postgresql-13 13.2-1 source package in Ubuntu
Changelog
postgresql-13 (13.2-1) unstable; urgency=medium * New upstream version. + Fix failure to check per-column SELECT privileges in some join queries (Tom Lane) In some cases involving joins, the parser failed to record all the columns read by a query in the column-usage bitmaps that are used for permissions checking. Although the executor would still insist on some sort of SELECT privilege to run the query, this meant that a user having SELECT privilege on only one column of a table could nonetheless read all its columns through a suitably crafted query. A stored view that is subject to this problem will have incomplete column-usage bitmaps, and thus permissions will still not be enforced properly on the view after updating. In installations that depend on column-level permissions for security, it is recommended to CREATE OR REPLACE all user-defined views to cause them to be re-parsed. The PostgreSQL Project thanks Sven Klemm for reporting this problem. (CVE-2021-20229) + Fix information leakage in constraint-violation error messages (Heikki Linnakangas) If an UPDATE command attempts to move a row to a different partition but finds that it violates some constraint on the new partition, and the columns in that partition are in different physical positions than in the parent table, the error message could reveal the contents of columns that the user does not have SELECT privilege on. (CVE-2021-3393) + Fix incorrect detection of concurrent page splits while inserting into a GiST index (Heikki Linnakangas) Concurrent insertions could lead to a corrupt index with entries placed in the wrong pages. It's recommended to reindex any GiST index that's been subject to concurrent insertions. + Fix CREATE INDEX CONCURRENTLY to wait for concurrent prepared transactions (Andrey Borodin) At the point where CREATE INDEX CONCURRENTLY waits for all concurrent transactions to complete so that it can see rows they inserted, it must also wait for all prepared transactions to complete, for the same reason. Its failure to do so meant that rows inserted by prepared transactions might be omitted from the new index, causing queries relying on the index to miss such rows. In installations that have enabled prepared transactions (max_prepared_transactions > 0), it's recommended to reindex any concurrently-built indexes in case this problem occurred when they were built. [ Christoph Berg ] * Remove obsolete --enable-integer-datetimes configure option. (Closes: #974988) * Modernize server package description. * Use xsltproc --nonet. * run-testsuite: Test only this version. [ Helmut Grohne ] * Reduce Build-Depends: (Closes: #979456) + gdb is only used for testing. -- Christoph Berg <email address hidden> Wed, 10 Feb 2021 17:33:55 +0100
Upload details
- Uploaded by:
- Debian PostgreSQL Maintainers
- Uploaded to:
- Sid
- Original maintainer:
- Debian PostgreSQL Maintainers
- Architectures:
- any all
- Section:
- misc
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
postgresql-13_13.2-1.dsc | 3.5 KiB | 87b5a1a4b184705f3d8ef6d044269a1e427329e55fdc76816c3b97a4cb4a626e |
postgresql-13_13.2.orig.tar.bz2 | 20.1 MiB | 5fd7fcd08db86f5b2aed28fcfaf9ae0aca8e9428561ac547764c2a2b0f41adfc |
postgresql-13_13.2-1.debian.tar.xz | 26.7 KiB | 6429343f55d95a51232d2fab9473491735a5803086591beb3ffe0848cdfc70f5 |
Available diffs
No changes file available.
Binary packages built by this source
- libecpg-compat3: No summary available for libecpg-compat3 in ubuntu impish.
No description available for libecpg-compat3 in ubuntu impish.
- libecpg-compat3-dbgsym: No summary available for libecpg-compat3-dbgsym in ubuntu hirsute.
No description available for libecpg-
compat3- dbgsym in ubuntu hirsute.
- libecpg-dev: No summary available for libecpg-dev in ubuntu hirsute.
No description available for libecpg-dev in ubuntu hirsute.
- libecpg-dev-dbgsym: No summary available for libecpg-dev-dbgsym in ubuntu hirsute.
No description available for libecpg-dev-dbgsym in ubuntu hirsute.
- libecpg6: No summary available for libecpg6 in ubuntu hirsute.
No description available for libecpg6 in ubuntu hirsute.
- libecpg6-dbgsym: No summary available for libecpg6-dbgsym in ubuntu hirsute.
No description available for libecpg6-dbgsym in ubuntu hirsute.
- libpgtypes3: No summary available for libpgtypes3 in ubuntu hirsute.
No description available for libpgtypes3 in ubuntu hirsute.
- libpgtypes3-dbgsym: No summary available for libpgtypes3-dbgsym in ubuntu hirsute.
No description available for libpgtypes3-dbgsym in ubuntu hirsute.
- libpq-dev: No summary available for libpq-dev in ubuntu hirsute.
No description available for libpq-dev in ubuntu hirsute.
- libpq5: No summary available for libpq5 in ubuntu hirsute.
No description available for libpq5 in ubuntu hirsute.
- libpq5-dbgsym: No summary available for libpq5-dbgsym in ubuntu impish.
No description available for libpq5-dbgsym in ubuntu impish.
- postgresql-13: No summary available for postgresql-13 in ubuntu impish.
No description available for postgresql-13 in ubuntu impish.
- postgresql-13-dbgsym: No summary available for postgresql-13-dbgsym in ubuntu impish.
No description available for postgresql-
13-dbgsym in ubuntu impish.
- postgresql-client-13: No summary available for postgresql-client-13 in ubuntu hirsute.
No description available for postgresql-
client- 13 in ubuntu hirsute.
- postgresql-client-13-dbgsym: No summary available for postgresql-client-13-dbgsym in ubuntu impish.
No description available for postgresql-
client- 13-dbgsym in ubuntu impish.
- postgresql-doc-13: No summary available for postgresql-doc-13 in ubuntu hirsute.
No description available for postgresql-doc-13 in ubuntu hirsute.
- postgresql-plperl-13: No summary available for postgresql-plperl-13 in ubuntu hirsute.
No description available for postgresql-
plperl- 13 in ubuntu hirsute.
- postgresql-plperl-13-dbgsym: No summary available for postgresql-plperl-13-dbgsym in ubuntu impish.
No description available for postgresql-
plperl- 13-dbgsym in ubuntu impish.
- postgresql-plpython3-13: No summary available for postgresql-plpython3-13 in ubuntu hirsute.
No description available for postgresql-
plpython3- 13 in ubuntu hirsute.
- postgresql-plpython3-13-dbgsym: No summary available for postgresql-plpython3-13-dbgsym in ubuntu impish.
No description available for postgresql-
plpython3- 13-dbgsym in ubuntu impish.
- postgresql-pltcl-13: No summary available for postgresql-pltcl-13 in ubuntu hirsute.
No description available for postgresql-pltcl-13 in ubuntu hirsute.
- postgresql-pltcl-13-dbgsym: No summary available for postgresql-pltcl-13-dbgsym in ubuntu hirsute.
No description available for postgresql-
pltcl-13- dbgsym in ubuntu hirsute.
- postgresql-server-dev-13: No summary available for postgresql-server-dev-13 in ubuntu hirsute.
No description available for postgresql-
server- dev-13 in ubuntu hirsute.