SECURITY RELEASES: 7.2.8 - 7.3.10 - 7.4.8 - 8.0.3

From: "Marc G(dot) Fournier" <scrappy(at)postgresql(dot)org>
To: pgsql-announce(at)postgresql(dot)org
Cc: pgsql-general(at)postgresql(dot)org
Subject: SECURITY RELEASES: 7.2.8 - 7.3.10 - 7.4.8 - 8.0.3
Date: 2005-05-10 19:51:09
Message-ID: 20050510162911.G6493@ganymede.hub.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-announce pgsql-general


In order to address several security issues identified over the past two
weeks, as well as one "low probability" race condition, we are releasing
new version of PostgreSQL as far back as the 7.2.x branch.

Please note that the security issues were those already reported by Tom
Lane, as well as a manual fix for them. These releases are mainly to
ensure that those installing and/or upgrading existing installations have
those fixes automatically.

For details on the fixes, please see the HISTORY file included in the
Release, but a summary consists of:

* Change encoding function signature to prevent misuse
* Change "contrib/tsearch2" to avoid unsafe use of INTERNAL function
results
* Repair race condition between relation extension and VACUUM
This could theoretically have caused loss of a page's worth of
freshly-inserted data, although the scenario seems of very low
probability. There are no known cases of it having caused more than
an Assert failure.

Downloads are available via:

http://www.postgresql.org/download

Please report any bugs to:

pgsql-bugs(at)postgresql(dot)org

----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email: scrappy(at)hub(dot)org Yahoo!: yscrappy ICQ: 7615664

Responses

Browse pgsql-announce by date

  From Date Subject
Next Message Neil Conway 2005-05-11 00:39:56 Re: [GENERAL] SECURITY RELEASES: 7.2.8 - 7.3.10 - 7.4.8 - 8.0.3
Previous Message Joshua D. Drake 2005-05-09 21:07:04 Mammoth PostgreSQL Replication 8.0.2 Released

Browse pgsql-general by date

  From Date Subject
Next Message Daniel Schuchardt 2005-05-10 19:53:15 Re: Delphi - Developers start develop Access components
Previous Message Tom Lane 2005-05-10 19:50:05 Re: [PERFORM] "Hash index" vs. "b-tree index" (PostgreSQL