From: | "Marc G(dot) Fournier" <scrappy(at)postgresql(dot)org> |
---|---|
To: | pgsql-announce(at)postgresql(dot)org |
Cc: | pgsql-general(at)postgresql(dot)org |
Subject: | SECURITY RELEASES: 7.2.8 - 7.3.10 - 7.4.8 - 8.0.3 |
Date: | 2005-05-10 19:51:09 |
Message-ID: | 20050510162911.G6493@ganymede.hub.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-announce pgsql-general |
In order to address several security issues identified over the past two
weeks, as well as one "low probability" race condition, we are releasing
new version of PostgreSQL as far back as the 7.2.x branch.
Please note that the security issues were those already reported by Tom
Lane, as well as a manual fix for them. These releases are mainly to
ensure that those installing and/or upgrading existing installations have
those fixes automatically.
For details on the fixes, please see the HISTORY file included in the
Release, but a summary consists of:
* Change encoding function signature to prevent misuse
* Change "contrib/tsearch2" to avoid unsafe use of INTERNAL function
results
* Repair race condition between relation extension and VACUUM
This could theoretically have caused loss of a page's worth of
freshly-inserted data, although the scenario seems of very low
probability. There are no known cases of it having caused more than
an Assert failure.
Downloads are available via:
http://www.postgresql.org/download
Please report any bugs to:
pgsql-bugs(at)postgresql(dot)org
----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email: scrappy(at)hub(dot)org Yahoo!: yscrappy ICQ: 7615664
From | Date | Subject | |
---|---|---|---|
Next Message | Neil Conway | 2005-05-11 00:39:56 | Re: [GENERAL] SECURITY RELEASES: 7.2.8 - 7.3.10 - 7.4.8 - 8.0.3 |
Previous Message | Joshua D. Drake | 2005-05-09 21:07:04 | Mammoth PostgreSQL Replication 8.0.2 Released |
From | Date | Subject | |
---|---|---|---|
Next Message | Daniel Schuchardt | 2005-05-10 19:53:15 | Re: Delphi - Developers start develop Access components |
Previous Message | Tom Lane | 2005-05-10 19:50:05 | Re: [PERFORM] "Hash index" vs. "b-tree index" (PostgreSQL |