postgresql-8.0 8.0.3-15ubuntu2.3 source package in Ubuntu

Changelog

postgresql-8.0 (8.0.3-15ubuntu2.3) breezy-security; urgency=low

   * SECURITY UPDATE: Read out arbitrary memory locations from the server,
     local DoS.
   * Add debian/patches/87-cvs_sql_fun_typecheck.patch:
     - Repair insufficiently careful type checking for SQL-language functions.
       Not only can one trivially crash the backend, but with appropriate
       misuse of pass-by-reference datatypes it is possible to read out
       arbitrary locations in the server process's memory, which could allow
       retrieving database content the user should not be able to see.
     - Discovered by Jeff Trout.
     - Patch backported from 8.0.11 from CVS:
       http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/executor/functions.c.diff?r1=1.91.4.2;r2=1.91.4.3
       http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/optimizer/util/clauses.c.diff?r1=1.186.4.4;r2=1.186.4.5
     - CVE-2007-0555
   * Add debian/patches/88-cvs-max-utf8-wchar-len.patch:
     - Update various string functions to support the maximum UTF-8 sequence
       length for 4-byte character set to prevent buffer overflows.
     - Patch backported from 8.0.11 from CVS:
       http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/utils/mb/wchar.c.diff?r1=1.40.4.2;r2=1.40.4.3
   * Add debian/patches/89-cvs-whole-row-vars.patch:
     - Back-patch fix for proper labeling of whole-row Datums generated from
       subquery results.
     - Patch backported from upstream CVS:
       http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/executor/execQual.c.diff?r1=1.171;r2=1.171.4.1
     - This patch is necessary to make the CVE-2007-0556 patch backportable.
   * Add debian/patches/90-cvs-empty-subarrays.patch:
     - Repair ARRAY[] constructs whose inputs are empty sub-arrays.
     - Patch backported from upstream CVS:
       http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/executor/execQual.c.diff?r1=1.171.4.1;r2=1.171.4.2
     - This patch is necessary to make the CVE-2007-0556 patch backportable.
   * Add debian/patches/91-cvs-table-plan-consistency.patch:
     - Check that a table is still compatible with a previously made query
       plan. Use of ALTER COLUMN TYPE creates a hazard for cached query plans:
       they could contain vars that claim a column has a different type than it
       now has.  Not only can one trivially crash the backend, but with
       appropriate misuse of pass-by-reference datatypes it is possible to read
       out arbitrary locations in the server process's memory, which could allow
       retrieving database content the user should not be able to see.
     - Discovered by Jeff Trout.
     - Patch backported from 8.0.11 from CVS:
       http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/commands/tablecmds.c.diff?r1=1.142.4.6;r2=1.142.4.7
       http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/executor/execQual.c.diff?r1=1.171.4.2;r2=1.171.4.3
       http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/executor/execScan.c.diff?r1=1.34.4.1;r2=1.34.4.2
     - CVE-2007-0556

 -- Martin Pitt <email address hidden>   Mon,  5 Feb 2007 10:17:32 +0100