desktop-packages team mailing list archive

[Launchpad Bug Tracker <1418928@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package postgresql-9.4 - 9.4.1-0ubuntu0.14.10

---------------
postgresql-9.4 (9.4.1-0ubuntu0.14.10) utopic-security; urgency=medium

  * New upstream security/bug fix release (LP: #1418928)
    - Fix buffer overruns in to_char() [CVE-2015-0241]
    - Fix buffer overruns in contrib/pgcrypto [CVE-2015-0243]
    - Fix possible loss of frontend/backend protocol synchronization after an
      error [CVE-2015-0244]
    - Fix information leak via constraint-violation error messages
      [CVE-2014-8161]
    - See release notes for details about other fixes:
      http://www.postgresql.org/about/news/1569/
 -- Martin Pitt <martin.pitt@xxxxxxxxxx>   Fri, 06 Feb 2015 12:31:46 +0100

** Changed in: postgresql-9.1 (Ubuntu Precise)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to postgresql-9.1 in Ubuntu.
https://bugs.launchpad.net/bugs/1418928

Title:
  New upstream microreleases 9.1.15, 9.3.6, 9.4.1

Status in postgresql-8.4 package in Ubuntu:
  Invalid
Status in postgresql-9.1 package in Ubuntu:
  Invalid
Status in postgresql-9.3 package in Ubuntu:
  Invalid
Status in postgresql-9.4 package in Ubuntu:
  Fix Committed
Status in postgresql-8.4 source package in Lucid:
  In Progress
Status in postgresql-9.1 source package in Precise:
  Fix Released
Status in postgresql-9.1 source package in Trusty:
  Fix Released
Status in postgresql-9.3 source package in Trusty:
  Fix Released
Status in postgresql-9.4 source package in Utopic:
  Fix Released
Status in postgresql-9.4 source package in Vivid:
  Fix Committed

Bug description:
  PostgreSQL has released new versions yesterday:
  http://www.postgresql.org/about/news/1569/

  These fix a bunch of security issues, as well as the usual set of bug
  fixes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/postgresql-8.4/+bug/1418928/+subscriptions