Your message dated Tue, 14 Jun 2005 21:37:45 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Bug#313608: fixed in postgresql-7.4 1:7.4.8-9
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 14 Jun 2005 15:38:25 +0000
>From [EMAIL PROTECTED] Tue Jun 14 08:38:25 2005
Return-path: <[EMAIL PROTECTED]>
Received: from mail.enyo.de [212.9.189.167]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DiDUf-0008Ho-00; Tue, 14 Jun 2005 08:38:25 -0700
Received: from deneb.enyo.de ([2001:14b0:202:1::ab])
by albireo.enyo.de with esmtp id 1DiDUe-0003u5-8Q
for [EMAIL PROTECTED]; Tue, 14 Jun 2005 17:38:24 +0200
Received: from fw by deneb.enyo.de with local (Exim 4.50)
id 1DiDUb-0002lM-EE; Tue, 14 Jun 2005 17:38:21 +0200
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Florian Weimer <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: libpq3: looks for server socket in /tmp
X-Mailer: reportbug 3.12
Date: Tue, 14 Jun 2005 17:38:21 +0200
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: libpq3
Version: 7.4.8-8
Severity: grave
Tags: security
Justification: user security hole
This version of libpq3 looks for the server socket in /tmp, breaking
existing configurations and introducing a security problem.
$ strings -a /usr/lib/libpq.so.3 | grep tmp
SSL_CTX_set_verify_depth
SSL_CTX_set_tmp_dh_callback
SSL_CTX_ctrl
--
invalid sslmode value: "%s"
/tmp
%s/.s.PGSQL.%d
---------------------------------------
Received: (at 313608-done) by bugs.debian.org; 14 Jun 2005 19:38:12 +0000
>From [EMAIL PROTECTED] Tue Jun 14 12:38:11 2005
Return-path: <[EMAIL PROTECTED]>
Received: from mail01.pironet-ndh.com (mail02.pironet-ndh.com) [194.64.31.10]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DiHEh-0002pf-00; Tue, 14 Jun 2005 12:38:11 -0700
Received: from mail.fbn-dd.de (mail.fbn-dd.de [195.227.105.178])
by mail02.pironet-ndh.com (Postfix) with ESMTP id 1C9B84FAFF3
for <[EMAIL PROTECTED]>; Tue, 14 Jun 2005 21:37:40 +0200 (CEST)
Received: from sonne.intranet.fbn-dd.de
(192-168-0-1.transfer-000.intranet.fbn-dd.de [192.168.0.1])
by mail.fbn-dd.de (Postfix) with ESMTP id 340F326384
for <[EMAIL PROTECTED]>; Tue, 14 Jun 2005 21:37:40 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by sonne.intranet.fbn-dd.de (Postfix) with ESMTP id D5CFF1FAB7
for <[EMAIL PROTECTED]>; Tue, 14 Jun 2005 21:37:39 +0200 (CEST)
Received: from sonne.intranet.fbn-dd.de (localhost [127.0.0.1])
by localhost (AvMailGate-2.0.1.16) id 25660-13ACA519;
Tue, 14 Jun 2005 21:37:39 +0200
Received: from localhost.localdomain (10-28-130-200.intranet-28-130.fbn-dd.de
[10.28.130.200])
by sonne.intranet.fbn-dd.de (Postfix) with ESMTP id 908D51FAB7
for <[EMAIL PROTECTED]>; Tue, 14 Jun 2005 21:37:39 +0200 (CEST)
Received: by localhost.localdomain (Postfix, from userid 1000)
id 103991938A; Tue, 14 Jun 2005 21:37:45 +0200 (CEST)
Date: Tue, 14 Jun 2005 21:37:45 +0200
From: Martin Pitt <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Bug#313608: fixed in postgresql-7.4 1:7.4.8-9
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="XMCwj5IQnwKtuyBG"
Content-Disposition: inline
User-Agent: Mutt/1.5.9i
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.16; AVE: 6.31.0.5;
VDF: 6.31.0.55; host: sonne)
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
--XMCwj5IQnwKtuyBG
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hi!
This bug was fixed in the recent postgresql-7.4 upload. Unfortunately
the changelog had a typo, so I close this bug manually.
postgresql-7.4 (1:7.4.8-9) unstable; urgency=3Dlow
.
* debian/rules: Fix POT file generation.
* Added debian/patches/16_libpq_defaultsocketdir.patch:
- Set default socket directory for libpq to /var/run/postgresql.
Closes: #303608
* Added debian/patches/17_garbage_error_messages.patch:
- src/port/thread.c: Return NULL instead of uninitialized buffer if
strerror_r() fails.
- This fixes garbage error messages on failed connections.
Closes: #264603, #277757
- Backported from 8.0 tree.
Thanks for the report,
Martin
--=20
Martin Pitt http://www.piware.de
Ubuntu Developer http://www.ubuntu.com
Debian Developer http://www.debian.org
--XMCwj5IQnwKtuyBG
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFCrzIIDecnbV4Fd/IRAidRAKDgjRnDdUX6X4v0BZXjV71fptbTkwCdG21H
zvolLXMAnwZYRxAQ4MKCuKE=
=00+o
-----END PGP SIGNATURE-----
--XMCwj5IQnwKtuyBG--
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
