Format: 1.8 Date: Thu, 15 Feb 2024 15:19:37 -0300 Source: postgresql-12 Binary: libecpg-compat3 libecpg-dev libecpg6 libpgtypes3 libpq-dev libpq5 postgresql-12 postgresql-client-12 postgresql-plperl-12 postgresql-plpython3-12 postgresql-pltcl-12 postgresql-server-dev-12 Architecture: i386 i386_translations Version: 12.18-0ubuntu0.20.04.1 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Athos Ribeiro Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 12 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql-12 - object-relational SQL database, version 12 server postgresql-client-12 - front-end programs for PostgreSQL 12 postgresql-plperl-12 - PL/Perl procedural language for PostgreSQL 12 postgresql-plpython3-12 - PL/Python 3 procedural language for PostgreSQL 12 postgresql-pltcl-12 - PL/Tcl procedural language for PostgreSQL 12 postgresql-server-dev-12 - development files for PostgreSQL 12 server-side programming Launchpad-Bugs-Fixed: 2052850 Changes: postgresql-12 (12.18-0ubuntu0.20.04.1) focal-security; urgency=medium . * New upstream version (LP: #2052850). . + A dump/restore is not required for those running 12.X. . + However, one bug was fixed that could have resulted in corruption of GIN indexes during concurrent updates. If you suspect such corruption, reindex affected indexes after installing this update. . + Also, if you are upgrading from a version earlier than 12.17, see those release notes as well please. . + Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY (Heikki Linnakangas) . One step of a concurrent refresh command was run under weak security restrictions. If a materialized view's owner could persuade a superuser or other high-privileged user to perform a concurrent refresh on that view, the view's owner could control code executed with the privileges of the user running REFRESH. Fix things so that all user-determined code is run as the view's owner, as expected. . The only known exploit for this error does not work in PostgreSQL 16.0 and later, so it may be that v16 is not vulnerable in practice. . The PostgreSQL Project thanks Pedro Gallegos for reporting this problem. (CVE-2024-0985) . + Details about these and many further changes can be found at: https://www.postgresql.org/docs/12/release-12-18.html . * d/postgresql-12.NEWS: Update. Checksums-Sha1: ce8f846b7e3bc8f3d11f480da472540d5223c924 16464 libecpg-compat3-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb e512aa216970243294686974cce37cca6aaea5fd 13216 libecpg-compat3_12.18-0ubuntu0.20.04.1_i386.deb 13fb6236352616bf487e338bfcf2fc03cb5d6149 258280 libecpg-dev-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 8cd39b45f6171c124769af836877fbc65f717678 251848 libecpg-dev_12.18-0ubuntu0.20.04.1_i386.deb 354c3650f192bb2b32fd153832b0e1b4d332fbc8 116948 libecpg6-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 7271c285239e4ddceb1ec85258f32f769133b010 46896 libecpg6_12.18-0ubuntu0.20.04.1_i386.deb 020760ff6e402a75f1c808af369a61c329da1aa6 84232 libpgtypes3-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb ae6db2b5bb2f41df93fec8bc88a9b3120853bcd7 46848 libpgtypes3_12.18-0ubuntu0.20.04.1_i386.deb 72cce32e00d1075a4ab422a69e64da6a64317643 146792 libpq-dev_12.18-0ubuntu0.20.04.1_i386.deb a462e9858992c1113532589407362c60f5400aed 284232 libpq5-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb cdd77760b81ce6300155afe92dd958a33cf5b03b 124632 libpq5_12.18-0ubuntu0.20.04.1_i386.deb 5332ee40d4ce726e85b57cd6dee5a3d381263e95 20330852 postgresql-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb bcfdd45258a6c8d76a20fc3d75b313aa7c7c2301 16828 postgresql-12_12.18-0ubuntu0.20.04.1_i386.buildinfo 8d5bf7a686dfc218a6f160c6cfc8368ff05c703e 13706560 postgresql-12_12.18-0ubuntu0.20.04.1_i386.deb 7e6ea776315ea8b72963c8e2ee57163870732de3 8596127 postgresql-12_12.18-0ubuntu0.20.04.1_i386_translations.tar.gz 35c992c25081862626e8fcab0db015b6e38ea7e1 1844008 postgresql-client-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb b284bfae6bc199cb1ef523aa1e8a7bc78b33a951 1077376 postgresql-client-12_12.18-0ubuntu0.20.04.1_i386.deb 6792437250cccb113cafd0420917e9b3524c0049 241448 postgresql-plperl-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 12688a612cc070bcfab28da5350ed1621a96d709 70948 postgresql-plperl-12_12.18-0ubuntu0.20.04.1_i386.deb 75f4f2950f80f3520796756c13b0c0405e38e632 332536 postgresql-plpython3-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb e0742fe4944dfcf2316aff78651c236ae14b0d4f 78172 postgresql-plpython3-12_12.18-0ubuntu0.20.04.1_i386.deb e3b433f521138264cf607dd6747b20cf2b32f255 96732 postgresql-pltcl-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb d3276039704982d5c358659d1c327ec8bf686cc5 31596 postgresql-pltcl-12_12.18-0ubuntu0.20.04.1_i386.deb 8413c6343d20c240514bdbacb88817a0ded27186 995908 postgresql-server-dev-12_12.18-0ubuntu0.20.04.1_i386.deb Checksums-Sha256: 06f826bac30ba9bfb001fd647e4fc82a2f4f993a43724f0e92dbbb4e3eb6c4ff 16464 libecpg-compat3-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb a7b9c7cb9a70047c913c2630490ba35502b1314fe82c68c5a12108980ffb8941 13216 libecpg-compat3_12.18-0ubuntu0.20.04.1_i386.deb e17c7467ac8e08375c6d020cd0eb83738a0702c1231bc2ab90e97a1e69f2d819 258280 libecpg-dev-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb ebe9b211800daa72afb45fd4b1f44952fcd7d8d794db8a3690aba66d2f533178 251848 libecpg-dev_12.18-0ubuntu0.20.04.1_i386.deb bcbe1266b45944376a0d49287a86ac1a6168d2adaa3f8fca044ad008693c0f83 116948 libecpg6-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 6bcc267a28ef93b70374a672efe13b5f64255c89e4a64d2f832ddb5613dcdce7 46896 libecpg6_12.18-0ubuntu0.20.04.1_i386.deb 0abbfe4df7bebff57474dce49b63a7927d27e3c4fc51553569aaa136aa9b8bed 84232 libpgtypes3-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb c72080a252c6f49ef6657925c9ee8bb7696caea2fbfd9fcab82b08bad87cbd90 46848 libpgtypes3_12.18-0ubuntu0.20.04.1_i386.deb 861e5eb4cb7971ec070411f88c375bd7ba2ea4595e33697ad38ab0c4d1740e70 146792 libpq-dev_12.18-0ubuntu0.20.04.1_i386.deb ea72a9fe48eb94e98823b4af3289689cebe331f79295def1ad475447e05ca1e8 284232 libpq5-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 99beecfa57c7f8acb88945a3fc1b0ccf9239af2466f4652e2d1b4e6067722b90 124632 libpq5_12.18-0ubuntu0.20.04.1_i386.deb e5176e3fece351436fd3e761f7d6f6f4d8a81574519ae244007ea6b7988e138d 20330852 postgresql-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 9165d45ee54710e15dfc83528a2fead33c1a2f0099b14fccc0452a516dbc310e 16828 postgresql-12_12.18-0ubuntu0.20.04.1_i386.buildinfo 965c1b70918d3346cd9564caae5495c579d9db7772e50f0f847e9d6cf40acd20 13706560 postgresql-12_12.18-0ubuntu0.20.04.1_i386.deb 76cd14bf96528d48512c2deffb290b8e7f93702b90cd9d3ed47895bf21fca477 8596127 postgresql-12_12.18-0ubuntu0.20.04.1_i386_translations.tar.gz 668b740760587707a36eaff544b51d90d6aaca6d6dbde9bad1c39831040050ea 1844008 postgresql-client-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 23bc03b62e03fe9607c72a44760a6ea0164319321363974d86b2064a1a9dc0c7 1077376 postgresql-client-12_12.18-0ubuntu0.20.04.1_i386.deb 92fbfe78930dfc11478874608c0344dfa3d6bb7ab68e950d83c95fdd8a039bc1 241448 postgresql-plperl-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 4fa1bf87ad112d861dd0b8ef24338c9a4613ef68de8f7915565f6b6998198781 70948 postgresql-plperl-12_12.18-0ubuntu0.20.04.1_i386.deb 4602d7a84f0f7d576e40e4a473537f5e58c2ac1caae5dac462df6ad92f24d7d3 332536 postgresql-plpython3-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 5c03ade390a145d219b6f921774b97b9b74e81181689a6efc066b4cd59dda314 78172 postgresql-plpython3-12_12.18-0ubuntu0.20.04.1_i386.deb 2998dfd5100c9a117e0c7946d0009f75a19dd40ce50adda9f083db73d89899df 96732 postgresql-pltcl-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 3af32cfb36f4c5496cfd71a06fde4db44e6e44135167ba009d1724b47fc2104d 31596 postgresql-pltcl-12_12.18-0ubuntu0.20.04.1_i386.deb 56712b05d654401fe59ced31036a1b3f60478081a4b8da86f53428be9df227ad 995908 postgresql-server-dev-12_12.18-0ubuntu0.20.04.1_i386.deb Files: 7867921bf4f298aca47284a43acda7c1 16464 debug optional libecpg-compat3-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb a8ee900e168ceee97aa490b8ce720223 13216 libs optional libecpg-compat3_12.18-0ubuntu0.20.04.1_i386.deb e5b94e40b2bca234eb32c0e261abad26 258280 debug optional libecpg-dev-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 8c950eb0953fff59775093f4ff666aeb 251848 libdevel optional libecpg-dev_12.18-0ubuntu0.20.04.1_i386.deb df949bb65564f0b35efa99928516f431 116948 debug optional libecpg6-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 39560f6385b32619a2d4e8379d900d7f 46896 libs optional libecpg6_12.18-0ubuntu0.20.04.1_i386.deb ebd3f817833ae3aa9546a2c06662b28e 84232 debug optional libpgtypes3-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 40d03e817f4f75ad8044ce52638a016e 46848 libs optional libpgtypes3_12.18-0ubuntu0.20.04.1_i386.deb e337cb18dac0288af0c585eac33091eb 146792 libdevel optional libpq-dev_12.18-0ubuntu0.20.04.1_i386.deb 4be31296164a7296e90d53dbeb5a809f 284232 debug optional libpq5-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 516778b1512842fe40f9ba05535998e4 124632 libs optional libpq5_12.18-0ubuntu0.20.04.1_i386.deb 162480bc190b48a179069d02fc47f2f2 20330852 debug optional postgresql-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 343a4385bfafda2e07056fd022c2b1dd 16828 database optional postgresql-12_12.18-0ubuntu0.20.04.1_i386.buildinfo 8781be69868968d32e422c439e6100e2 13706560 database optional postgresql-12_12.18-0ubuntu0.20.04.1_i386.deb 2ea3af6213a807640e7a5a72a7903d8c 8596127 raw-translations - postgresql-12_12.18-0ubuntu0.20.04.1_i386_translations.tar.gz a412bbadb461274a7e1264927d02b991 1844008 debug optional postgresql-client-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 061fff1b9b8d40496d7e8ebe57ba236a 1077376 database optional postgresql-client-12_12.18-0ubuntu0.20.04.1_i386.deb eb444d62ce5e3f09e2eaf86101dc787c 241448 debug optional postgresql-plperl-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 9912f1e741b5871c0be96c4b91ad3e6c 70948 database optional postgresql-plperl-12_12.18-0ubuntu0.20.04.1_i386.deb 28523077b3a0c4df9a84fde7aee9ce51 332536 debug optional postgresql-plpython3-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 7d5c03187fdaa3c945d5f66f3e551d12 78172 database optional postgresql-plpython3-12_12.18-0ubuntu0.20.04.1_i386.deb 97b269250777357bc33c8de5b5ae6885 96732 debug optional postgresql-pltcl-12-dbgsym_12.18-0ubuntu0.20.04.1_i386.ddeb 217628fe7a920f874209d0662616d467 31596 database optional postgresql-pltcl-12_12.18-0ubuntu0.20.04.1_i386.deb 4174a31fb26f6312a91d8130a642d79e 995908 libdevel optional postgresql-server-dev-12_12.18-0ubuntu0.20.04.1_i386.deb Original-Maintainer: Debian PostgreSQL Maintainers