Login
Newsletter
Werbung

Sicherheit: Ausführen beliebigen Codes in postgresql
Aktuelle Meldungen Distributionen
Name: Ausführen beliebigen Codes in postgresql
ID: DSA-667-1
Distribution: Debian
Plattformen: Debian woody
Datum: Fr, 4. Februar 2005, 12:00
Referenzen: Keine Angabe
Applikationen: PostgreSQL

Originalnachricht

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

--------------------------------------------------------------------------
Debian Security Advisory DSA 667-1 security@debian.org
http://www.debian.org/security/ Martin Schulze
February 4th, 2005 http://www.debian.org/security/faq
--------------------------------------------------------------------------

Package : postgresql
Vulnerability : privilege escalation
Problem-Type : local
Debian-specific: no
Debian Bug : 293125

John Heasman and others discovered a bug in the PostgreSQL engine
which would allow any user load an arbitrary local library into it.

For the stable distribution (woody) this problem has been fixed in
version 7.2.1-2woody7.

For the unstable distribution (sid) this problem has been fixed in
version 7.4.7-1.

We recommend that you upgrade your postgresql packages.


Upgrade Instructions
--------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
--------------------------------

Source archives:

postgresql_7.2.1-2woody7.dsc
Size/MD5 checksum: 966 f0e632eca84a8dc7ccf663ce571d935b
postgresql_7.2.1-2woody7.diff.gz
Size/MD5 checksum: 120062 c30b6def44d0577bf680fde58e049429
postgresql_7.2.1.orig.tar.gz
Size/MD5 checksum: 9237680 d075e9c49135899645dff57bc58d6233

Architecture independent components:

postgresql-doc_7.2.1-2woody7_all.deb
Size/MD5 checksum: 2069418 36c13fc68083fc01b0f64c149d572bba

Alpha architecture:

libecpg3_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 34630 483d241a73966f97d0850454cfb92984
libpgperl_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 68600 985702d5989fa3b5abeea6f123c31639
libpgsql2_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 77876 ce5502604111b4253fecd38152d426c6
libpgtcl_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 67584 efa009f9d16fd19eb2468f44c099ba83
odbc-postgresql_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 290216 7c3753fb005d38b71ca3304d34c7b83c
pgaccess_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 425310 5a9529efef252dd0353ac1dc254bfba2
postgresql_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 1817138 706a3b7670e6ccc2cac7975c669de4dc
postgresql-client_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 319778 267f0a56b9de369672a0bdb5806fed33
postgresql-contrib_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 387442 ea1d55a7754d55037f3f46912ee295cb
postgresql-dev_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 541114 6230f90f5f58e43cf9d4680e830d4d3b
python-pygresql_7.2.1-2woody7_alpha.deb
Size/MD5 checksum: 65256 3386537a67b2f71038c9adda4bc3f384

ARM architecture:

libecpg3_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 31734 2422fa3ff19b94e999746553be02bffa
libpgperl_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 64734 81edb1c140c714a4cb3facab31bb7b06
libpgsql2_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 65588 668bc2f46bd474be5353301b2ed0ca55
libpgtcl_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 57810 d0632831844a4ec1a8b7ba9020cd8491
odbc-postgresql_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 234156 293f08e24f862f61389d34dbab6f6db5
pgaccess_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 425482 dff065e50e3ed37a23206f0f27d49e00
postgresql_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 1600028 e7f7dabe4c7064c1e288008d6712898a
postgresql-client_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 285472 766ef0e3c683e3bfc5de0bc77be9ceb9
postgresql-contrib_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 341006 48f1af2001bb21e366d2617af379cc34
postgresql-dev_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 510938 7d18f91205535447d9ba52c0d0e5eed6
python-pygresql_7.2.1-2woody7_arm.deb
Size/MD5 checksum: 62510 7dd350bf1e39986f4d92c71c5906feaa

Intel IA-32 architecture:

libecpg3_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 30796 f51c824e072dbd84895ab2d8b519a261
libpgperl_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 61496 e40502f1941385a9a1b18b7cfe069836
libpgsql2_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 66114 318d84476b6e732c382ace91256dc317
libpgtcl_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 54684 cedd2942c29cd6e0a9c6bd7940b3cb06
odbc-postgresql_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 201972 ea179c8fada580252a787b401b745939
pgaccess_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 426388 53d0e0e8e22ffe2a465fbacad99fd8a3
postgresql_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 1554222 5e88b7d4921e950cf08a84af035fe62c
postgresql-client_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 281370 b9f6bcbe463b6b168d4621f0e80c0340
postgresql-contrib_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 328350 e1b936b0195af990a8fc1018bda6d0df
postgresql-dev_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 498132 3fa5be35f0f43ea1435dcde6187ce95f
python-pygresql_7.2.1-2woody7_i386.deb
Size/MD5 checksum: 61610 8545aef6fc29efedd0679ca375a16545

Intel IA-64 architecture:

libecpg3_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 39484 91709279d47f143e52a8e849a7b96b0d
libpgperl_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 77352 0d19809ac8c1bb678a1ebdb198b9a5fd
libpgsql2_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 90672 c1a4a56d8a3401ef7a3f030703270d1f
libpgtcl_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 77160 af2fb2d42f5c90d3e2ba58344af0af88
odbc-postgresql_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 333240 546f6df66243fcc96725670e1612f435
pgaccess_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 425290 8d0f1d16b707d4c9731cbb652f251059
postgresql_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 2092570 f37b91e6bdd078c48e1e1c2b015f3e35
postgresql-client_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 363522 e9b3ba891e796888fb99f75afcb5fd4d
postgresql-contrib_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 434770 6dcd3d9ea293b62ae7b3e35b8e7fa167
postgresql-dev_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 555134 ca8de3ef0926f1ea8367d0d084d5bd8d
python-pygresql_7.2.1-2woody7_ia64.deb
Size/MD5 checksum: 71132 3edc85b0ca26b05176c174673d5b0d8e

HP Precision architecture:

libecpg3_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 33950 47c496c15c9d2449cbafec1569c9f102
libpgperl_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 70600 69de05e4bbc5627e852de641884c677f
libpgsql2_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 77052 11612c26b79cecf3bae2860c0bb83180
libpgtcl_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 65786 bce0452b20f33c9eb4f3420c7f9be0a9
odbc-postgresql_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 254744 7c47c03f90d3ba4e612e8b8588f074f0
pgaccess_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 425430 2ee89e5b948c47930251e77163ea6627
postgresql_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 1826326 9bf3e158db6c78ac2f1f46ecdcc9fc0e
postgresql-client_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 304756 5159aa55d8aab2872ca45876542ca8e0
postgresql-contrib_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 372112 0457c98c52e96fe055f3ce5d367f8acb
postgresql-dev_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 524296 84b0dd41003736ed316d9b86b3a23741
python-pygresql_7.2.1-2woody7_hppa.deb
Size/MD5 checksum: 66314 200deb862e44b22cbf10c49aba0cff3f

Motorola 680x0 architecture:

libecpg3_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 30640 fa0cf834ec655b023749a129f73f864e
libpgperl_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 63094 8e9c7152b3dab7ae8c30918f7f1d5d41
libpgsql2_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 65716 8f3a153938659d7abf70701fb7740602
libpgtcl_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 54856 819641676a66dd170a4fbae4765ce54c
odbc-postgresql_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 187530 18daa6b39e18a0932e5242c1ff459e9e
pgaccess_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 425542 e094dab1b419b4f1b32830f8faf606d9
postgresql_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 1583750 cff1201124d70f31c2fbec0b1463ecf4
postgresql-client_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 269968 71d2e7a1660a922a02eff21722db8da9
postgresql-contrib_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 325256 f78de94aa126edad0b3e5fb5be9aa7d5
postgresql-dev_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 489962 5d37d31cf89b0d6268227b46f58e4df9
python-pygresql_7.2.1-2woody7_m68k.deb
Size/MD5 checksum: 62352 c8eec335d07bdac7f0dc840996ec78d7

Big endian MIPS architecture:

libecpg3_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 31110 76e1f6e67677d454ca95142fc80c9dec
libpgperl_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 59072 91e4168ca3b4a27e90b2e457e885b223
libpgsql2_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 65352 3d8491afa5544e70aa3b038ea03afd2f
libpgtcl_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 59218 135c36c13704f43c5fe90bd7f3b2cc10
odbc-postgresql_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 237408 32495ab044982cfb98202042cab0d489
pgaccess_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 425528 0c30d17b2b85b997b9dd6f07c02186c7
postgresql_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 1750692 eb325cb5f1190ecf2dca08249611fab6
postgresql-client_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 294244 bcde12fd1de742c7d9988f2d1673116f
postgresql-contrib_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 343984 9e2ef48f7c0124c43cbd4b9949ed3d01
postgresql-dev_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 515552 c7c73c4072fd5479a08c88adf6b41f20
python-pygresql_7.2.1-2woody7_mips.deb
Size/MD5 checksum: 61634 73aa940ed00a79cbe49253654be0ddb7

Little endian MIPS architecture:

libecpg3_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 31110 960c883f0b3a3a65b32525edd2049210
libpgperl_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 58836 a9549eff3063f181bf0bf71143da8580
libpgsql2_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 64946 c23afa93130e377efa40344838cd4003
libpgtcl_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 59154 ab2a27982b6d5871f4331e0ba1fb1b4a
odbc-postgresql_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 237804 57181cae8777f5bde467442e982f7775
pgaccess_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 425436 df3d406355f9482dececfb7db0a4387c
postgresql_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 1662292 120ea8b6db727d6227f012e1ea4380e4
postgresql-client_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 294538 4e2a54ab0d8c458e26ed4a37a6afd4c4
postgresql-contrib_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 343658 c71895e4304098d340d9ca98086d62e2
postgresql-dev_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 512706 fb26e492b05e9ad3d395fedaccdbe95d
python-pygresql_7.2.1-2woody7_mipsel.deb
Size/MD5 checksum: 61572 aa9decf802f3d49f161b09316b738892

PowerPC architecture:

libecpg3_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 32460 6c6f1c52f7faa3dc8436a6618433af73
libpgperl_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 69548 840b150e06902624b924b6a68c412946
libpgsql2_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 67560 1931357e267077a0a7ec45a4981af93b
libpgtcl_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 57092 a9265dfd0a3e2bf37afe2c8a743e3c69
odbc-postgresql_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 242980 b84eaa0b59860700234d680ce27da171
pgaccess_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 425320 fa14d5c0e83dc99aa31d92c1871d02f9
postgresql_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 1700960 04b8c5d729a2d9ebc48c2c9b9a86416e
postgresql-client_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 288562 c0f88fff4c554db0bbb7a9a2b7db855c
postgresql-contrib_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 341986 ac3985d4bb650773b4c4bcd26c38b6ac
postgresql-dev_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 511138 8ccf050d13b09b24beb4d49182ba68ad
python-pygresql_7.2.1-2woody7_powerpc.deb
Size/MD5 checksum: 62462 06f6f82a1d818697ebcab3333e4db51a

IBM S/390 architecture:

libecpg3_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 31392 c241f392f669c60c19a2517e8d23a809
libpgperl_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 63928 b5df157f48b39c16e19e201a48d799fc
libpgsql2_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 68176 37c56dff44289ffb52877754ca85e59f
libpgtcl_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 56368 48d67531ad43d52057645c9a69a54f65
odbc-postgresql_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 214642 c68ff70612be4a4eea113c16622f76dc
pgaccess_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 425350 3bd114c5aaf133879235ebcb80d45073
postgresql_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 1669146 e50d2c036166a8b2635df49ed9ad0c4b
postgresql-client_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 284330 6a4aec02cee7c82868a93f432f9bf0cf
postgresql-contrib_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 347054 3f61a641e3a2cd4464c4498aa9c65f8e
postgresql-dev_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 502202 09ac72ca7d84ace847e68e86eac6e484
python-pygresql_7.2.1-2woody7_s390.deb
Size/MD5 checksum: 62960 11282d28580ad598e8d4aae06138e054

Sun Sparc architecture:

libecpg3_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 31046 b6c7ec914e6b04135db22b2fbc65e637
libpgperl_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 64748 cd0f79759e29c6a682c9b5ff2b9914ba
libpgsql2_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 68300 ea2496d35688240c02293bdcc20b89ee
libpgtcl_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 55182 116ce2c74f164d89abd6784198b60ab3
odbc-postgresql_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 232732 189fdf009ac98dca50b1b2a62cbb545a
pgaccess_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 425338 233f8409cbc6f801b9a59b3e9ac97cf1
postgresql_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 1671692 563ef6b8ccc1b78e6e9451798ad2cd1a
postgresql-client_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 288968 dc0ab5a439f5751801738888d62e6b6d
postgresql-contrib_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 371308 79c8f8616a858d252327b205e967fe4d
postgresql-dev_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 502280 2f091a2762593cf55abce08271ebcfe3
python-pygresql_7.2.1-2woody7_sparc.deb
Size/MD5 checksum: 62524 92d630dc4f7b97f25a6b09980d2b91ed


These files will probably be moved into the stable distribution on
its next update.

--------------------------------------------------------------------------------
-
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-securitydists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCA6ruW5ql+IAeqTIRAv5OAJ45l1xKg2Nuz44xN6ekZQXDxxX4SQCgpntw
WdIjGbP1xNfGZBlwICHxwb4=
=iTMe
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung