postgresql-8.1 8.1.7-1ubuntu1 source package in Ubuntu

Changelog

postgresql-8.1 (8.1.7-1ubuntu1) feisty; urgency=low

  * Merge from debian unstable, remaining changes:
    - debian/control: Do not build the client-side libraries, they are built
      from postgresql-8.2 now.

postgresql-8.1 (8.1.7-1) unstable; urgency=high

  * New upstream security and bug fix release:
    - Fix security vulnerabilities that allowed connected users to
      read backend memory.
      The vulnerabilities involve suppressing the normal check that a SQL
      function returns the data type it's declared to, and changing the
      data type of a table column (CVE-2007-0555, CVE-2007-0556). These
      errors can easily be exploited to cause a backend crash, and in
      principle might be used to read database content that the user
      should not be able to access.
    - Fix rare bug wherein btree index page splits could fail due to
      choosing an infeasible split point.
    - Improve "VACUUM" performance for databases with many tables.
    - Fix autovacuum to avoid leaving non-permanent transaction IDs in
      non-connectable databases.
    - Fix for rare Assert() crash triggered by UNION.
    - Tighten security of multi-byte character processing for UTF8
      sequences over three bytes long.
    - Fix possible crashes when an already-in-use pl/pgsql function is
      updated.
  * Urgency high: security relevant changes and critical bug fixes.

 -- Michael Bienia <email address hidden>   Wed,  7 Feb 2007 00:31:58 +0100