postgresql-10 10.5-1 source package in Ubuntu
Changelog
postgresql-10 (10.5-1) unstable; urgency=medium * New upstream version. + Fix failure to reset libpq's state fully between connection attempts An unprivileged user of dblink or postgres_fdw could bypass the checks intended to prevent use of server-side credentials, such as a ~/.pgpass file owned by the operating-system user running the server. Servers allowing peer authentication on local connections are particularly vulnerable. Other attacks such as SQL injection into a postgres_fdw session are also possible. Attacking postgres_fdw in this way requires the ability to create a foreign server object with selected connection parameters, but any user with access to dblink could exploit the problem. In general, an attacker with the ability to select the connection parameters for a libpq-using application could cause mischief, though other plausible attack scenarios are harder to think of. Our thanks to Andrew Krasichkov for reporting this issue. (CVE-2018-10915) + Fix INSERT ... ON CONFLICT UPDATE through a view that isn't just SELECT FROM ... Erroneous expansion of an updatable view could lead to crashes or attribute ... has the wrong type errors, if the view's SELECT list doesn't match one-to-one with the underlying table's columns. Furthermore, this bug could be leveraged to allow updates of columns that an attacking user lacks UPDATE privilege for, if that user has INSERT and UPDATE privileges for some other column(s) of the table. Any user could also use it for disclosure of server memory. (CVE-2018-10925) * Remove version checking for libselinux1-dev, 2.1.10 is old enough now. * Drop support for tcl8.5. * Use dh_auto_configure to correctly seed the build architecture. * Filter -fdebug-prefix-map and -ffile-prefix-map in more places, and make PGXS modules build reproducibly. * Add new pgtypes header and symbol. -- Christoph Berg <email address hidden> Tue, 07 Aug 2018 10:56:16 +0200
Upload details
- Uploaded by:
- Debian PostgreSQL Maintainers
- Uploaded to:
- Sid
- Original maintainer:
- Debian PostgreSQL Maintainers
- Architectures:
- any all
- Section:
- misc
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
postgresql-10_10.5-1.dsc | 3.4 KiB | e927a34c348539e6f4dd38f639263ccc28db682522bbd2810ffb76d2d22a3f2a |
postgresql-10_10.5.orig.tar.bz2 | 19.3 MiB | 6c8e616c91a45142b85c0aeb1f29ebba4a361309e86469e0fb4617b6a73c4011 |
postgresql-10_10.5-1.debian.tar.xz | 24.3 KiB | e00c056c95611df8cd85a90d6bdab94efcfea1efdba36aa29cc7636df8c25b06 |
Available diffs
- diff from 10.4-2 to 10.5-1 (2.0 MiB)
No changes file available.
Binary packages built by this source
- libecpg-compat3: No summary available for libecpg-compat3 in ubuntu cosmic.
No description available for libecpg-compat3 in ubuntu cosmic.
- libecpg-compat3-dbgsym: No summary available for libecpg-compat3-dbgsym in ubuntu disco.
No description available for libecpg-
compat3- dbgsym in ubuntu disco.
- libecpg-dev: No summary available for libecpg-dev in ubuntu cosmic.
No description available for libecpg-dev in ubuntu cosmic.
- libecpg-dev-dbgsym: No summary available for libecpg-dev-dbgsym in ubuntu disco.
No description available for libecpg-dev-dbgsym in ubuntu disco.
- libecpg6: No summary available for libecpg6 in ubuntu cosmic.
No description available for libecpg6 in ubuntu cosmic.
- libecpg6-dbgsym: No summary available for libecpg6-dbgsym in ubuntu cosmic.
No description available for libecpg6-dbgsym in ubuntu cosmic.
- libpgtypes3: No summary available for libpgtypes3 in ubuntu cosmic.
No description available for libpgtypes3 in ubuntu cosmic.
- libpgtypes3-dbgsym: No summary available for libpgtypes3-dbgsym in ubuntu disco.
No description available for libpgtypes3-dbgsym in ubuntu disco.
- libpq-dev: No summary available for libpq-dev in ubuntu cosmic.
No description available for libpq-dev in ubuntu cosmic.
- libpq5: No summary available for libpq5 in ubuntu cosmic.
No description available for libpq5 in ubuntu cosmic.
- libpq5-dbgsym: No summary available for libpq5-dbgsym in ubuntu cosmic.
No description available for libpq5-dbgsym in ubuntu cosmic.
- postgresql-10: No summary available for postgresql-10 in ubuntu cosmic.
No description available for postgresql-10 in ubuntu cosmic.
- postgresql-10-dbgsym: No summary available for postgresql-10-dbgsym in ubuntu disco.
No description available for postgresql-
10-dbgsym in ubuntu disco.
- postgresql-client-10: No summary available for postgresql-client-10 in ubuntu disco.
No description available for postgresql-
client- 10 in ubuntu disco.
- postgresql-client-10-dbgsym: No summary available for postgresql-client-10-dbgsym in ubuntu cosmic.
No description available for postgresql-
client- 10-dbgsym in ubuntu cosmic.
- postgresql-doc-10: No summary available for postgresql-doc-10 in ubuntu cosmic.
No description available for postgresql-doc-10 in ubuntu cosmic.
- postgresql-plperl-10: No summary available for postgresql-plperl-10 in ubuntu cosmic.
No description available for postgresql-
plperl- 10 in ubuntu cosmic.
- postgresql-plperl-10-dbgsym: No summary available for postgresql-plperl-10-dbgsym in ubuntu cosmic.
No description available for postgresql-
plperl- 10-dbgsym in ubuntu cosmic.
- postgresql-plpython-10: No summary available for postgresql-plpython-10 in ubuntu cosmic.
No description available for postgresql-
plpython- 10 in ubuntu cosmic.
- postgresql-plpython-10-dbgsym: No summary available for postgresql-plpython-10-dbgsym in ubuntu cosmic.
No description available for postgresql-
plpython- 10-dbgsym in ubuntu cosmic.
- postgresql-plpython3-10: No summary available for postgresql-plpython3-10 in ubuntu cosmic.
No description available for postgresql-
plpython3- 10 in ubuntu cosmic.
- postgresql-plpython3-10-dbgsym: No summary available for postgresql-plpython3-10-dbgsym in ubuntu disco.
No description available for postgresql-
plpython3- 10-dbgsym in ubuntu disco.
- postgresql-pltcl-10: No summary available for postgresql-pltcl-10 in ubuntu cosmic.
No description available for postgresql-pltcl-10 in ubuntu cosmic.
- postgresql-pltcl-10-dbgsym: No summary available for postgresql-pltcl-10-dbgsym in ubuntu cosmic.
No description available for postgresql-
pltcl-10- dbgsym in ubuntu cosmic.
- postgresql-server-dev-10: No summary available for postgresql-server-dev-10 in ubuntu disco.
No description available for postgresql-
server- dev-10 in ubuntu disco.
- postgresql-server-dev-10-dbgsym: No summary available for postgresql-server-dev-10-dbgsym in ubuntu cosmic.
No description available for postgresql-
server- dev-10- dbgsym in ubuntu cosmic.