Format: 1.8 Date: Tue, 18 May 2021 12:13:14 +0200 Source: postgresql-12 Binary: libecpg-compat3 libecpg-dev libecpg6 libpgtypes3 libpq-dev libpq5 postgresql-12 postgresql-client-12 postgresql-plperl-12 postgresql-plpython3-12 postgresql-pltcl-12 postgresql-server-dev-12 Architecture: arm64 arm64_translations Version: 12.7-0ubuntu0.20.04.1 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Christian Ehrhardt Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 12 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql-12 - object-relational SQL database, version 12 server postgresql-client-12 - front-end programs for PostgreSQL 12 postgresql-plperl-12 - PL/Perl procedural language for PostgreSQL 12 postgresql-plpython3-12 - PL/Python 3 procedural language for PostgreSQL 12 postgresql-pltcl-12 - PL/Tcl procedural language for PostgreSQL 12 postgresql-server-dev-12 - development files for PostgreSQL 12 server-side programming Launchpad-Bugs-Fixed: 1928773 Changes: postgresql-12 (12.7-0ubuntu0.20.04.1) focal-security; urgency=medium . * New upstream version (LP: #1928773). . + Prevent integer overflows in array subscripting calculations (Tom Lane) . The array code previously did not complain about cases where an array's lower bound plus length overflows an integer. This resulted in later entries in the array becoming inaccessible (since their subscripts could not be written as integers), but more importantly it confused subsequent assignment operations. This could lead to memory overwrites, with ensuing crashes or unwanted data modifications. (CVE-2021-32027) . + Fix mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (Tom Lane) . If the UPDATE list contains any multi-column sub-selects (which give rise to junk columns in addition to the results proper), the UPDATE path would end up storing tuples that include the values of the extra junk columns. That's fairly harmless in the short run, but if new columns are added to the table then the values would become accessible, possibly leading to malfunctions if they don't match the datatypes of the added columns. . In addition, in versions supporting cross-partition updates, a cross-partition update triggered by such a case had the reverse problem: the junk columns were removed from the target list, typically causing an immediate crash due to malfunction of the multi-column sub-select mechanism. (CVE-2021-32028) . + Fix possibly-incorrect computation of UPDATE ... RETURNING outputs for joined cross-partition updates (Amit Langote, Etsuro Fujita) . If an UPDATE for a partitioned table caused a row to be moved to another partition with a physically different row type (for example, one with a different set of dropped columns), computation of RETURNING results for that row could produce errors or wrong answers. No error is observed unless the UPDATE involves other tables being joined to the target table. (CVE-2021-32029) . + Details about these and many further changes can be found at: https://www.postgresql.org/docs/12/release-12-7.html Checksums-Sha1: 4adf558c1bcf1743a0c37c4d6ac0b37ace682f68 18520 libecpg-compat3-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 256871e58755faeabcd7e769c43777bbeb0ae8cd 12040 libecpg-compat3_12.7-0ubuntu0.20.04.1_arm64.deb fd72a0ccdcd10952408b7f7130e3bc623ec20fd7 233724 libecpg-dev-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb eb8bb9dd65bec86c9942384ab01951834d6db06d 222964 libecpg-dev_12.7-0ubuntu0.20.04.1_arm64.deb a17431f7ecb6182e7053adf2bbf770e2f87e68a2 132756 libecpg6-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 294f14439e57df0d999fc267b6a316b0b84214be 40292 libecpg6_12.7-0ubuntu0.20.04.1_arm64.deb 927585653b4f1cb1a7abf710132a3be95bc7af6f 91992 libpgtypes3-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb c4d5b8a491ee25edab384ca894ef58c1c7dcce72 42080 libpgtypes3_12.7-0ubuntu0.20.04.1_arm64.deb f81ce4b231e02831100ecd648c8af1be0a6aa60e 132716 libpq-dev_12.7-0ubuntu0.20.04.1_arm64.deb 9738d881527f7781bea8eba51d2d5c5e693b94c5 318344 libpq5-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb d221f3c784cff8c8f4af3c41f39ade3ec39cf796 109332 libpq5_12.7-0ubuntu0.20.04.1_arm64.deb 53bc64523630de2acfdbeffc5680246274b99961 21128540 postgresql-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 2a218b92498e7d2c69c0c1b393dd84c96c37de03 16317 postgresql-12_12.7-0ubuntu0.20.04.1_arm64.buildinfo 388cf844dccd9bf16028ac49e14c9b1ca5ada82c 13019984 postgresql-12_12.7-0ubuntu0.20.04.1_arm64.deb b1e93329b106133142659cb117090b1088905022 8552799 postgresql-12_12.7-0ubuntu0.20.04.1_arm64_translations.tar.gz 87ccd30e66d5e4316a8efc7c81b976de032814f0 2171044 postgresql-client-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 8e33dd44ead5c8f61294dc9a1efff90c3add2609 1009716 postgresql-client-12_12.7-0ubuntu0.20.04.1_arm64.deb 4529bde6d27ff870f9a35f31e2be617342a182ed 252068 postgresql-plperl-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 07baf906ec780218cee0c28ac52a6ba14f5fab29 63380 postgresql-plperl-12_12.7-0ubuntu0.20.04.1_arm64.deb a7226308c593c271d1784fb3c412df89a32137ac 348836 postgresql-plpython3-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb d41e98867145d82baac30d7a21f4828ef6496732 71128 postgresql-plpython3-12_12.7-0ubuntu0.20.04.1_arm64.deb 314a4a8da0971a11c4a54a9eb4c7377e57ccf5aa 101940 postgresql-pltcl-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 2a99c03ee36d46866fac0221edc2f4a7dfbfe66a 28772 postgresql-pltcl-12_12.7-0ubuntu0.20.04.1_arm64.deb b37c0e2dbc2bdd8961c10108b067539effb5a58d 915924 postgresql-server-dev-12_12.7-0ubuntu0.20.04.1_arm64.deb Checksums-Sha256: 812edd883803961bb6ad4b4209c87fa57a2ec8c535e9498f27b1052c47d8d805 18520 libecpg-compat3-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 5b12604e49e131627d6211e75e86014c8b9fba73d9b9c40809dd4c34af396a82 12040 libecpg-compat3_12.7-0ubuntu0.20.04.1_arm64.deb 7f0b491df47ca48d7df9cde247ca2637d3ba01955a13b43ab5557e059834ad86 233724 libecpg-dev-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb d3eafc84a58ef1f80c8764646eb0c6fa77b49f4438335b802e6e8a6595681d66 222964 libecpg-dev_12.7-0ubuntu0.20.04.1_arm64.deb 86dfebd1ea9b3b12dd12954684709f604da7d4ba6fb18e8fa86d2539e27ff9e3 132756 libecpg6-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 925297d70ea3a9f01325258226b725733110c428acc0fe36f11829943a7e5a7e 40292 libecpg6_12.7-0ubuntu0.20.04.1_arm64.deb f5101107538e2eb0ead4cb954bd9d0850e2136d3d4421893fcc9a14b2944c4fc 91992 libpgtypes3-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 57f11d9f929ef7417c31bbc056f7da1673edafa497a4aeafd839f1498eef5b3d 42080 libpgtypes3_12.7-0ubuntu0.20.04.1_arm64.deb 2c7b5428d8a57eddfd14354da47dd9559dd0c240aadff39d5f221233197e4ef7 132716 libpq-dev_12.7-0ubuntu0.20.04.1_arm64.deb 34bbae10a7546f4f34872ea1978e68ac2af773340367bee8f00a186582252620 318344 libpq5-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 12917cda9d36c7a7c8a84f7d41d8c03ab34fae09d1483c360be83fb362c1cb43 109332 libpq5_12.7-0ubuntu0.20.04.1_arm64.deb ba5df7b894d30bf5f0d69fc6e860f618d1660869d772241971b7f630e6accb3e 21128540 postgresql-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb a7d55096d299c697820fc9164b2eb5a6671f47cba0d66586d248d98414368319 16317 postgresql-12_12.7-0ubuntu0.20.04.1_arm64.buildinfo 3a1bb6e8854f708e1f44b1d9eb1a99c9899c738b1e912edf96ed0da413e000dc 13019984 postgresql-12_12.7-0ubuntu0.20.04.1_arm64.deb d54574020abb96d26f5d0167681e245952f96fccb7df8e32323878efc15dc333 8552799 postgresql-12_12.7-0ubuntu0.20.04.1_arm64_translations.tar.gz 660440cafad6c05b44d28a8dade03ef3c73d895565792405840365c9bb2b0217 2171044 postgresql-client-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 3c899221ff86741a70ac2f766af815caf8ecf282963ce22451ebfe2ca69a4ed2 1009716 postgresql-client-12_12.7-0ubuntu0.20.04.1_arm64.deb b2fed44ccdb70d02ba17f05e90a18a6f02d88998a490297bec7f4f4b69ea25f6 252068 postgresql-plperl-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 20e0cbf1efa46d1a706461cb219b437f901f6b4bce8244c193c216a2fb674f84 63380 postgresql-plperl-12_12.7-0ubuntu0.20.04.1_arm64.deb 200618551e61ec883e39c57ab028c50522ab8fa97dc73fea21778885e4d50c85 348836 postgresql-plpython3-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb b97c32371526274a34d2b8b787da00bc08c76b2a7b0a391571689b23f1e5ff1d 71128 postgresql-plpython3-12_12.7-0ubuntu0.20.04.1_arm64.deb 4f9f9af486cf3b3ce66948798408a2b1d6fde6e12b79cfdc3cd9d1a41d34f15c 101940 postgresql-pltcl-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 33a81cc1322d72874f89e06349dab6f3ab4ca6ae8b922115326e9282f893f394 28772 postgresql-pltcl-12_12.7-0ubuntu0.20.04.1_arm64.deb b44f061b0eaf9d2124184d1c65b1ed25f819536514c959ef574926f578af7ec6 915924 postgresql-server-dev-12_12.7-0ubuntu0.20.04.1_arm64.deb Files: 84359f00f17702418087b83b9c0171a6 18520 debug optional libecpg-compat3-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb ef8b410d8c873ed519d9b182a3a2da09 12040 libs optional libecpg-compat3_12.7-0ubuntu0.20.04.1_arm64.deb 2a3439f1e40cedd5c4657f02827655dc 233724 debug optional libecpg-dev-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 7589055640376617e72713629e70edb1 222964 libdevel optional libecpg-dev_12.7-0ubuntu0.20.04.1_arm64.deb a06353dbcb1012c465876c4334a9a07f 132756 debug optional libecpg6-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 6ef5dfa31f5210cce8f0371c4fc8344c 40292 libs optional libecpg6_12.7-0ubuntu0.20.04.1_arm64.deb 94acdfddfc9f7a9136e3bef21d06b4ea 91992 debug optional libpgtypes3-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 0cec33b54a4201e44dda87278f3fd8d9 42080 libs optional libpgtypes3_12.7-0ubuntu0.20.04.1_arm64.deb 5ab0f8aff6571fed9942dda171525c6a 132716 libdevel optional libpq-dev_12.7-0ubuntu0.20.04.1_arm64.deb b2c00ea7b670ecf5aaeb96d85ef44263 318344 debug optional libpq5-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 478c11a5fca4b826037d4a3fe6cfb179 109332 libs optional libpq5_12.7-0ubuntu0.20.04.1_arm64.deb d7a9c6fb463b63191c6ccb69ba589693 21128540 debug optional postgresql-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 3653244b1408140c35c5d9bc389ee3d4 16317 database optional postgresql-12_12.7-0ubuntu0.20.04.1_arm64.buildinfo 07518482a05318837c8895762c983b28 13019984 database optional postgresql-12_12.7-0ubuntu0.20.04.1_arm64.deb 8e93197e711c4e83fa3737e0b87b6cf8 8552799 raw-translations - postgresql-12_12.7-0ubuntu0.20.04.1_arm64_translations.tar.gz a2ca14450949e335e9be542f57ef0805 2171044 debug optional postgresql-client-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb ce81653ba252a1db44150599facb3462 1009716 database optional postgresql-client-12_12.7-0ubuntu0.20.04.1_arm64.deb 2d14ea9d7c1294dd1d645cf4f298cdc6 252068 debug optional postgresql-plperl-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 88d1bbda9603b5592c42aa5cc07bf4a1 63380 database optional postgresql-plperl-12_12.7-0ubuntu0.20.04.1_arm64.deb 867fc3a6d86e2270c60863121f9e474a 348836 debug optional postgresql-plpython3-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 468207fc1444f0dcc2dcc5b5b62f95b6 71128 database optional postgresql-plpython3-12_12.7-0ubuntu0.20.04.1_arm64.deb 690c641d037b2b5d3da5665607aec77e 101940 debug optional postgresql-pltcl-12-dbgsym_12.7-0ubuntu0.20.04.1_arm64.ddeb 836134487d36e3322058fc692883003b 28772 database optional postgresql-pltcl-12_12.7-0ubuntu0.20.04.1_arm64.deb 5d38be1f34a9debd164a2feafd4aa7e0 915924 libdevel optional postgresql-server-dev-12_12.7-0ubuntu0.20.04.1_arm64.deb Original-Maintainer: Debian PostgreSQL Maintainers