postgresql-9.5 9.5.4-1 source package in Ubuntu

Changelog

postgresql-9.5 (9.5.4-1) unstable; urgency=medium

  * New upstream version.

    + Fix possible mis-evaluation of nested CASE-WHEN expressions
      (Heikki Linnakangas, Michael Paquier, Tom Lane)

      A CASE expression appearing within the test value subexpression of
      another CASE could become confused about whether its own test value was
      null or not.  Also, inlining of a SQL function implementing the equality
      operator used by a CASE expression could result in passing the wrong
      test value to functions called within a CASE expression in the SQL
      function's body.  If the test values were of different data types, a
      crash might result; moreover such situations could be abused to allow
      disclosure of portions of server memory.  (CVE-2016-5423)

    + Fix client programs' handling of special characters in database and role
      names (Noah Misch, Nathan Bossart, Michael Paquier)

      Numerous places in vacuumdb and other client programs could become
      confused by database and role names containing double quotes or
      backslashes.  Tighten up quoting rules to make that safe. Also, ensure
      that when a conninfo string is used as a database name parameter to
      these programs, it is correctly treated as such throughout.

      Fix handling of paired double quotes in psql's \connect and \password
      commands to match the documentation.

      Introduce a new -reuse-previous option in psql's \connect command to
      allow explicit control of whether to re-use connection parameters from a
      previous connection.  (Without this, the choice is based on whether the
      database name looks like a conninfo string, as before.)  This allows
      secure handling of database names containing special characters in
      pg_dumpall scripts.

      pg_dumpall now refuses to deal with database and role names containing
      carriage returns or newlines, as it seems impractical to quote those
      characters safely on Windows.  In future we may reject such names on the
      server side, but that step has not been taken yet.

      These are considered security fixes because crafted object names
      containing special characters could have been used to execute commands
      with superuser privileges the next time a superuser executes pg_dumpall
      or other routine maintenance operations.  (CVE-2016-5424)

  * Remove conditional multi-arch compilation, all supported dists are
    multi-arched now.
  * Use explicit xz compression for wheezy and precise

 -- Christoph Berg <email address hidden>  Tue, 09 Aug 2016 17:19:59 +0200

Upload details

Uploaded by:
Debian PostgreSQL Maintainers
Uploaded to:
Sid
Original maintainer:
Debian PostgreSQL Maintainers
Architectures:
any all
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
postgresql-9.5_9.5.4-1.dsc 3.5 KiB c42ca9c6d0c7422f11c102417cfeec82b0e1a0cce76edc1455ddb7167d9f5476
postgresql-9.5_9.5.4.orig.tar.bz2 17.6 MiB cf5e571164ad66028ecd7dd8819e3765470d45bcd440d258b686be7e69c76ed0
postgresql-9.5_9.5.4-1.debian.tar.xz 21.8 KiB ac9d0b1f2f531c7681eb736c461ddb6ad92f893cfdd24230dece847c9fe6540b

Available diffs

No changes file available.

Binary packages built by this source

libecpg-compat3: No summary available for libecpg-compat3 in ubuntu yakkety.

No description available for libecpg-compat3 in ubuntu yakkety.

libecpg-compat3-dbgsym: No summary available for libecpg-compat3-dbgsym in ubuntu yakkety.

No description available for libecpg-compat3-dbgsym in ubuntu yakkety.

libecpg-dev: No summary available for libecpg-dev in ubuntu yakkety.

No description available for libecpg-dev in ubuntu yakkety.

libecpg-dev-dbgsym: No summary available for libecpg-dev-dbgsym in ubuntu yakkety.

No description available for libecpg-dev-dbgsym in ubuntu yakkety.

libecpg6: No summary available for libecpg6 in ubuntu yakkety.

No description available for libecpg6 in ubuntu yakkety.

libecpg6-dbgsym: No summary available for libecpg6-dbgsym in ubuntu zesty.

No description available for libecpg6-dbgsym in ubuntu zesty.

libpgtypes3: No summary available for libpgtypes3 in ubuntu yakkety.

No description available for libpgtypes3 in ubuntu yakkety.

libpgtypes3-dbgsym: No summary available for libpgtypes3-dbgsym in ubuntu zesty.

No description available for libpgtypes3-dbgsym in ubuntu zesty.

libpq-dev: No summary available for libpq-dev in ubuntu yakkety.

No description available for libpq-dev in ubuntu yakkety.

libpq-dev-dbgsym: No summary available for libpq-dev-dbgsym in ubuntu yakkety.

No description available for libpq-dev-dbgsym in ubuntu yakkety.

libpq5: No summary available for libpq5 in ubuntu yakkety.

No description available for libpq5 in ubuntu yakkety.

libpq5-dbgsym: No summary available for libpq5-dbgsym in ubuntu zesty.

No description available for libpq5-dbgsym in ubuntu zesty.

postgresql-9.5: No summary available for postgresql-9.5 in ubuntu zesty.

No description available for postgresql-9.5 in ubuntu zesty.

postgresql-9.5-dbg: No summary available for postgresql-9.5-dbg in ubuntu yakkety.

No description available for postgresql-9.5-dbg in ubuntu yakkety.

postgresql-9.5-dbgsym: No summary available for postgresql-9.5-dbgsym in ubuntu zesty.

No description available for postgresql-9.5-dbgsym in ubuntu zesty.

postgresql-client-9.5: No summary available for postgresql-client-9.5 in ubuntu yakkety.

No description available for postgresql-client-9.5 in ubuntu yakkety.

postgresql-client-9.5-dbgsym: No summary available for postgresql-client-9.5-dbgsym in ubuntu zesty.

No description available for postgresql-client-9.5-dbgsym in ubuntu zesty.

postgresql-contrib-9.5: No summary available for postgresql-contrib-9.5 in ubuntu yakkety.

No description available for postgresql-contrib-9.5 in ubuntu yakkety.

postgresql-contrib-9.5-dbgsym: No summary available for postgresql-contrib-9.5-dbgsym in ubuntu zesty.

No description available for postgresql-contrib-9.5-dbgsym in ubuntu zesty.

postgresql-doc-9.5: No summary available for postgresql-doc-9.5 in ubuntu yakkety.

No description available for postgresql-doc-9.5 in ubuntu yakkety.

postgresql-plperl-9.5: No summary available for postgresql-plperl-9.5 in ubuntu yakkety.

No description available for postgresql-plperl-9.5 in ubuntu yakkety.

postgresql-plperl-9.5-dbgsym: No summary available for postgresql-plperl-9.5-dbgsym in ubuntu yakkety.

No description available for postgresql-plperl-9.5-dbgsym in ubuntu yakkety.

postgresql-plpython-9.5: No summary available for postgresql-plpython-9.5 in ubuntu yakkety.

No description available for postgresql-plpython-9.5 in ubuntu yakkety.

postgresql-plpython-9.5-dbgsym: No summary available for postgresql-plpython-9.5-dbgsym in ubuntu yakkety.

No description available for postgresql-plpython-9.5-dbgsym in ubuntu yakkety.

postgresql-plpython3-9.5: No summary available for postgresql-plpython3-9.5 in ubuntu yakkety.

No description available for postgresql-plpython3-9.5 in ubuntu yakkety.

postgresql-plpython3-9.5-dbgsym: No summary available for postgresql-plpython3-9.5-dbgsym in ubuntu yakkety.

No description available for postgresql-plpython3-9.5-dbgsym in ubuntu yakkety.

postgresql-pltcl-9.5: No summary available for postgresql-pltcl-9.5 in ubuntu zesty.

No description available for postgresql-pltcl-9.5 in ubuntu zesty.

postgresql-pltcl-9.5-dbgsym: No summary available for postgresql-pltcl-9.5-dbgsym in ubuntu yakkety.

No description available for postgresql-pltcl-9.5-dbgsym in ubuntu yakkety.

postgresql-server-dev-9.5: No summary available for postgresql-server-dev-9.5 in ubuntu yakkety.

No description available for postgresql-server-dev-9.5 in ubuntu yakkety.

postgresql-server-dev-9.5-dbgsym: No summary available for postgresql-server-dev-9.5-dbgsym in ubuntu yakkety.

No description available for postgresql-server-dev-9.5-dbgsym in ubuntu yakkety.