-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 13 May 2004 11:00:07 +0200 Source: postgresql Binary: libpgtcl postgresql pgaccess odbc-postgresql libpgperl postgresql-client libecpg3 postgresql-contrib postgresql-dev postgresql-doc python-pygresql libpgsql2 Architecture: mipsel Version: 7.2.1-2woody5 Distribution: stable-security Urgency: low Maintainer: Debian/MIPSEL Build Daemon Changed-By: Martin Pitt Description: libecpg3 - Shared library libecpg.so.3 for PostgreSQL libpgperl - Perl modules for PostgreSQL. libpgsql2 - Shared library libpq.so.2 for PostgreSQL libpgtcl - Tcl/Tk library and front-end for PostgreSQL. odbc-postgresql - ODBC support for PostgreSQL pgaccess - Tk/Tcl front-end for PostgreSQL database postgresql - Object-relational SQL database, descended from POSTGRES. postgresql-client - Front-end programs for PostgreSQL postgresql-contrib - Additional facilities for PostgreSQL postgresql-dev - Header files for libpq (postgresql library) python-pygresql - PostgreSQL module for Python Changes: postgresql (7.2.1-2woody5) stable-security; urgency=low . * Fixed buffer overflow in ODBC driver (src/interfaces/odbc/): added parameter for target buffer size to make_string() to prevent buffer overflows and corrected all calls to it. This fixes #247306 for woody (bug was already closed with the upload to sid). . With previous versions it was possible to crash (and possibly exploit) e. g. apache if a PHP script connected to a ODBC database with very long credential strings (DSN, username, password, etc.). . Other parts of postgresql are not affected. Files: 887104f5498e665a77bce68ecd7b81b2 1661924 misc optional postgresql_7.2.1-2woody5_mipsel.deb e9de313201d193fbc84a2a145c17b310 294144 misc optional postgresql-client_7.2.1-2woody5_mipsel.deb 42967a1b4e9838a2e98b145c44d4f9da 512400 devel optional postgresql-dev_7.2.1-2woody5_mipsel.deb 9252ed661fa295ae4ace327c89c8860f 64562 libs optional libpgsql2_7.2.1-2woody5_mipsel.deb 07fdf57e04f07c4be76c35c7eaa4318d 30712 libs optional libecpg3_7.2.1-2woody5_mipsel.deb 7d22971774224ccc80d2a90090730c71 58746 libs optional libpgtcl_7.2.1-2woody5_mipsel.deb b9ccbf0ae3a14e18aaf58d52238c1428 58414 libs optional libpgperl_7.2.1-2woody5_mipsel.deb 825a11f0a8bcc5dd829d3ac9fb777f17 425054 misc optional pgaccess_7.2.1-2woody5_mipsel.deb 50bfbe9f2d9fa899376584fd9dbc58c9 343198 misc optional postgresql-contrib_7.2.1-2woody5_mipsel.deb 8bda41a7df1117e3d871eaaadb9aaee4 61198 misc optional python-pygresql_7.2.1-2woody5_mipsel.deb dbf5b222cc119f5b1395f295705e24d4 237420 libs optional odbc-postgresql_7.2.1-2woody5_mipsel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAo56HW5ql+IAeqTIRAsBgAJ45W7u0fD6QgkDlFc772cJkondXIQCfeqRl BPlzuBdEJpmHI/7Ihcmkd80= =wm+a -----END PGP SIGNATURE-----