← Back to branch summary

~ubuntu-branches/ubuntu/vivid/postgresql-9.4/vivid-updates

« back to all changes in this revision

Viewing changes to doc/src/sgml/html/ecpg-sql-declare.html

  • Committer: Package Import Robot
  • Author(s): Martin Pitt
  • Date: 2015-10-08 15:36:31 UTC
  • mfrom: (1.2.3) (11.1.2 vivid-proposed)
  • Revision ID: package-import@ubuntu.com-20151008153631-dyiutwil2zjh9pxs
Tags: 9.4.5-0ubuntu0.15.04
https://launchpad.net/bugs/1504132
* New upstream security/bug fix release: (LP: #1504132)
  - Guard against stack overflows in json parsing.
    If an application constructs PostgreSQL json or jsonb values from
    arbitrary user input, the application's users can reliably crash the
    PostgreSQL server, causing momentary denial of service.  (CVE-2015-5289)

  - Fix contrib/pgcrypto to detect and report too-short crypt() salts
    Certain invalid salt arguments crashed the server or disclosed a few
    bytes of server memory.  We have not ruled out the viability of attacks
    that arrange for presence of confidential information in the disclosed
    bytes, but they seem unlikely.  (CVE-2015-5288)

  - See release notes for details about other fixes.

Show diffs side-by-side

added added

removed removed

Lines of Context:
doc/src/sgml/html/ecpg-sql-declare.html
9
9
REV="MADE"
10
10
HREF="mailto:pgsql-docs@postgresql.org"><LINK
11
11
REL="HOME"
12
 
TITLE="PostgreSQL 9.4.2 Documentation"
 
12
TITLE="PostgreSQL 9.4.5 Documentation"
13
13
HREF="index.html"><LINK
14
14
REL="UP"
15
15
TITLE="Embedded SQL Commands"
26
26
HTTP-EQUIV="Content-Type"
27
27
CONTENT="text/html; charset=ISO-8859-1"><META
28
28
NAME="creation"
29
 
CONTENT="2015-05-19T23:16:15"></HEAD
 
29
CONTENT="2015-10-05T19:28:19"></HEAD
30
30
><BODY
31
31
CLASS="REFENTRY"
32
32
><DIV
44
44
VALIGN="bottom"
45
45
><A
46
46
HREF="index.html"
47
 
>PostgreSQL 9.4.2 Documentation</A
 
47
>PostgreSQL 9.4.5 Documentation</A
48
48
></TH
49
49
></TR
50
50
><TR
95
95
><DIV
96
96
CLASS="REFNAMEDIV"
97
97
><A
98
 
NAME="AEN47913"
 
98
NAME="AEN47967"
99
99
></A
100
100
><H2
101
101
>Name</H2
103
103
><DIV
104
104
CLASS="REFSYNOPSISDIV"
105
105
><A
106
 
NAME="AEN47916"
 
106
NAME="AEN47970"
107
107
></A
108
108
><H2
109
109
>Synopsis</H2
135
135
><DIV
136
136
CLASS="REFSECT1"
137
137
><A
138
 
NAME="AEN47922"
 
138
NAME="AEN47976"
139
139
></A
140
140
><H2
141
141
>Description</H2
166
166
><DIV
167
167
CLASS="REFSECT1"
168
168
><A
169
 
NAME="AEN47929"
 
169
NAME="AEN47983"
170
170
></A
171
171
><H2
172
172
>Parameters</H2
234
234
><DIV
235
235
CLASS="REFSECT1"
236
236
><A
237
 
NAME="AEN47951"
 
237
NAME="AEN48005"
238
238
></A
239
239
><H2
240
240
>Examples</H2
259
259
><DIV
260
260
CLASS="REFSECT1"
261
261
><A
262
 
NAME="AEN47957"
 
262
NAME="AEN48011"
263
263
></A
264
264
><H2
265
265
>Compatibility</H2
273
273
><DIV
274
274
CLASS="REFSECT1"
275
275
><A
276
 
NAME="AEN47961"
 
276
NAME="AEN48015"
277
277
></A
278
278
><H2
279
279
>See Also</H2