← Back to branch summary

~ubuntu-branches/ubuntu/vivid/postgresql-9.4/vivid-updates

« back to all changes in this revision

Viewing changes to doc/src/sgml/html/release-8-2-17.html

  • Committer: Package Import Robot
  • Author(s): Martin Pitt
  • Date: 2015-10-08 15:36:31 UTC
  • mfrom: (1.2.3) (11.1.2 vivid-proposed)
  • Revision ID: package-import@ubuntu.com-20151008153631-dyiutwil2zjh9pxs
Tags: 9.4.5-0ubuntu0.15.04
https://launchpad.net/bugs/1504132
* New upstream security/bug fix release: (LP: #1504132)
  - Guard against stack overflows in json parsing.
    If an application constructs PostgreSQL json or jsonb values from
    arbitrary user input, the application's users can reliably crash the
    PostgreSQL server, causing momentary denial of service.  (CVE-2015-5289)

  - Fix contrib/pgcrypto to detect and report too-short crypt() salts
    Certain invalid salt arguments crashed the server or disclosed a few
    bytes of server memory.  We have not ruled out the viability of attacks
    that arrange for presence of confidential information in the disclosed
    bytes, but they seem unlikely.  (CVE-2015-5288)

  - See release notes for details about other fixes.

Show diffs side-by-side

added added

removed removed

Lines of Context:
doc/src/sgml/html/release-8-2-17.html
9
9
REV="MADE"
10
10
HREF="mailto:pgsql-docs@postgresql.org"><LINK
11
11
REL="HOME"
12
 
TITLE="PostgreSQL 9.4.2 Documentation"
 
12
TITLE="PostgreSQL 9.4.5 Documentation"
13
13
HREF="index.html"><LINK
14
14
REL="UP"
15
15
TITLE="Release Notes"
26
26
HTTP-EQUIV="Content-Type"
27
27
CONTENT="text/html; charset=ISO-8859-1"><META
28
28
NAME="creation"
29
 
CONTENT="2015-05-19T23:16:15"></HEAD
 
29
CONTENT="2015-10-05T19:28:19"></HEAD
30
30
><BODY
31
31
CLASS="SECT1"
32
32
><DIV
44
44
VALIGN="bottom"
45
45
><A
46
46
HREF="index.html"
47
 
>PostgreSQL 9.4.2 Documentation</A
 
47
>PostgreSQL 9.4.5 Documentation</A
48
48
></TH
49
49
></TR
50
50
><TR
93
93
CLASS="SECT1"
94
94
><A
95
95
NAME="RELEASE-8-2-17"
96
 
>E.115. Release 8.2.17</A
 
96
>E.130. Release 8.2.17</A
97
97
></H1
98
98
><DIV
99
99
CLASS="NOTE"
110
110
   For information about new features in the 8.2 major release, see
111
111
   <A
112
112
HREF="release-8-2.html"
113
 
>Section E.132</A
 
113
>Section E.147</A
114
114
>.
115
115
  </P
116
116
><DIV
118
118
><H2
119
119
CLASS="SECT2"
120
120
><A
121
 
NAME="AEN142542"
122
 
>E.115.1. Migration to Version 8.2.17</A
 
121
NAME="AEN144205"
 
122
>E.130.1. Migration to Version 8.2.17</A
123
123
></H2
124
124
><P
125
125
>    A dump/restore is not required for those running 8.2.X.
126
126
    However, if you are upgrading from a version earlier than 8.2.14,
127
127
    see <A
128
128
HREF="release-8-2-14.html"
129
 
>Section E.118</A
 
129
>Section E.133</A
130
130
>.
131
131
   </P
132
132
></DIV
135
135
><H2
136
136
CLASS="SECT2"
137
137
><A
138
 
NAME="AEN142546"
139
 
>E.115.2. Changes</A
 
138
NAME="AEN144209"
 
139
>E.130.2. Changes</A
140
140
></H2
141
141
><P
142
142
></P