-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 04 Oct 2011 11:32:12 +0200 Source: postgresql-8.4 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-8.4 postgresql-client-8.4 postgresql-server-dev-8.4 postgresql-doc-8.4 postgresql-contrib-8.4 postgresql-plperl-8.4 postgresql-plpython-8.4 postgresql-pltcl-8.4 postgresql postgresql-client postgresql-doc postgresql-contrib Architecture: source all amd64 Version: 8.4.9-0squeeze1 Distribution: stable-security Urgency: low Maintainer: Martin Pitt Changed-By: Martin Pitt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 8.4 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql - object-relational SQL database (supported version) postgresql-8.4 - object-relational SQL database, version 8.4 server postgresql-client - front-end programs for PostgreSQL (supported version) postgresql-client-8.4 - front-end programs for PostgreSQL 8.4 postgresql-contrib - additional facilities for PostgreSQL (supported version) postgresql-contrib-8.4 - additional facilities for PostgreSQL postgresql-doc - documentation for the PostgreSQL database management system postgresql-doc-8.4 - documentation for the PostgreSQL database management system postgresql-plperl-8.4 - PL/Perl procedural language for PostgreSQL 8.4 postgresql-plpython-8.4 - PL/Python procedural language for PostgreSQL 8.4 postgresql-pltcl-8.4 - PL/Tcl procedural language for PostgreSQL 8.4 postgresql-server-dev-8.4 - development files for PostgreSQL 8.4 server-side programming Closes: 628503 631285 Changes: postgresql-8.4 (8.4.9-0squeeze1) stable-security; urgency=low . * New upstream bug fix/security release: - Fix bugs in indexing of in-doubt HOT-updated tuples. These bugs could result in index corruption after reindexing a system catalog. They are not believed to affect user indexes. - Fix multiple bugs in GiST index page split processing. The probability of occurrence was low, but these could lead to index corruption. - Fix possible buffer overrun in tsvector_concat(). The function could underestimate the amount of memory needed for its result, leading to server crashes. - Fix crash in xml_recv when processing a "standalone" parameter. - Make pg_options_to_table return NULL for an option with no value. Previously such cases would result in a server crash. - Avoid possibly accessing off the end of memory in "ANALYZE" and in SJIS-2004 encoding conversion. This fixes some very-low-probability server crash scenarios. - Prevent intermittent hang in interactions of startup process with bgwriter process. This affected recovery in non-hot-standby cases. - Fix race condition in relcache init file invalidation. There was a window wherein a new backend process could read a stale init file but miss the inval messages that would tell it the data is stale. The result would be bizarre failures in catalog accesses, typically "could not read block 0 in file ..." later during startup. - Fix memory leak at end of a GiST index scan. Commands that perform many separate GiST index scans, such as verification of a new GiST-based exclusion constraint on a table already containing many rows, could transiently require large amounts of memory due to this leak. - Fix incorrect memory accounting (leading to possible memory bloat) in tuplestores supporting holdable cursors and plpgsql's RETURN NEXT command. - Fix performance problem when constructing a large, lossy bitmap. - Fix join selectivity estimation for unique columns. This fixes an erroneous planner heuristic that could lead to poor estimates of the result size of a join. - Fix nested PlaceHolderVar expressions that appear only in sub-select target lists. This mistake could result in outputs of an outer join incorrectly appearing as NULL. - Allow nested EXISTS queries to be optimized properly. - Fix array- and path-creating functions to ensure padding bytes are zeroes. This avoids some situations where the planner will think that semantically-equal constants are not equal, resulting in poor optimization. - Fix "EXPLAIN" to handle gating Result nodes within inner-indexscan subplans. The usual symptom of this oversight was "bogus varno" errors. - Work around gcc 4.6.0 bug that breaks WAL replay. This could lead to loss of committed transactions after a server crash. - Fix dump bug for VALUES in a view. - Disallow SELECT FOR UPDATE/SHARE on sequences. This operation doesn't work as expected and can lead to failures. - Fix "VACUUM" so that it always updates pg_class.reltuples/relpages. This fixes some scenarios where autovacuum could make increasingly poor decisions about when to vacuum tables. - Defend against integer overflow when computing size of a hash table. - Fix cases where "CLUSTER" might attempt to access already-removed TOAST data. - Fix portability bugs in use of credentials control messages for "peer" authentication. - Fix SSPI login when multiple roundtrips are required. The typical symptom of this problem was "The function requested is not supported" errors during SSPI login. - Throw an error if "pg_hba.conf" contains hostssl but SSL is disabled. This was concluded to be more user-friendly than the previous behavior of silently ignoring such lines. - Fix typo in pg_srand48 seed initialization. This led to failure to use all bits of the provided seed. This function is not used on most platforms (only those without srandom), and the potential security exposure from a less-random-than-expected seed seems minimal in any case. - Avoid integer overflow when the sum of LIMIT and OFFSET values exceeds 2^63. - Add overflow checks to int4 and int8 versions of generate_series(). - Fix trailing-zero removal in to_char(). In a format with FM and no digit positions after the decimal point, zeroes to the left of the decimal point could be removed incorrectly. - Fix pg_size_pretty() to avoid overflow for inputs close to 2^63. - Weaken plpgsql's check for typmod matching in record values. An overly enthusiastic check could lead to discarding length modifiers that should have been kept. - Fix pg_upgrade to preserve toast tables' relfrozenxids during an upgrade from 8.3. Failure to do this could lead to "pg_clog" files being removed too soon after the upgrade. - Fix psql's counting of script file line numbers during COPY from a different file. - Fix pg_restore's direct-to-database mode for standard_conforming_strings. pg_restore could emit incorrect commands when restoring directly to a database server from an archive file that had been made with standard_conforming_strings set to on. - Be more user-friendly about unsupported cases for parallel pg_restore. This change ensures that such cases are detected and reported before any restore actions have been taken. - Fix write-past-buffer-end and memory leak in libpq's LDAP service lookup code. - In libpq, avoid failures when using nonblocking I/O and an SSL connection. - Improve libpq's handling of failures during connection startup. In particular, the response to a server report of fork() failure during SSL connection startup is now saner. - Improve libpq's error reporting for SSL failures. - Fix PQsetvalue() to avoid possible crash when adding a new tuple to a PGresult originally obtained from a server query. - Make ecpglib write double values with 15 digits precision. - In ecpglib, be sure LC_NUMERIC setting is restored after an error. - Apply upstream fix for blowfish signed-character bug (CVE-2011-2483) (Closes: #631285) "contrib/pg_crypto"'s blowfish encryption code could give wrong results on platforms where char is signed (which is most), leading to encrypted passwords being weaker than they should be. - Fix memory leak in "contrib/seg". - Fix pgstatindex() to give consistent results for empty indexes. - Allow building with perl 5.14. (Closes: #628503) * 15-revert-typmod-check.patch: Update for new upstream release. Checksums-Sha1: 021ddd20243dbac47faac9a9ff43b0352362245d 3207 postgresql-8.4_8.4.9-0squeeze1.dsc 08e2a6f939e221437f8cfcc044f0f29210e43a78 17853113 postgresql-8.4_8.4.9.orig.tar.gz 193a6d2858c6cb8b41251225402f741ff6333787 50366 postgresql-8.4_8.4.9-0squeeze1.diff.gz cb065fa253f4e9b6319275a1d1d0f0eca18ccf3f 2161916 postgresql-doc-8.4_8.4.9-0squeeze1_all.deb 5597b7bf400c294596c463d56f734f5c1885c0f3 23450 postgresql_8.4.9-0squeeze1_all.deb 5b7a0b513b97084237b4b07502e507dda11750bb 23418 postgresql-client_8.4.9-0squeeze1_all.deb 644c650c83cbb17eec9a551f027a5e63bd4c716e 23264 postgresql-doc_8.4.9-0squeeze1_all.deb ed77a2f115475e5f0fc07695328e51f671d9ea8a 23316 postgresql-contrib_8.4.9-0squeeze1_all.deb 096c35dccb28f41fd5e9b246f6b17bea2d12d28b 242192 libpq-dev_8.4.9-0squeeze1_amd64.deb 00b5dcb1e6c69e751093e82c06f697e51c74bf32 162834 libpq5_8.4.9-0squeeze1_amd64.deb 18967bdb8b132c34c6b3e52cb9eba3ac7adfae06 96730 libecpg6_8.4.9-0squeeze1_amd64.deb 58ff9df76440a1d51b22c77281841a4854381636 260572 libecpg-dev_8.4.9-0squeeze1_amd64.deb 67545f96536e6ef95f9398842f5007103d6afbd5 31492 libecpg-compat3_8.4.9-0squeeze1_amd64.deb 87673969121e794f63a1f0949ba78ab3001622d4 55380 libpgtypes3_8.4.9-0squeeze1_amd64.deb b17b8bf8ca4e21e298716b43c289d2f440698d1f 5473184 postgresql-8.4_8.4.9-0squeeze1_amd64.deb d0ac5f7f232a78d21ab3828e26e323abee6182f2 1491646 postgresql-client-8.4_8.4.9-0squeeze1_amd64.deb 0ee47669445ab5874fac6ff3dc013efdb9b43dc5 642702 postgresql-server-dev-8.4_8.4.9-0squeeze1_amd64.deb f9c43adbc0867a322507d88090516642d20dd400 435836 postgresql-contrib-8.4_8.4.9-0squeeze1_amd64.deb c90bdec0e3cc51d5ebde1519578efec3214fa74c 63576 postgresql-plperl-8.4_8.4.9-0squeeze1_amd64.deb 3d05244441c73ae62ac0c1951e83cadced44ff1b 59934 postgresql-plpython-8.4_8.4.9-0squeeze1_amd64.deb 027c3b68064f9fba4757d8ba50a989b872e70d0d 46254 postgresql-pltcl-8.4_8.4.9-0squeeze1_amd64.deb Checksums-Sha256: f3d41e67c6876829e5a94c91b2dd0dadead33ed203cc51ccde662ecef33996ee 3207 postgresql-8.4_8.4.9-0squeeze1.dsc d23ab8edf48f7e058ddc8ef2d97159a0da37c328061bc287255288868d781a57 17853113 postgresql-8.4_8.4.9.orig.tar.gz 785bf01078387e772f9a487b1b7984f5ad4943ce676db7356fec6c9ce1641343 50366 postgresql-8.4_8.4.9-0squeeze1.diff.gz 548b5ac6d1fe8f7c6b4e39713020955c6d6de228d4e7ddd714591b9ca02eb3a2 2161916 postgresql-doc-8.4_8.4.9-0squeeze1_all.deb 9f228d8dce1c13a5d593be61bab212a68d29da338d3c063f2f0e51ebfd6d5822 23450 postgresql_8.4.9-0squeeze1_all.deb 3b84319a929ba2afd420975ed07ab5ad0ec3c95dc6713608fccc6498bde895ba 23418 postgresql-client_8.4.9-0squeeze1_all.deb 777cdb836c4517486b4e9e5410b4555d29052a94ab44d1a62d5a8154cd130c97 23264 postgresql-doc_8.4.9-0squeeze1_all.deb a9b4ea6172fbfb2b6c17d22b3ff75cd410596ddcfbcb977c2a02228ccc66e84f 23316 postgresql-contrib_8.4.9-0squeeze1_all.deb 4880ce042df0de1bef868f9aa95dd5af1060ca1ae9e718788f8dc646673a08d0 242192 libpq-dev_8.4.9-0squeeze1_amd64.deb 6d11b9c35d27fc2823fb5c6b831de53ad5fa65b005c235525b318a9b250ecfa9 162834 libpq5_8.4.9-0squeeze1_amd64.deb 72b8152eedd999b444166929a315388823b3b1bec56748d72b72ed43f3295cbc 96730 libecpg6_8.4.9-0squeeze1_amd64.deb 4c042921b67f4f918e7d85c012ae92a497d07726751eb7473b529fd121f4bd3c 260572 libecpg-dev_8.4.9-0squeeze1_amd64.deb d8330c6edd0d46730502ea41055e679f2c669503e3ddf81f7096ae2b8aabfb6b 31492 libecpg-compat3_8.4.9-0squeeze1_amd64.deb dfa00b30d6ca0557aa3b27afa6f82fcf59be2867a74b29ee130f832a1ff8164a 55380 libpgtypes3_8.4.9-0squeeze1_amd64.deb 47176642d1df1a78414390b0ce99f768d3299b20c270197a15a5d3e81b54024b 5473184 postgresql-8.4_8.4.9-0squeeze1_amd64.deb fccdfa20fdb217c89bc897f15030e1ea4374d07b7a9d499e599d3d51abfe4b2e 1491646 postgresql-client-8.4_8.4.9-0squeeze1_amd64.deb c3bb1515b54408d67ba1dbeca09545aecb49f9024eca5f56c92f78aea38e5b14 642702 postgresql-server-dev-8.4_8.4.9-0squeeze1_amd64.deb d5a4b55683c4e0db9de4f4f179414be65769befc41b80d01fdec1ba2250f3187 435836 postgresql-contrib-8.4_8.4.9-0squeeze1_amd64.deb a7778a0a9c2b9d399e391acb6bcf96b17fade2fd210740e7c9234a23040ac039 63576 postgresql-plperl-8.4_8.4.9-0squeeze1_amd64.deb cfbe5aae453011b3f1a6b31c7eaf746407dd610ba43e614a005a77c485d8a5b3 59934 postgresql-plpython-8.4_8.4.9-0squeeze1_amd64.deb aa17d8fa90c149b6b828fea3a977114a11a7946539e8d3ca6136761c26ec86a3 46254 postgresql-pltcl-8.4_8.4.9-0squeeze1_amd64.deb Files: 4dc111dd6df38ad0fc85d3b36ed52b58 3207 database optional postgresql-8.4_8.4.9-0squeeze1.dsc 7f69c8bb6b7994cbd863685a2d65f4db 17853113 database optional postgresql-8.4_8.4.9.orig.tar.gz 02a62d3f8f4403f4e4a2161040c63d45 50366 database optional postgresql-8.4_8.4.9-0squeeze1.diff.gz 9f13611b043e2fc2589928d3813e6c41 2161916 doc optional postgresql-doc-8.4_8.4.9-0squeeze1_all.deb 095d2d476bc419fa19aaf7fa4d4a7c8a 23450 database optional postgresql_8.4.9-0squeeze1_all.deb e4cad726998498430a8448021d26fdf9 23418 database optional postgresql-client_8.4.9-0squeeze1_all.deb b4d8a5ca1927e6d407ba2e895af54e3b 23264 doc optional postgresql-doc_8.4.9-0squeeze1_all.deb 90d556e58504dc5a0e0765b315b98547 23316 database optional postgresql-contrib_8.4.9-0squeeze1_all.deb 823a4706df7febb5ae6cc691bf612813 242192 libdevel optional libpq-dev_8.4.9-0squeeze1_amd64.deb e6cef5087ebbc8b829bbc5d6d26e3214 162834 libs optional libpq5_8.4.9-0squeeze1_amd64.deb bda8fad9a58d0434989b8b5bdfdc1b23 96730 libs optional libecpg6_8.4.9-0squeeze1_amd64.deb 66eaab13c9add7c91680ea92b89ce023 260572 libdevel optional libecpg-dev_8.4.9-0squeeze1_amd64.deb 4cb8f757e6127b56cd58df6f67248753 31492 libs optional libecpg-compat3_8.4.9-0squeeze1_amd64.deb 1c1ebe1b4086fae5b690196ff18e7357 55380 libs optional libpgtypes3_8.4.9-0squeeze1_amd64.deb cc2c8ae5182a6ffdebb171b5e974a101 5473184 database optional postgresql-8.4_8.4.9-0squeeze1_amd64.deb c4b571e9c57542695419a6ffb12ce2c3 1491646 database optional postgresql-client-8.4_8.4.9-0squeeze1_amd64.deb bd6ac02a3699dd80e494b778e79dcd14 642702 libdevel optional postgresql-server-dev-8.4_8.4.9-0squeeze1_amd64.deb 4ca888e1f875260a894e8a2247eb4cde 435836 database optional postgresql-contrib-8.4_8.4.9-0squeeze1_amd64.deb c7b2ebc62c75b0e3437f547e908482a6 63576 database optional postgresql-plperl-8.4_8.4.9-0squeeze1_amd64.deb cbaa724a7f6fcc144cd300125799a7ca 59934 database optional postgresql-plpython-8.4_8.4.9-0squeeze1_amd64.deb be3cc31d7e3c13ae4d34ba8a243dedd2 46254 database optional postgresql-pltcl-8.4_8.4.9-0squeeze1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBCAAGBQJOitTZAAoJEPmIJawmtHufZbsP/3N7yAG5+j0K9SMlwsvhCvym sH2dO1CDm9AvBivokI8AoO15P5XfwAwDit78cPSuyOSfR9pfH2w2a4hUVzHhayrN +O5PJLbmdqL3CeQczZbDyRzHLcBsDnILrKIJD+SU+nAD7q6sIqJSCC9YHSN+z8ou opP3Xip+apCedYAWYwIMs9lHyB0avEF8OJ2XpDnQUQbeG3VeE2htFo9YNTtZBWOU a+gzXPDxzeDt+1IY06C7y3MSH0zkS7twtK6DfwyFCkv/Pym5MzKHmjo3QTPZuqmc KnzkAN2M27tzDQwf/pccDG105wpY9EKzOepm2jyEqM3FDbVvF4rDs/3l2MVtW1pF M/dM53bxkd4bbkphlEUQLQvfLYBrHDYGfBybZztPFpz5IR1ebnsa44p55RYzhUD9 9FTiu/Mn49OPMbYsxhyEqx5VWVRpwd/Wuuet8IwTcTSUIGLiTWf8wOIcioqZxwEm lBUZ9wY1IOWYqTlcER2xcaJlcfBdmppVtPPdxfGwmZ5iBVTRMEuiGTckgoFAE/bR nrB6QDYcTUDzm90lnOwNnyyLp19MdQPmNhk4WY9DkYqtd2mggiVuTUhWgbJ6668k sNBNPrtfgdKpOq+z8oSsl5JOroIYmpNQ7GUrSAYFl7WTxnAwASTakC2WmsnaDSZQ hKQ/qSDh20AofaQJgQ14 =VYT9 -----END PGP SIGNATURE-----