~ubuntu-branches/ubuntu/lucid/postgresql-8.4/lucid-proposed

Viewing all changes in revision 22.

  • Committer: Package Import Robot
  • Author(s): Martin Pitt
  • Date: 2014-07-24 18:17:34 UTC
  • mfrom: (1.4.4)
  • Revision ID: package-import@ubuntu.com-20140724181734-d9mk8va6ozuq7v6s
Tags: 8.4.22-0ubuntu0.10.04
* New upstream bug fix release: (LP: #1348176)
  - Various data integrity and other bug fixes.
  - Secure Unix-domain sockets of temporary postmasters started during make
     check.
     Any local user able to access the socket file could connect as the
     server's bootstrap superuser, then proceed to execute arbitrary code as
     the operating-system user running the test, as we previously noted in
     CVE-2014-0067. This change defends against that risk by placing the
     server's socket in a temporary, mode 0700 subdirectory of /tmp.
  - See release notes for details:
    http://www.postgresql.org/docs/current/static/release-8-4-22.html
* Drop pg_regress patch to run tests with socket in /tmp, obsolete with
  above upstream changes and not applicable any more.
* Add debian/postgresql-8.4.NEWS to point out that upstream support ends
  now.

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: