-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 04 Oct 2011 11:32:12 +0200 Source: postgresql-8.4 Binary: libpq-dev libpq5 libecpg6 libecpg-dev libecpg-compat3 libpgtypes3 postgresql-8.4 postgresql-client-8.4 postgresql-server-dev-8.4 postgresql-doc-8.4 postgresql-contrib-8.4 postgresql-plperl-8.4 postgresql-plpython-8.4 postgresql-pltcl-8.4 postgresql postgresql-client postgresql-doc postgresql-contrib Architecture: kfreebsd-amd64 Version: 8.4.9-0squeeze1 Distribution: squeeze-security Urgency: low Maintainer: kfreebsd-amd64 Build Daemon (fasch) Changed-By: Martin Pitt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 8.4 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql - object-relational SQL database (supported version) postgresql-8.4 - object-relational SQL database, version 8.4 server postgresql-client - front-end programs for PostgreSQL (supported version) postgresql-client-8.4 - front-end programs for PostgreSQL 8.4 postgresql-contrib - additional facilities for PostgreSQL (supported version) postgresql-contrib-8.4 - additional facilities for PostgreSQL postgresql-doc - documentation for the PostgreSQL database management system postgresql-doc-8.4 - documentation for the PostgreSQL database management system postgresql-plperl-8.4 - PL/Perl procedural language for PostgreSQL 8.4 postgresql-plpython-8.4 - PL/Python procedural language for PostgreSQL 8.4 postgresql-pltcl-8.4 - PL/Tcl procedural language for PostgreSQL 8.4 postgresql-server-dev-8.4 - development files for PostgreSQL 8.4 server-side programming Closes: 628503 631285 Changes: postgresql-8.4 (8.4.9-0squeeze1) stable-security; urgency=low . * New upstream bug fix/security release: - Fix bugs in indexing of in-doubt HOT-updated tuples. These bugs could result in index corruption after reindexing a system catalog. They are not believed to affect user indexes. - Fix multiple bugs in GiST index page split processing. The probability of occurrence was low, but these could lead to index corruption. - Fix possible buffer overrun in tsvector_concat(). The function could underestimate the amount of memory needed for its result, leading to server crashes. - Fix crash in xml_recv when processing a "standalone" parameter. - Make pg_options_to_table return NULL for an option with no value. Previously such cases would result in a server crash. - Avoid possibly accessing off the end of memory in "ANALYZE" and in SJIS-2004 encoding conversion. This fixes some very-low-probability server crash scenarios. - Prevent intermittent hang in interactions of startup process with bgwriter process. This affected recovery in non-hot-standby cases. - Fix race condition in relcache init file invalidation. There was a window wherein a new backend process could read a stale init file but miss the inval messages that would tell it the data is stale. The result would be bizarre failures in catalog accesses, typically "could not read block 0 in file ..." later during startup. - Fix memory leak at end of a GiST index scan. Commands that perform many separate GiST index scans, such as verification of a new GiST-based exclusion constraint on a table already containing many rows, could transiently require large amounts of memory due to this leak. - Fix incorrect memory accounting (leading to possible memory bloat) in tuplestores supporting holdable cursors and plpgsql's RETURN NEXT command. - Fix performance problem when constructing a large, lossy bitmap. - Fix join selectivity estimation for unique columns. This fixes an erroneous planner heuristic that could lead to poor estimates of the result size of a join. - Fix nested PlaceHolderVar expressions that appear only in sub-select target lists. This mistake could result in outputs of an outer join incorrectly appearing as NULL. - Allow nested EXISTS queries to be optimized properly. - Fix array- and path-creating functions to ensure padding bytes are zeroes. This avoids some situations where the planner will think that semantically-equal constants are not equal, resulting in poor optimization. - Fix "EXPLAIN" to handle gating Result nodes within inner-indexscan subplans. The usual symptom of this oversight was "bogus varno" errors. - Work around gcc 4.6.0 bug that breaks WAL replay. This could lead to loss of committed transactions after a server crash. - Fix dump bug for VALUES in a view. - Disallow SELECT FOR UPDATE/SHARE on sequences. This operation doesn't work as expected and can lead to failures. - Fix "VACUUM" so that it always updates pg_class.reltuples/relpages. This fixes some scenarios where autovacuum could make increasingly poor decisions about when to vacuum tables. - Defend against integer overflow when computing size of a hash table. - Fix cases where "CLUSTER" might attempt to access already-removed TOAST data. - Fix portability bugs in use of credentials control messages for "peer" authentication. - Fix SSPI login when multiple roundtrips are required. The typical symptom of this problem was "The function requested is not supported" errors during SSPI login. - Throw an error if "pg_hba.conf" contains hostssl but SSL is disabled. This was concluded to be more user-friendly than the previous behavior of silently ignoring such lines. - Fix typo in pg_srand48 seed initialization. This led to failure to use all bits of the provided seed. This function is not used on most platforms (only those without srandom), and the potential security exposure from a less-random-than-expected seed seems minimal in any case. - Avoid integer overflow when the sum of LIMIT and OFFSET values exceeds 2^63. - Add overflow checks to int4 and int8 versions of generate_series(). - Fix trailing-zero removal in to_char(). In a format with FM and no digit positions after the decimal point, zeroes to the left of the decimal point could be removed incorrectly. - Fix pg_size_pretty() to avoid overflow for inputs close to 2^63. - Weaken plpgsql's check for typmod matching in record values. An overly enthusiastic check could lead to discarding length modifiers that should have been kept. - Fix pg_upgrade to preserve toast tables' relfrozenxids during an upgrade from 8.3. Failure to do this could lead to "pg_clog" files being removed too soon after the upgrade. - Fix psql's counting of script file line numbers during COPY from a different file. - Fix pg_restore's direct-to-database mode for standard_conforming_strings. pg_restore could emit incorrect commands when restoring directly to a database server from an archive file that had been made with standard_conforming_strings set to on. - Be more user-friendly about unsupported cases for parallel pg_restore. This change ensures that such cases are detected and reported before any restore actions have been taken. - Fix write-past-buffer-end and memory leak in libpq's LDAP service lookup code. - In libpq, avoid failures when using nonblocking I/O and an SSL connection. - Improve libpq's handling of failures during connection startup. In particular, the response to a server report of fork() failure during SSL connection startup is now saner. - Improve libpq's error reporting for SSL failures. - Fix PQsetvalue() to avoid possible crash when adding a new tuple to a PGresult originally obtained from a server query. - Make ecpglib write double values with 15 digits precision. - In ecpglib, be sure LC_NUMERIC setting is restored after an error. - Apply upstream fix for blowfish signed-character bug (CVE-2011-2483) (Closes: #631285) "contrib/pg_crypto"'s blowfish encryption code could give wrong results on platforms where char is signed (which is most), leading to encrypted passwords being weaker than they should be. - Fix memory leak in "contrib/seg". - Fix pgstatindex() to give consistent results for empty indexes. - Allow building with perl 5.14. (Closes: #628503) * 15-revert-typmod-check.patch: Update for new upstream release. Checksums-Sha1: 5dc532f1282257cc3e1efbd413ccc4e6ff5a3ce1 242436 libpq-dev_8.4.9-0squeeze1_kfreebsd-amd64.deb e0ecc6709962da3a684ffd869f31e50b300bc52f 159662 libpq5_8.4.9-0squeeze1_kfreebsd-amd64.deb d517e703ce1848982f729f23c6866e9e41177851 95462 libecpg6_8.4.9-0squeeze1_kfreebsd-amd64.deb 46c8f04defadc02a6353a67e61f6be826495e019 258164 libecpg-dev_8.4.9-0squeeze1_kfreebsd-amd64.deb 3d17e21e156a90dd6b4dd2830b9fcb67ddcf1374 31728 libecpg-compat3_8.4.9-0squeeze1_kfreebsd-amd64.deb af6a38399f2c1c25217d806d2903c3f8d8abc0e3 55604 libpgtypes3_8.4.9-0squeeze1_kfreebsd-amd64.deb f1388ff0f1fa21ff344ccfa44f08fccbb70ac389 5427490 postgresql-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb ba520bd1c906eb182b449a3c5d69964d6867887a 1461828 postgresql-client-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb 82638b18cf1595b9f70e8179618c3f5cd97f30d6 635610 postgresql-server-dev-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb e4129ce4341a11b4e353183afe7bbe73b8df832f 432412 postgresql-contrib-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb 23c9d499f7a21776c5b30abc2e1792946849e42b 61264 postgresql-plperl-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb cd321a8f6963ae589542a8c83e27ddc014474477 60634 postgresql-plpython-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb 385a0dcf6899025dcdd0de9f438665843f145ebd 46874 postgresql-pltcl-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb Checksums-Sha256: 1abb9d70283a9eb860c3d41db709d3c2d4fb6231b0563de15ce933099cda32b0 242436 libpq-dev_8.4.9-0squeeze1_kfreebsd-amd64.deb 7cfb4f6402c7c58186516e8a26a82de9ac1bf3b897ca9af5f5f766564fcf6327 159662 libpq5_8.4.9-0squeeze1_kfreebsd-amd64.deb 7f571fd81a08f3e4203922ebd8ab4026d09c89e629c0d3c1c23ec522d9e7da1e 95462 libecpg6_8.4.9-0squeeze1_kfreebsd-amd64.deb 4552d9e54e7b3ee1f41cf2bd5f710143dcb9ef26b551e19ee716513c95cddad8 258164 libecpg-dev_8.4.9-0squeeze1_kfreebsd-amd64.deb 387d098a06a2f6fcbfeb3165a4ada24e657c9d413c484d6c08a222c4eb9b9ef5 31728 libecpg-compat3_8.4.9-0squeeze1_kfreebsd-amd64.deb be65b863f34317550238bb90c064823bcb59320032e402ea00c1de70d87b21b9 55604 libpgtypes3_8.4.9-0squeeze1_kfreebsd-amd64.deb 976d9c884fbcdb9d46ab45b1e67a3d9e73a400fce4d6691802f600ab463745c9 5427490 postgresql-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb cf8e4459ab05468ffb9b8f07e389e63eab9d08ee7e21618212206ee8a521e848 1461828 postgresql-client-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb f693489df4c2b05453faf1a9bd64c27ec7b52f1a197fbe1212318a3b4c574b66 635610 postgresql-server-dev-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb 9720d7dc4e9fd230a87e20105a5bfd9e786091d754241423a66092498168dd67 432412 postgresql-contrib-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb 386c5a875e31f93b6ad9ff3746ef8715114f32f4fad62c68fb9896dc7fba7f92 61264 postgresql-plperl-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb 5cd0d9d270d02deff338fe3adf865e318a5f64f064b1e716be35cb47d38d8844 60634 postgresql-plpython-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb 62920cdbf60e748f8d911ebbec287c96d4d2a0727873fe74c1cd908505983176 46874 postgresql-pltcl-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb Files: 1dee586cef66a2d089d5011c5491972e 242436 libdevel optional libpq-dev_8.4.9-0squeeze1_kfreebsd-amd64.deb 876bdf57bfcd8b13d1cb3e08cc027e48 159662 libs optional libpq5_8.4.9-0squeeze1_kfreebsd-amd64.deb ffe0c8ddd4c032db6c22e5c879908c95 95462 libs optional libecpg6_8.4.9-0squeeze1_kfreebsd-amd64.deb cb2b30967e39c55990f350f5f4571a2c 258164 libdevel optional libecpg-dev_8.4.9-0squeeze1_kfreebsd-amd64.deb c28ba50de0b07fa723861d2ebc5003e5 31728 libs optional libecpg-compat3_8.4.9-0squeeze1_kfreebsd-amd64.deb 4383e0a877f227ffa4c2098ceb6dffb4 55604 libs optional libpgtypes3_8.4.9-0squeeze1_kfreebsd-amd64.deb 394041734e6778ae306401005610fc5e 5427490 database optional postgresql-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb 7212e14a832c70b42752b3ce12afef36 1461828 database optional postgresql-client-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb a0e4cbac54c28e38d2c05a2327c01fd1 635610 libdevel optional postgresql-server-dev-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb fd6db8fe77203cc898dd90b8333044f8 432412 database optional postgresql-contrib-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb d511481c0c14ebeab3f92a7166bcb346 61264 database optional postgresql-plperl-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb 933671f09f8634b3e4544623fe621fba 60634 database optional postgresql-plpython-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb 8e63c1debf25007ae31e5dd10788fc3b 46874 database optional postgresql-pltcl-8.4_8.4.9-0squeeze1_kfreebsd-amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/kFreeBSD) iQIcBAEBAgAGBQJOm8J5AAoJEMHxpmZWuuAITEoP/iCwJZ2u6wclA4VTuUmya+dv Fgrf4krdPXYq5ujSSQGNhD6JT/OTVBBHXlOZUyKdZjQFCGwDDmts4z6GGnkjAax0 H/9VRQDY955DwXMpNSE0IXNA1jsPAYTlMqqtsONvY7dc/IGeDkuZAvGBvZJj9aMA rhhvXVcW/5Ob2BSbAX/FX6nGC4p4qiQy0jBMX1YGI2wAO4gwyytm98fXV4hGLnzp PHpjPnJLjuHwl15CXdyNbr+JpZHUkLIiN/FFs91pkcO7wZdis0zw993p2aSkiOCQ qqsMlxLS/iBPJsFu3zTKYJfk0hXT4MWwDUdCnIIcgWhGA+jA6jCfCF+JK554Rzmu C9dyDDHm5X8LOVme89k/4g0CKwwUZeS6TAdfXHog6kuVwm5bOPuXkjphKhduqr9z +n1IMVDNu+3to614m8TA5ZvbqxabfwVL7dnfuBPufPOssZXJgu9s8y+JjuMJxmBR FL3YaSKTIWLx08Ld8jqnMc2CgD1uEMHDBJUyFLh1qtlnQ1bn6lQHRz0jOvQNGdr7 +8wng2RUPiR9iLpfm1eMFci6DOC7EV5GMprHXa/BVuCTEyXLR+87m45/Yi0WQbbK v8EmKKzABEazllEV6HmRDaoO6rPx/yQlOiXz3niyygt/j4cMtZ7p6uyoY0ZvhtXV UMNutk8Q9EIrGkFf/JAU =7cUi -----END PGP SIGNATURE-----