← Back to branch summary

~ubuntu-branches/ubuntu/trusty/postgresql-9.3/trusty-security

« back to all changes in this revision

Viewing changes to doc/src/sgml/html/contrib-prog.html

  • Committer: Package Import Robot
  • Author(s): Martin Pitt
  • Date: 2015-10-08 15:42:16 UTC
  • mfrom: (1.2.3) (18.1.3 trusty-proposed)
  • Revision ID: package-import@ubuntu.com-20151008154216-zvhdaqznz9qf4rw2
Tags: 9.3.10-0ubuntu0.14.04
https://launchpad.net/bugs/1504132
* New upstream security/bug fix release: (LP: #1504132)
  - Guard against stack overflows in json parsing.
    If an application constructs PostgreSQL json or jsonb values from
    arbitrary user input, the application's users can reliably crash the
    PostgreSQL server, causing momentary denial of service.  (CVE-2015-5289)

  - Fix contrib/pgcrypto to detect and report too-short crypt() salts
    Certain invalid salt arguments crashed the server or disclosed a few
    bytes of server memory.  We have not ruled out the viability of attacks
    that arrange for presence of confidential information in the disclosed
    bytes, but they seem unlikely.  (CVE-2015-5288)

  - See release notes for details about other fixes.

Show diffs side-by-side

added added

removed removed

Lines of Context:
doc/src/sgml/html/contrib-prog.html
9
9
REV="MADE"
10
10
HREF="mailto:pgsql-docs@postgresql.org"><LINK
11
11
REL="HOME"
12
 
TITLE="PostgreSQL 9.3.7 Documentation"
 
12
TITLE="PostgreSQL 9.3.10 Documentation"
13
13
HREF="index.html"><LINK
14
14
REL="UP"
15
15
TITLE="Appendixes"
26
26
HTTP-EQUIV="Content-Type"
27
27
CONTENT="text/html; charset=ISO-8859-1"><META
28
28
NAME="creation"
29
 
CONTENT="2015-05-19T23:19:49"></HEAD
 
29
CONTENT="2015-10-05T19:31:56"></HEAD
30
30
><BODY
31
31
CLASS="APPENDIX"
32
32
><DIV
44
44
VALIGN="bottom"
45
45
><A
46
46
HREF="index.html"
47
 
>PostgreSQL 9.3.7 Documentation</A
 
47
>PostgreSQL 9.3.10 Documentation</A
48
48
></TH
49
49
></TR
50
50
><TR