postgresql-11 11.4-1 source package in Ubuntu
Changelog
postgresql-11 (11.4-1) unstable; urgency=medium
* New upstream version.
+ Fix buffer-overflow hazards in SCRAM verifier parsing
(Jonathan Katz, Heikki Linnakangas, Michael Paquier)
Any authenticated user could cause a stack-based buffer overflow by
changing their own password to a purpose-crafted value. In addition to
the ability to crash the PostgreSQL server, this could suffice for
executing arbitrary code as the PostgreSQL operating system account.
A similar overflow hazard existed in libpq, which could allow a rogue
server to crash a client or perhaps execute arbitrary code as the
client's operating system account.
The PostgreSQL Project thanks Alexander Lakhin for reporting this
problem. (CVE-2019-10164)
-- Christoph Berg <email address hidden> Tue, 18 Jun 2019 11:03:14 +0200
Upload details
- Uploaded by:
- Debian PostgreSQL Maintainers
- Uploaded to:
- Sid
- Original maintainer:
- Debian PostgreSQL Maintainers
- Architectures:
- any all
- Section:
- misc
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| postgresql-11_11.4-1.dsc | 3.6 KiB | 1dedf265cfbac175b34a2f06f8fb67b07be0cee00c5ba340dcf5d3b70c7a5a7e |
| postgresql-11_11.4.orig.tar.bz2 | 18.8 MiB | 02802ddffd1590805beddd1e464dd28a46a41a5f1e1df04bab4f46663195cc8b |
| postgresql-11_11.4-1.debian.tar.xz | 23.6 KiB | 346f7dca312b741a67a7429b84e48c7f69d41b9a6c5a66dbb46c607d76777d43 |
Available diffs
- diff from 11.3-1 to 11.4-1 (922.4 KiB)
No changes file available.
Binary packages built by this source
- libecpg-compat3: No summary available for libecpg-compat3 in ubuntu eoan.
No description available for libecpg-compat3 in ubuntu eoan.
- libecpg-compat3-dbgsym: No summary available for libecpg-compat3-dbgsym in ubuntu eoan.
No description available for libecpg-
compat3- dbgsym in ubuntu eoan.
- libecpg-dev: No summary available for libecpg-dev in ubuntu eoan.
No description available for libecpg-dev in ubuntu eoan.
- libecpg-dev-dbgsym: No summary available for libecpg-dev-dbgsym in ubuntu eoan.
No description available for libecpg-dev-dbgsym in ubuntu eoan.
- libecpg6: No summary available for libecpg6 in ubuntu eoan.
No description available for libecpg6 in ubuntu eoan.
- libecpg6-dbgsym: No summary available for libecpg6-dbgsym in ubuntu eoan.
No description available for libecpg6-dbgsym in ubuntu eoan.
- libpgtypes3: No summary available for libpgtypes3 in ubuntu eoan.
No description available for libpgtypes3 in ubuntu eoan.
- libpgtypes3-dbgsym: No summary available for libpgtypes3-dbgsym in ubuntu eoan.
No description available for libpgtypes3-dbgsym in ubuntu eoan.
- libpq-dev: No summary available for libpq-dev in ubuntu eoan.
No description available for libpq-dev in ubuntu eoan.
- libpq5: No summary available for libpq5 in ubuntu eoan.
No description available for libpq5 in ubuntu eoan.
- libpq5-dbgsym: No summary available for libpq5-dbgsym in ubuntu eoan.
No description available for libpq5-dbgsym in ubuntu eoan.
- postgresql-11: No summary available for postgresql-11 in ubuntu eoan.
No description available for postgresql-11 in ubuntu eoan.
- postgresql-11-dbgsym: No summary available for postgresql-11-dbgsym in ubuntu eoan.
No description available for postgresql-
11-dbgsym in ubuntu eoan.
- postgresql-client-11: No summary available for postgresql-client-11 in ubuntu eoan.
No description available for postgresql-
client- 11 in ubuntu eoan.
- postgresql-client-11-dbgsym: No summary available for postgresql-client-11-dbgsym in ubuntu eoan.
No description available for postgresql-
client- 11-dbgsym in ubuntu eoan.
- postgresql-doc-11: No summary available for postgresql-doc-11 in ubuntu eoan.
No description available for postgresql-doc-11 in ubuntu eoan.
- postgresql-plperl-11: No summary available for postgresql-plperl-11 in ubuntu eoan.
No description available for postgresql-
plperl- 11 in ubuntu eoan.
- postgresql-plperl-11-dbgsym: No summary available for postgresql-plperl-11-dbgsym in ubuntu eoan.
No description available for postgresql-
plperl- 11-dbgsym in ubuntu eoan.
- postgresql-plpython-11: No summary available for postgresql-plpython-11 in ubuntu eoan.
No description available for postgresql-
plpython- 11 in ubuntu eoan.
- postgresql-plpython-11-dbgsym: No summary available for postgresql-plpython-11-dbgsym in ubuntu eoan.
No description available for postgresql-
plpython- 11-dbgsym in ubuntu eoan.
- postgresql-plpython3-11: No summary available for postgresql-plpython3-11 in ubuntu eoan.
No description available for postgresql-
plpython3- 11 in ubuntu eoan.
- postgresql-plpython3-11-dbgsym: No summary available for postgresql-plpython3-11-dbgsym in ubuntu eoan.
No description available for postgresql-
plpython3- 11-dbgsym in ubuntu eoan.
- postgresql-pltcl-11: No summary available for postgresql-pltcl-11 in ubuntu eoan.
No description available for postgresql-pltcl-11 in ubuntu eoan.
- postgresql-pltcl-11-dbgsym: No summary available for postgresql-pltcl-11-dbgsym in ubuntu eoan.
No description available for postgresql-
pltcl-11- dbgsym in ubuntu eoan.
- postgresql-server-dev-11: No summary available for postgresql-server-dev-11 in ubuntu eoan.
No description available for postgresql-
server- dev-11 in ubuntu eoan.
- postgresql-server-dev-11-dbgsym: No summary available for postgresql-server-dev-11-dbgsym in ubuntu eoan.
No description available for postgresql-
server- dev-11- dbgsym in ubuntu eoan.
