Skip site navigation (1) Skip section navigation (2)

SECURITY RELEASES: 7.2.8 - 7.3.10 - 7.4.8 - 8.0.3

From: "Marc G(dot) Fournier" <scrappy(at)postgresql(dot)org>
To: pgsql-announce(at)postgresql(dot)org
Cc: pgsql-general(at)postgresql(dot)org
Subject: SECURITY RELEASES: 7.2.8 - 7.3.10 - 7.4.8 - 8.0.3
Date: 2005-05-10 19:51:09
Message-ID: 20050510162911.G6493@ganymede.hub.org (view raw or flat)
Thread:
Lists: pgsql-announcepgsql-general
In order to address several security issues identified over the past two 
weeks, as well as one "low probability" race condition, we are releasing 
new version of PostgreSQL as far back as the 7.2.x branch.

Please note that the security issues were those already reported by Tom 
Lane, as well as a manual fix for them.  These releases are mainly to 
ensure that those installing and/or upgrading existing installations have 
those fixes automatically.

For details on  the fixes, please see the HISTORY file included in the 
Release, but a summary consists of:

      * Change encoding function signature to prevent misuse
      * Change "contrib/tsearch2" to avoid unsafe use of INTERNAL function
        results
      * Repair race condition between relation extension and VACUUM
        This could theoretically have caused loss of a page's worth of
        freshly-inserted data, although the scenario seems of very low
        probability. There are no known cases of it having caused more than
        an Assert failure.

Downloads are available via:

 	http://www.postgresql.org/download

Please report any bugs to:

 	pgsql-bugs(at)postgresql(dot)org

----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email: scrappy(at)hub(dot)org           Yahoo!: yscrappy              ICQ: 7615664

Responses

pgsql-announce by date

Next:From: Neil ConwayDate: 2005-05-11 00:39:56
Subject: Re: [GENERAL] SECURITY RELEASES: 7.2.8 - 7.3.10 - 7.4.8 - 8.0.3
Previous:From: Joshua D. DrakeDate: 2005-05-09 21:07:04
Subject: Mammoth PostgreSQL Replication 8.0.2 Released

pgsql-general by date

Next:From: Daniel SchuchardtDate: 2005-05-10 19:53:15
Subject: Re: Delphi - Developers start develop Access components
Previous:From: Tom LaneDate: 2005-05-10 19:50:05
Subject: Re: [PERFORM] "Hash index" vs. "b-tree index" (PostgreSQL

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group