Package: postgresql
Version: 7.4.6-7
Severity: grave
Tags: security
Justification: user security hole

Upstream has released new versions because of the LOAD security hole:

  <http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php>
  <http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php>

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (800, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11-rc1fw
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages postgresql depends on:
ii  adduser          3.59                    Add and remove users and groups
ii  debconf [debconf 1.4.42                  Debian configuration management sy
ii  debianutils      2.11.2                  Miscellaneous utilities specific t
ii  libc6            2.3.2.ds1-20            GNU C Library: Shared libraries an
ii  libcomerr2       1.36rc2-1               common error description library
ii  libkrb53         1.3.6-1                 MIT Kerberos runtime libraries
ii  libpam0g         0.76-22                 Pluggable Authentication Modules l
ii  libperl5.8       5.8.4-5                 Shared Perl library
ii  libpq3           7.4.6-6                 PostgreSQL C client library
ii  libreadline4     4.3-15                  GNU readline and history libraries
ii  libssl0.9.7      0.9.7e-3                SSL shared libraries
ii  mailx            1:8.1.2-0.20040524cvs-4 A simple mail user agent
pn  postgresql-clien                         Not found.
ii  procps           1:3.2.4-1               The /proc file system utilities
ii  python2.3        2.3.4-19                An interactive high-level object-o
ii  ucf              1.13                    Update Configuration File: preserv
ii  zlib1g           1:1.2.2-4               compression library - runtime


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to