postgresql-7.4 1:7.4.13-3 source package in Ubuntu

Changelog

postgresql-7.4 (1:7.4.13-3) unstable; urgency=medium

  * debian/rules: Do not completely fail the build when the test suite fails,
    so that mips and mipsel at least get the client side packages.
  * debian/control: Do not build the server-related packags on mips and
    mipsel.

postgresql-7.4 (1:7.4.13-2) unstable; urgency=medium

  * Add debian/libpq3.shlibs and bump it to >= 7.4.13, to respect the
    introduction of PQescapeStringConn() and PQescapeByteaConn().
  * debian/postgresql-7.4.postrm, clean_dir(): Do not use rmdir's
    --ignore-fail-on-nonempty, since that still falls apart when the
    directory is a mountpoint. Just ignore errors.

postgresql-7.4 (1:7.4.13-1) unstable; urgency=medium

  * New upstream security and bug fix release:
    - The server now rejects invalidly-encoded multibyte characters in all
      cases to defend against SQL-injection attacks. [CVE-2006-2313]
    - Reject unsafe uses of \' in string literals (for client encodings that
      allow SQL injection with this, like SJIS, BIG5, GBK, GB18030, or UHC). A
      new configuration parameter backslash_quote is available to adjust this
      behavior when needed. [CVE-2006-2314]
    - Modify libpq's string-escaping routines to be aware of encoding
      considerations and standard_conforming_strings
      This fixes libpq-using applications for the security issues
      described in CVE-2006-2313 and CVE-2006-2314, and also
      future-proofs them against the planned changeover to SQL-standard
      string literal syntax. Applications that use multiple PostgreSQL
      connections concurrently should migrate to PQescapeStringConn() and
      PQescapeByteaConn() to ensure that escaping is done correctly for
      the settings in use in each database connection. Applications that
      do string escaping "by hand" should be modified to rely on library
      routines instead.
    - Various bug fixes, see upstream changelog for details.

postgresql-7.4 (1:7.4.12-4) unstable; urgency=low

  * Bump Standards-Version.
  * debian/rules: Remove --as-needed linker option again since it now causes
    an FTBFS. Closes: #366828

 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  15 Jun 2006 15:22:06 +0100