-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 04 Oct 2011 11:32:12 +0200 Source: postgresql-8.4 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-8.4 postgresql-client-8.4 postgresql-server-dev-8.4 postgresql-doc-8.4 postgresql-contrib-8.4 postgresql-plperl-8.4 postgresql-plpython-8.4 postgresql-pltcl-8.4 postgresql postgresql-client postgresql-doc postgresql-contrib Architecture: powerpc Version: 8.4.9-0squeeze1 Distribution: squeeze-security Urgency: low Maintainer: powerpc Build Daemon (porpora) Changed-By: Martin Pitt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 8.4 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql - object-relational SQL database (supported version) postgresql-8.4 - object-relational SQL database, version 8.4 server postgresql-client - front-end programs for PostgreSQL (supported version) postgresql-client-8.4 - front-end programs for PostgreSQL 8.4 postgresql-contrib - additional facilities for PostgreSQL (supported version) postgresql-contrib-8.4 - additional facilities for PostgreSQL postgresql-doc - documentation for the PostgreSQL database management system postgresql-doc-8.4 - documentation for the PostgreSQL database management system postgresql-plperl-8.4 - PL/Perl procedural language for PostgreSQL 8.4 postgresql-plpython-8.4 - PL/Python procedural language for PostgreSQL 8.4 postgresql-pltcl-8.4 - PL/Tcl procedural language for PostgreSQL 8.4 postgresql-server-dev-8.4 - development files for PostgreSQL 8.4 server-side programming Closes: 628503 631285 Changes: postgresql-8.4 (8.4.9-0squeeze1) stable-security; urgency=low . * New upstream bug fix/security release: - Fix bugs in indexing of in-doubt HOT-updated tuples. These bugs could result in index corruption after reindexing a system catalog. They are not believed to affect user indexes. - Fix multiple bugs in GiST index page split processing. The probability of occurrence was low, but these could lead to index corruption. - Fix possible buffer overrun in tsvector_concat(). The function could underestimate the amount of memory needed for its result, leading to server crashes. - Fix crash in xml_recv when processing a "standalone" parameter. - Make pg_options_to_table return NULL for an option with no value. Previously such cases would result in a server crash. - Avoid possibly accessing off the end of memory in "ANALYZE" and in SJIS-2004 encoding conversion. This fixes some very-low-probability server crash scenarios. - Prevent intermittent hang in interactions of startup process with bgwriter process. This affected recovery in non-hot-standby cases. - Fix race condition in relcache init file invalidation. There was a window wherein a new backend process could read a stale init file but miss the inval messages that would tell it the data is stale. The result would be bizarre failures in catalog accesses, typically "could not read block 0 in file ..." later during startup. - Fix memory leak at end of a GiST index scan. Commands that perform many separate GiST index scans, such as verification of a new GiST-based exclusion constraint on a table already containing many rows, could transiently require large amounts of memory due to this leak. - Fix incorrect memory accounting (leading to possible memory bloat) in tuplestores supporting holdable cursors and plpgsql's RETURN NEXT command. - Fix performance problem when constructing a large, lossy bitmap. - Fix join selectivity estimation for unique columns. This fixes an erroneous planner heuristic that could lead to poor estimates of the result size of a join. - Fix nested PlaceHolderVar expressions that appear only in sub-select target lists. This mistake could result in outputs of an outer join incorrectly appearing as NULL. - Allow nested EXISTS queries to be optimized properly. - Fix array- and path-creating functions to ensure padding bytes are zeroes. This avoids some situations where the planner will think that semantically-equal constants are not equal, resulting in poor optimization. - Fix "EXPLAIN" to handle gating Result nodes within inner-indexscan subplans. The usual symptom of this oversight was "bogus varno" errors. - Work around gcc 4.6.0 bug that breaks WAL replay. This could lead to loss of committed transactions after a server crash. - Fix dump bug for VALUES in a view. - Disallow SELECT FOR UPDATE/SHARE on sequences. This operation doesn't work as expected and can lead to failures. - Fix "VACUUM" so that it always updates pg_class.reltuples/relpages. This fixes some scenarios where autovacuum could make increasingly poor decisions about when to vacuum tables. - Defend against integer overflow when computing size of a hash table. - Fix cases where "CLUSTER" might attempt to access already-removed TOAST data. - Fix portability bugs in use of credentials control messages for "peer" authentication. - Fix SSPI login when multiple roundtrips are required. The typical symptom of this problem was "The function requested is not supported" errors during SSPI login. - Throw an error if "pg_hba.conf" contains hostssl but SSL is disabled. This was concluded to be more user-friendly than the previous behavior of silently ignoring such lines. - Fix typo in pg_srand48 seed initialization. This led to failure to use all bits of the provided seed. This function is not used on most platforms (only those without srandom), and the potential security exposure from a less-random-than-expected seed seems minimal in any case. - Avoid integer overflow when the sum of LIMIT and OFFSET values exceeds 2^63. - Add overflow checks to int4 and int8 versions of generate_series(). - Fix trailing-zero removal in to_char(). In a format with FM and no digit positions after the decimal point, zeroes to the left of the decimal point could be removed incorrectly. - Fix pg_size_pretty() to avoid overflow for inputs close to 2^63. - Weaken plpgsql's check for typmod matching in record values. An overly enthusiastic check could lead to discarding length modifiers that should have been kept. - Fix pg_upgrade to preserve toast tables' relfrozenxids during an upgrade from 8.3. Failure to do this could lead to "pg_clog" files being removed too soon after the upgrade. - Fix psql's counting of script file line numbers during COPY from a different file. - Fix pg_restore's direct-to-database mode for standard_conforming_strings. pg_restore could emit incorrect commands when restoring directly to a database server from an archive file that had been made with standard_conforming_strings set to on. - Be more user-friendly about unsupported cases for parallel pg_restore. This change ensures that such cases are detected and reported before any restore actions have been taken. - Fix write-past-buffer-end and memory leak in libpq's LDAP service lookup code. - In libpq, avoid failures when using nonblocking I/O and an SSL connection. - Improve libpq's handling of failures during connection startup. In particular, the response to a server report of fork() failure during SSL connection startup is now saner. - Improve libpq's error reporting for SSL failures. - Fix PQsetvalue() to avoid possible crash when adding a new tuple to a PGresult originally obtained from a server query. - Make ecpglib write double values with 15 digits precision. - In ecpglib, be sure LC_NUMERIC setting is restored after an error. - Apply upstream fix for blowfish signed-character bug (CVE-2011-2483) (Closes: #631285) "contrib/pg_crypto"'s blowfish encryption code could give wrong results on platforms where char is signed (which is most), leading to encrypted passwords being weaker than they should be. - Fix memory leak in "contrib/seg". - Fix pgstatindex() to give consistent results for empty indexes. - Allow building with perl 5.14. (Closes: #628503) * 15-revert-typmod-check.patch: Update for new upstream release. Checksums-Sha1: 5ff293230f38407fb05826f9c482af4070082755 241918 libpq-dev_8.4.9-0squeeze1_powerpc.deb a436e188e42bae87a5fe19276ecab0e4bba5175a 158620 libpq5_8.4.9-0squeeze1_powerpc.deb f3de9f63ced0ff44f38d2cfec48e693d5613d22a 97024 libecpg6_8.4.9-0squeeze1_powerpc.deb 561d84fee87eaf3e92de2dbe4931513dfa3421d3 261390 libecpg-dev_8.4.9-0squeeze1_powerpc.deb ad3a7546f7d0c464e03ea38bdb08d1a0d3a69253 31196 libecpg-compat3_8.4.9-0squeeze1_powerpc.deb 0256b842716e9e51b44b3fc7fb5e8d502275c21a 58240 libpgtypes3_8.4.9-0squeeze1_powerpc.deb 32a29bd51531bb584c842e13eaa3e05c5237e831 5794374 postgresql-8.4_8.4.9-0squeeze1_powerpc.deb 5d120a73c699e51d3537becc8114d760d5ed8108 1496438 postgresql-client-8.4_8.4.9-0squeeze1_powerpc.deb 993ec29480c349245862bb6ca5ba5d8ef12cd04a 644272 postgresql-server-dev-8.4_8.4.9-0squeeze1_powerpc.deb beecd49877afb84ffee6a9c1efa3255742aef71a 419476 postgresql-contrib-8.4_8.4.9-0squeeze1_powerpc.deb 1cbfd8b63d7830697c807fc1bbcdec6288e48a34 60742 postgresql-plperl-8.4_8.4.9-0squeeze1_powerpc.deb 873294ae005ac271073e5f2be929cc91568381c4 59746 postgresql-plpython-8.4_8.4.9-0squeeze1_powerpc.deb 726ac7e4f3b01b1c32963c827de670ab7a9c277b 46904 postgresql-pltcl-8.4_8.4.9-0squeeze1_powerpc.deb Checksums-Sha256: 5f392f460b595ffc657a3037769d58f37cd5408b31a8ba4a86b4ad633d74e152 241918 libpq-dev_8.4.9-0squeeze1_powerpc.deb 0ee8b80a88738e39ffdc22c0f09b256e0449cbb54c372de1f2dccb664b70a833 158620 libpq5_8.4.9-0squeeze1_powerpc.deb 7d430cf8343dde4e7e5b330e207a1da03dfe0e8d41e7e799ca40c16566a4607f 97024 libecpg6_8.4.9-0squeeze1_powerpc.deb 794da8cc46c6db9e1dfe5c5f545567e00026a991e6f767754fab94928b0e43c3 261390 libecpg-dev_8.4.9-0squeeze1_powerpc.deb fab4c36d778994d53348148e4e579b5af9b8e1e5798aa59d38401a4fff0c7abe 31196 libecpg-compat3_8.4.9-0squeeze1_powerpc.deb e94ae20369efba18d1af4789d2a4c77e7126ad31a7fd61667cc12975fe30b694 58240 libpgtypes3_8.4.9-0squeeze1_powerpc.deb 6487bd33f6f6d7c66fff46f95ec699e15e10606bac4082a822bedb24e43ec122 5794374 postgresql-8.4_8.4.9-0squeeze1_powerpc.deb d92fbaac7835980a4a6ca88585409f6be6e45e19c9164025a8a5046704b09158 1496438 postgresql-client-8.4_8.4.9-0squeeze1_powerpc.deb c9d4e3f9e0af5e42a8d9048f39e9e0310d494116380b364b910e06c6b90c6887 644272 postgresql-server-dev-8.4_8.4.9-0squeeze1_powerpc.deb 5d92d149d8a944e7c92b057a0506a4fe01b5430dc2551dcc8ab30d2d5fd0ab69 419476 postgresql-contrib-8.4_8.4.9-0squeeze1_powerpc.deb 1013f8dba1bec665fb085bfcb83bb36b188a855aae056b535381601516e21b0c 60742 postgresql-plperl-8.4_8.4.9-0squeeze1_powerpc.deb 48d9a98e30449127125fcead4ce5e0ce63f8daef4cb78d77ba8b20c6b28545be 59746 postgresql-plpython-8.4_8.4.9-0squeeze1_powerpc.deb c3c4dc8f3e30c412653d65614bd914bb07c93a48d75d41dc6c32d7606445b9fe 46904 postgresql-pltcl-8.4_8.4.9-0squeeze1_powerpc.deb Files: aaeb88dc4aeb6c6d2a960e791090f68c 241918 libdevel optional libpq-dev_8.4.9-0squeeze1_powerpc.deb 09f502d89dd387a5e49637b445d59e33 158620 libs optional libpq5_8.4.9-0squeeze1_powerpc.deb 06ffddcc09a2bcf377de0925225f2888 97024 libs optional libecpg6_8.4.9-0squeeze1_powerpc.deb 3db0adf38bbf8934682bb453fc5d59df 261390 libdevel optional libecpg-dev_8.4.9-0squeeze1_powerpc.deb bfa327a17e90a1ba9f42edcc20e98f4a 31196 libs optional libecpg-compat3_8.4.9-0squeeze1_powerpc.deb aaf6f6f4fabf5b907a9899f1168d1c55 58240 libs optional libpgtypes3_8.4.9-0squeeze1_powerpc.deb 41ab7cb2cd630ec3ecdce1a4056eb0fd 5794374 database optional postgresql-8.4_8.4.9-0squeeze1_powerpc.deb fda32dea469a0416f4feefdea5ca69fa 1496438 database optional postgresql-client-8.4_8.4.9-0squeeze1_powerpc.deb e1f2675f0a22c08c98698dc7c15c0da8 644272 libdevel optional postgresql-server-dev-8.4_8.4.9-0squeeze1_powerpc.deb 89136286df886bbb77c8c7c81b85f6e5 419476 database optional postgresql-contrib-8.4_8.4.9-0squeeze1_powerpc.deb 9bed5d7b78f30d8767dc97e537a4349f 60742 database optional postgresql-plperl-8.4_8.4.9-0squeeze1_powerpc.deb 86da7536aab5544112555831570c88e8 59746 database optional postgresql-plpython-8.4_8.4.9-0squeeze1_powerpc.deb 65a60c19815cccba0a110838bb022a22 46904 database optional postgresql-pltcl-8.4_8.4.9-0squeeze1_powerpc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJOuFRHAAoJELzJGFiM510FU6cP/iPUoHfx+baqqARCQdTX5ydU P0n9X0CjeET/kP4mykVVDk0HvxKJxJ12uJsmnExBkQYnKQFCjpMcGWqBYZBaYDih PmwdbSxn6gRHAtU6Chdr4oxCX+On2dahwQZV+pBshUPMnGXHJHqlj93w1aLgXIw0 EfFNUtu63dVBLWKiBV2V6a91PxzkbGBhzCmyLKmiGI1mgm/BIt4iDpRWpUmWSdrK qXlnuq8/CNn4+u98wRwlf4y3Q1Cf/Cko9qBzwdtNfR+S7QvqVz/O9jdCOtX2y6LH vdB4BCDfjCOeOPf1oN2zGFZNkHiKA9ze7RqQgpoMUcxzBc0f/SwXKjPSwFBM1oi0 GcYgrZCKFzYbYDlWVGC7YEU/m+Cwh1+nuyf+rTBjgBsHx40qMBiOcA3jPdlH2zNM 7WgJQmQ+nFtQds8mClz60I77gFDNNrHAGK9QhIVxYeWtFFCu2vWtonBuMz7+du35 kwc2M1vuEUiME8Xgko9lBxyeYBezHgGxR/rXDbMCWccuApr1on79/dL3LaGfpS+q M6Wboevq41hA70s6xJQVmpKS09Z7JJLGoCFTPocnZljqJhHg9FtALUvJLGBJn/YQ YJLoNh1hwS2ZcxEEJTyYKtbGBWCNqdxbgVlSFzaEXAlk00av9A8dnkMgII37OWqj sY+wFapR3lTIUYJqpj03 =f/ea -----END PGP SIGNATURE-----