-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 11 May 2022 15:15:30 +0200 Source: postgresql-11 Binary: libecpg-compat3 libecpg-compat3-dbgsym libecpg-dev libecpg-dev-dbgsym libecpg6 libecpg6-dbgsym libpgtypes3 libpgtypes3-dbgsym libpq-dev libpq5 libpq5-dbgsym postgresql-11 postgresql-11-dbgsym postgresql-client-11 postgresql-client-11-dbgsym postgresql-plperl-11 postgresql-plperl-11-dbgsym postgresql-plpython-11 postgresql-plpython-11-dbgsym postgresql-plpython3-11 postgresql-plpython3-11-dbgsym postgresql-pltcl-11 postgresql-pltcl-11-dbgsym postgresql-server-dev-11 postgresql-server-dev-11-dbgsym Architecture: i386 Version: 11.16-0+deb10u1 Distribution: buster-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Christoph Berg Description: libecpg-compat3 - older version of run-time library for ECPG programs libecpg-dev - development files for ECPG (Embedded PostgreSQL for C) libecpg6 - run-time library for ECPG programs libpgtypes3 - shared library libpgtypes for PostgreSQL 11 libpq-dev - header files for libpq5 (PostgreSQL library) libpq5 - PostgreSQL C client library postgresql-11 - object-relational SQL database, version 11 server postgresql-client-11 - front-end programs for PostgreSQL 11 postgresql-plperl-11 - PL/Perl procedural language for PostgreSQL 11 postgresql-plpython-11 - PL/Python procedural language for PostgreSQL 11 postgresql-plpython3-11 - PL/Python 3 procedural language for PostgreSQL 11 postgresql-pltcl-11 - PL/Tcl procedural language for PostgreSQL 11 postgresql-server-dev-11 - development files for PostgreSQL 11 server-side programming Changes: postgresql-11 (11.16-0+deb10u1) buster-security; urgency=medium . * New upstream release. . * Confine additional operations within security restricted operation sandboxes (Sergey Shinderuk, Noah Misch) . Autovacuum, CLUSTER, CREATE INDEX, REINDEX, REFRESH MATERIALIZED VIEW, and pg_amcheck activated the security restricted operation protection mechanism too late, or even not at all in some code paths. A user having permission to create non-temporary objects within a database could define an object that would execute arbitrary SQL code with superuser permissions the next time that autovacuum processed the object, or that some superuser ran one of the affected commands against it. . The PostgreSQL Project thanks Alexander Lakhin for reporting this problem. (CVE-2022-1552) Checksums-Sha1: bb796abe5d93170ea2e4d8e9c7dc1a078d50bf5c 16756 libecpg-compat3-dbgsym_11.16-0+deb10u1_i386.deb aaf2f1a69df68a91a7d9a5d45822cf3565630289 21568 libecpg-compat3_11.16-0+deb10u1_i386.deb 386c868ed15d2ab3ce285d73505374e54e222003 228132 libecpg-dev-dbgsym_11.16-0+deb10u1_i386.deb f36ffa1e8d89ea1317c3e9eaa5f8f14d293fb5b1 247492 libecpg-dev_11.16-0+deb10u1_i386.deb b108b561c1d69c548e3346359c7a8e29755b4c55 100300 libecpg6-dbgsym_11.16-0+deb10u1_i386.deb 7d8373139517d093dbe9073f2c93d544f2cd6b90 93128 libecpg6_11.16-0+deb10u1_i386.deb 2bd53b3190f0d389e401d728fb74d8d6ba746d9a 70132 libpgtypes3-dbgsym_11.16-0+deb10u1_i386.deb 01666317bad35610edf58a8f4f6de71f6c8dffb3 45352 libpgtypes3_11.16-0+deb10u1_i386.deb 2ce21150df8afc654cdffe01f324a81ac64a25f7 176388 libpq-dev_11.16-0+deb10u1_i386.deb 67795ad7446061e642e059c6e71d51dd040e9cd6 262688 libpq5-dbgsym_11.16-0+deb10u1_i386.deb 5e705e1ba749bb0e80dc73c0b9ee7ae3ecbb3b38 180100 libpq5_11.16-0+deb10u1_i386.deb e8c3b24aad06b4c0eaf0f03be683c3aaed3ccca5 18214872 postgresql-11-dbgsym_11.16-0+deb10u1_i386.deb 7d36f30baf9ccb9c3c3da59c848af3c224c097a2 16610 postgresql-11_11.16-0+deb10u1_i386-buildd.buildinfo 7b1e15d2b884ef401cbf036138d6f26fad9b58e8 14315264 postgresql-11_11.16-0+deb10u1_i386.deb b5c41f02de529df4f381a0f1698fcaf852a41ef1 1642612 postgresql-client-11-dbgsym_11.16-0+deb10u1_i386.deb 19853bd8d297538c0c939ba0f7e0ae04d713eadf 1424628 postgresql-client-11_11.16-0+deb10u1_i386.deb e306a579aef9767950dd844f64703aa269483d93 235560 postgresql-plperl-11-dbgsym_11.16-0+deb10u1_i386.deb bf69f2feee9f661a16c1533f5cb2ae36c1f65854 73256 postgresql-plperl-11_11.16-0+deb10u1_i386.deb 976f8345099075fd7038150ca9def3276cc5f6ad 289640 postgresql-plpython-11-dbgsym_11.16-0+deb10u1_i386.deb ba85b13b8f9dc1ef5fa22ca438e29b239a216831 63256 postgresql-plpython-11_11.16-0+deb10u1_i386.deb 74ea8ed6b4c8f5f0a618a1f35cc6aac550d4201d 317928 postgresql-plpython3-11-dbgsym_11.16-0+deb10u1_i386.deb 363d7ff9050412253c2f1518fa96ac74951a7f41 78880 postgresql-plpython3-11_11.16-0+deb10u1_i386.deb 88cc15fe1fc97a5dcbf0f4e4a146dc8d3b6013c0 93140 postgresql-pltcl-11-dbgsym_11.16-0+deb10u1_i386.deb 6b347602576b6c4c01020add077962c6cc711196 43424 postgresql-pltcl-11_11.16-0+deb10u1_i386.deb 2cdf8270ea6b7eef9a4e05a11903b480c882a137 90748 postgresql-server-dev-11-dbgsym_11.16-0+deb10u1_i386.deb 0f7770e2760fcea6efcf1fcb7471c4fd3cc2731b 1012092 postgresql-server-dev-11_11.16-0+deb10u1_i386.deb Checksums-Sha256: 53f9ee275ab5822906be22766de3a0b4f7b77318dcd80efa8f69b7a0571d8dca 16756 libecpg-compat3-dbgsym_11.16-0+deb10u1_i386.deb 4eacbcf69bb9ed27ce6280228f24165501f529aa8e4e73876178de33a5309bf7 21568 libecpg-compat3_11.16-0+deb10u1_i386.deb f4c560d699c9c62f2b61627620b89726cdc765dffb0c9e1473970b6f8082f3b0 228132 libecpg-dev-dbgsym_11.16-0+deb10u1_i386.deb 473bb4da28cfe4a1918b2f8d1f134e80d7427824bbf25b9790094ece40f0ea84 247492 libecpg-dev_11.16-0+deb10u1_i386.deb 3975295c97b250d83a16f2e1e0305e6a918006f729ec894c525aef7fd63ccd9a 100300 libecpg6-dbgsym_11.16-0+deb10u1_i386.deb a77b41f5861c53e641d0a034f51622477c21087ff5936501dbb648ee38ba8f77 93128 libecpg6_11.16-0+deb10u1_i386.deb 1b6f8563e5b17d84ae29539c20869bc8f6756b9197e289b50282d83b7259974e 70132 libpgtypes3-dbgsym_11.16-0+deb10u1_i386.deb 93377cf5d429e487f17831fbe22b94d5a46d17d95196839199992c69719b2d6d 45352 libpgtypes3_11.16-0+deb10u1_i386.deb 8c41878291bacf9302fc6cec71534a2abd8ea6c0ee3b186fcd1285ee09a5f944 176388 libpq-dev_11.16-0+deb10u1_i386.deb 31c723af76c5c549b1ccedf84e6d0b545f69495369d291006671c545cf62b3af 262688 libpq5-dbgsym_11.16-0+deb10u1_i386.deb 30988813f19e70c15c4a73c0796eb217aae31077bb8a40bd53355d325c9b5020 180100 libpq5_11.16-0+deb10u1_i386.deb 3d79935d50813d37e8ca67425fd384554b1a252c6e8d2e05c7db10a94d007725 18214872 postgresql-11-dbgsym_11.16-0+deb10u1_i386.deb 19407e28eef057830bdf4da48286610bd77eb680838e8799403607fc18ec51b9 16610 postgresql-11_11.16-0+deb10u1_i386-buildd.buildinfo c7fa8bc51f341bfe1cf5f3ebc283d03ae35592997838fe2caa7b85b8248ada67 14315264 postgresql-11_11.16-0+deb10u1_i386.deb 52df9866a893a57ab7fa0e6be1b9252e41bdcd4b52c392f78cc2a50fd1451b86 1642612 postgresql-client-11-dbgsym_11.16-0+deb10u1_i386.deb 4acb50e2454bf8888f150e1535c4b7886506cebaf2abe80385317ae0ddb701af 1424628 postgresql-client-11_11.16-0+deb10u1_i386.deb f77decd073cb92d7995e3195e359d1009c29fee4071c84388579cb70f4a19b00 235560 postgresql-plperl-11-dbgsym_11.16-0+deb10u1_i386.deb feb9b037fd0dcaa690d3f6bef5c061483673b48aaf6074590d5271f7390aac7c 73256 postgresql-plperl-11_11.16-0+deb10u1_i386.deb acc582676265db77469c1f0149915899318c74e6cd836bba5af76d5e910c4883 289640 postgresql-plpython-11-dbgsym_11.16-0+deb10u1_i386.deb 1971f80648000838e16df159207e8bd4491531d864cfa02a8ff8d7d533452389 63256 postgresql-plpython-11_11.16-0+deb10u1_i386.deb 3afffdd10f89c3e20ffda5277df4a11daceec718b0467339cb5991b13c9dc1f1 317928 postgresql-plpython3-11-dbgsym_11.16-0+deb10u1_i386.deb 68a2f8da25963a7dad8f06977dd64e73de05f36883b30007090f5b8890c5a9a4 78880 postgresql-plpython3-11_11.16-0+deb10u1_i386.deb ba1d7b675cf72a9dbe809cda6070395131110c816c2ec1908100a95e85e4e341 93140 postgresql-pltcl-11-dbgsym_11.16-0+deb10u1_i386.deb 76a56b4a37f24275c0dc923a4d68fc6416885494cdbaf910fe460d156de8baa9 43424 postgresql-pltcl-11_11.16-0+deb10u1_i386.deb 8b8df2b3ab03c3d1fce1d76c01c909a8bf5244a9d995f85ca37f6ecf639ba8a6 90748 postgresql-server-dev-11-dbgsym_11.16-0+deb10u1_i386.deb 0f245e08e71e56261fe3db5bc717a7ba1f07fc255bc6260585e2e0c77eb20a6a 1012092 postgresql-server-dev-11_11.16-0+deb10u1_i386.deb Files: 5e15fa9802d98f733dbe84ee8f048b44 16756 debug optional libecpg-compat3-dbgsym_11.16-0+deb10u1_i386.deb 458b9f9aac93d71b89e4e6f18f86be30 21568 libs optional libecpg-compat3_11.16-0+deb10u1_i386.deb 46ec2706afef47db1c8bf14545109f5e 228132 debug optional libecpg-dev-dbgsym_11.16-0+deb10u1_i386.deb 74c27b158f7d8f47bff32761e4e06da1 247492 libdevel optional libecpg-dev_11.16-0+deb10u1_i386.deb 21aa556e9b1e27e09feb23306b02e9c8 100300 debug optional libecpg6-dbgsym_11.16-0+deb10u1_i386.deb 040fe72cba3c47108ba1d7e1039cc408 93128 libs optional libecpg6_11.16-0+deb10u1_i386.deb 847e323a85da7426e74de28fa978c827 70132 debug optional libpgtypes3-dbgsym_11.16-0+deb10u1_i386.deb 59f01d2b5b14d6d93dea337b1c3fef69 45352 libs optional libpgtypes3_11.16-0+deb10u1_i386.deb 96d4a219a574513e494c62673a33b733 176388 libdevel optional libpq-dev_11.16-0+deb10u1_i386.deb 01120ce0f4627f4aa44d2a0a14c8bc1d 262688 debug optional libpq5-dbgsym_11.16-0+deb10u1_i386.deb bc1acd9bd37b4e61f681786dfba9a655 180100 libs optional libpq5_11.16-0+deb10u1_i386.deb 4f25d0f99b6f749a1e8ac033f7c30d2e 18214872 debug optional postgresql-11-dbgsym_11.16-0+deb10u1_i386.deb 2ebaff9eae053763f628906d2290807b 16610 database optional postgresql-11_11.16-0+deb10u1_i386-buildd.buildinfo 6561d05e6e6d22c0413fe650e48df855 14315264 database optional postgresql-11_11.16-0+deb10u1_i386.deb d0ad33c7301b9110598692ea512a0241 1642612 debug optional postgresql-client-11-dbgsym_11.16-0+deb10u1_i386.deb 4bfe4528450f47374671d0e73189ccf6 1424628 database optional postgresql-client-11_11.16-0+deb10u1_i386.deb 8b3c967588a9d171861091421439725d 235560 debug optional postgresql-plperl-11-dbgsym_11.16-0+deb10u1_i386.deb 306334f1de44bfcf5d9d733019ed3808 73256 database optional postgresql-plperl-11_11.16-0+deb10u1_i386.deb cc3af705c41cb09b93b9879d23ca1109 289640 debug optional postgresql-plpython-11-dbgsym_11.16-0+deb10u1_i386.deb a5bf03269e47470444ec9db839314c54 63256 database optional postgresql-plpython-11_11.16-0+deb10u1_i386.deb 317804bd248897c1d8f793a5e092b9a6 317928 debug optional postgresql-plpython3-11-dbgsym_11.16-0+deb10u1_i386.deb bb617f3b7c1819a419549ba127233799 78880 database optional postgresql-plpython3-11_11.16-0+deb10u1_i386.deb 20b140b4a547ed3e9abb38d7c3ec18cb 93140 debug optional postgresql-pltcl-11-dbgsym_11.16-0+deb10u1_i386.deb dbb901b349ce480c159d41aef07e67e6 43424 database optional postgresql-pltcl-11_11.16-0+deb10u1_i386.deb d87884ce6bd2cc5a19b1ff0308512c4f 90748 debug optional postgresql-server-dev-11-dbgsym_11.16-0+deb10u1_i386.deb a86914a2353a6c328de0c24ea98c8452 1012092 libdevel optional postgresql-server-dev-11_11.16-0+deb10u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2q+i4qaoTi/nmbi10RfxDyMLhSIFAmJ7wysACgkQ0RfxDyML hSLJ5A/+Mz4D87vFmFGiilsRuSngiH5VD5dlTEgTXxwfTjU+OsPwlqqej3bnITdP JrEEkW2m3TToAc1ZoxKp7QJORGDRX5zVkx1iZfZ4LKONpVOQ8QcL32uTL5zh12QW qZowYPKu7HVngEswxEy6ZK2O3DMglMtt27yLyF0lr28TE7k9D+XjbMRZE2jntCnw En6MnWNmbDhX3jLG+5eLtN/Fyc89b38BV2D/QZ83n+zkACuJMHKJM0cl+GcCJ8kJ Lbc3N2/gdbRKXifj2IbIL0K4+FTTiBIJNhHl4O5mIETbq7g1+rTeA5XG/IGZDGSu E+/V3XireVpjaKnR9GH/uXn86VR/75/Qs+UEj1rGJFRAfA8S70SDlclFtcGibJME OE7uZeH3VNg7TfUL/QFfhrsfDNPiewTNRJVIS8S2mc2H0bF56ameUwWPLIuZU652 RoA/kIt6haWRdpmWq7Usaj2pMvX1kO2fNZTRIinYcoAlWb7NdVbStQzokSQxig4Y a/Mx3hmakXLQePUnTAihQ8Pjhxc/pyxm2WHeHsT4gfCkerT716yEjXcAKPTUjvOc 8fGF+S8+goO4aiZgV090NfPV4H2r4L1Ey0UOTBWmaLR3zUzGFoykpo2CkIZI5tvY gfoe7ZIIRiM8B/UzBLXIvJENmafIG0VHJ+fhQk48VckwSz4mD+E= =F6Ss -----END PGP SIGNATURE-----