postgresql-8.1 8.1.4-7ubuntu0.1 source package in Ubuntu

Changelog

postgresql-8.1 (8.1.4-7ubuntu0.1) edgy-security; urgency=low

  * SECURITY UPDATE: Local DoS.
  * Add debian/patches/00upstream-disable-update-aggregates.patch:
    - Disallow aggregate functions in UPDATE commands (unless within a
      sub-SELECT). It is disallowed by the SQL spec and causes crashes.
    - Patch backported from 8.1.5:
      http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/parser/analyze.c.diff?r1=1.326.2.1&r2=1.326.2.2
    - CVE-2006-5540
  * Add debian/patches/00upstream-duration-logging-crash.patch:
    - Fix crash in duration logging for a V3-protocol Execute message
      when what's being executed is a COMMIT or ROLLBACK.
    - Patch backported from 8.1.5:
      http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/tcop/postgres.c.diff?r1=1.468.2.5&r2=1.468.2.6
    - CVE-2006-5542
  * Add debian/patches/00upstream-unknown-array-coerce.patch:
    - Repair incorrect check for coercion of unknown literal to ANYARRAY,
      which could cause a backend crash.
    - Patch backported from 8.1.5:
      http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/parser/parse_coerce.c.diff?r1=2.132.2.3&r2=2.132.2.4
    - CVE-2006-5541

 -- Martin Pitt <email address hidden>   Mon, 23 Oct 2006 18:21:40 +0200