1.1.21-5_i386.deb python2.3-psycopg_1.1.21-5_i386.deb to pool/main/p/psycopg/python2.3-psycopg_1.1.21-5_i386.deb python2.4-psycopg_1.1.21-5_i386.deb to pool/main/p/psycopg/python2.4-psycopg_1.1.21-5_i386.deb zope-psycopgda_1.1.21-5_all.deb to pool/main/p/psycopg/zope-psycopgda_1.1.21-5_all.deb