Quick Links

postgresql-11 updated to version 11.5-1.pgdg+1

From:	apt(dot)postgresql(dot)org Repository Update <noreply(at)postgresql(dot)org>
To:	PostgreSQL on Debian and Ubuntu <pgsql-pkg-debian(at)lists(dot)postgresql(dot)org>
Subject:	postgresql-11 updated to version 11.5-1.pgdg+1
Date:	2019-08-08 12:45:32
Message-ID:	E1hvhnQ-00064q-Dv@atalia.postgresql.org
Views:	Raw Message \| Whole Thread \| Download mbox \| Resend email
Thread:
Lists:	pgsql-pkg-debian

The package postgresql-11 was updated on apt.postgresql.org:

New version 11.5-1.pgdg+1:

Old version 11.4-1.pgdg+1:

apt-listchanges: Changelogs
---------------------------

postgresql-11 (11.5-1.pgdg+1) sid-pgdg; urgency=medium

* Rebuild for sid-pgdg.
* Changes applied by generate-pgdg-source:
+ Enabling cassert.

-- PostgreSQL on Debian and Ubuntu <pgsql-pkg-debian(at)lists(dot)postgresql(dot)org> Wed, 07 Aug 2019 11:36:28 +0200

postgresql-11 (11.5-1) unstable; urgency=medium

* New upstream version.

+ Fixes regression in ALTER TABLE on multiple columns. (Closes: #932247)

+ No longer picks "UCT" as timezone spelling. (Closes: #929953)

+ Require schema qualification to cast to a temporary type when using
functional cast syntax (Noah Misch)

We have long required invocations of temporary functions to explicitly
specify the temporary schema, that is pg_temp.func_name(args). Require
this as well for casting to temporary types using functional notation,
for example pg_temp.type_name(arg). Otherwise it's possible to capture a
function call using a temporary object, allowing privilege escalation in
much the same ways that we blocked in CVE-2007-2138. (CVE-2019-10208)

+ Fix execution of hashed subplans that require cross-type comparison
(Tom Lane, Andreas Seltenreich)

Hashed subplans used the outer query's original comparison operator to
compare entries of the hash table. This is the wrong thing if that
operator is cross-type, since all the hash table entries will be of the
subquery's output type. For the set of hashable cross-type operators in
core PostgreSQL, this mistake seems nearly harmless on 64-bit machines,
but it can result in crashes or perhaps unauthorized disclosure of
server memory on 32-bit machines. Extensions might provide hashable
cross-type operators that create larger risks. (CVE-2019-10209)

* debian/pycompat: Obsolete, remove.
* debian/patches: Add missing patch documentation.
* debian/rules: Use /usr/share/dpkg/pkg-info.mk and vendor.mk for
--with-extra-version.
* debian/*.symbols: Add Build-Depends-Package information.
* debian/tests: Also run regression tests.
* debian/tests/control: Add fakeroot to dependencies.

-- Christoph Berg <myon(at)debian(dot)org> Wed, 07 Aug 2019 11:36:28 +0200

The public mirrors serving apt.postgresql.org are synced hourly,
the updated packages will be available there shortly.

Browse pgsql-pkg-debian by date

	From	Date	Subject
Next Message	apt.postgresql.org Repository Update	2019-08-08 12:45:55	postgresql-10 updated to version 10.10-1.pgdg+1
Previous Message	apt.postgresql.org Repository Update	2019-08-08 12:45:10	postgresql-12 updated to version 12~beta3-1.pgdg+1