Debian Security Advisory DSA 516-1                     security@debian.org 
Debian -- Security Information                              Martin Schulze
June 7th, 2004                           Debian -- Debian security FAQ 
- --------------------------------------------------------------------------

Package        : postgresql
Vulnerability  : buffer overflow
Problem-Type   : remote
Debian-specific: no
Debian Bug     : 247306

A buffer overflow has been discovered in the ODBC driver of PostgreSQL,
an object-relational SQL database, descended from POSTGRES.  It possible
to exploit this problem and crash the surrounding application.  Hence, a
PHP script using php4-odbc can be utilised to crash the surrounding
Apache webserver.  Other parts of postgresql are not affected.

For the stable distribution (woody) this problem has been fixed in
version 7.2.1-2woody5.

For the unstable distribution (sid) this problem has been fixed in
version 07.03.0200-3.

We recommend that you upgrade your postgresql and related package.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
- --------------------------------

  Source archives:

      
      Size/MD5 checksum:      966 5368a43179ff119d6f3672f682b04509
      
      Size/MD5 checksum:   119120 7d29337cef51b081628d3cd04faa7cb7
      
      Size/MD5 checksum:  9237680 d075e9c49135899645dff57bc58d6233

  Architecture independent components:

      
      Size/MD5 checksum:  2069080 d9ddbbc2c098d0c78a738954a52e523b

  Alpha architecture:

      
      Size/MD5 checksum:    34192 b2369d209179d36e571e766de1c4debf
      
      Size/MD5 checksum:    68246 1f3ed9f2ae78a6e2f78c9172468cbb00
      
      Size/MD5 checksum:    77486 45b4c9858e434f7498e06861c31244ee
      
      Size/MD5 checksum:    67192 86069f65ea21ac186b095e5b39ee617c
      
      Size/MD5 checksum:   290676 0302910a2a30ccf1b025d599afc67d73
      
      Size/MD5 checksum:   424930 450f68f0e2431ab84407d13d4135a654
      
      Size/MD5 checksum:  1816756 0f3a5117737c7b524fc1225625e9edf8
      
      Size/MD5 checksum:   319386 93d92c5baddf51443a442742e81fe80e
      
      Size/MD5 checksum:   387022 afe210d301c0dc068cd139471dad0065
      
      Size/MD5 checksum:   539998 227f24b4270a896b22eabda5e6d7cc36
      
      Size/MD5 checksum:    64816 7d98b12889dc8321c66fa0ee5124ee69

  ARM architecture:

      
      Size/MD5 checksum:    31348 4330dc495f966421871537aa10d4e07c
      
      Size/MD5 checksum:    64346 8a64191cd13adb62611bb9857b4f53da
      
      Size/MD5 checksum:    65206 b2024d757f86f18a0e185e3867d1fff9
      
      Size/MD5 checksum:    57410 b50b60d6afb66faa215f2fa2ef62392f
      
      Size/MD5 checksum:   233770 0e5b396f4c2a69c505b2e590aaf428fc
      
      Size/MD5 checksum:   425100 04af51b56fa997228f31051a2603db1d
      
      Size/MD5 checksum:  1599718 4db2ed86401a501cb580540318bbf118
      
      Size/MD5 checksum:   285080 7d048275487b2a24449d68c5b42aaff8
      
      Size/MD5 checksum:   340576 60aa01340e65d6bb4ff6011a830ec523
      
      Size/MD5 checksum:   510608 9fefe99929d22bebd27d3e92136a3e53
      
      Size/MD5 checksum:    62132 1808a3bab6f020f07058c3fc8b6bfcb1

  Intel IA-32 architecture:

      
      Size/MD5 checksum:    30404 248ae4c61f0324a48e5920474ed3aab1
      
      Size/MD5 checksum:    61100 dbcd9960dc7f123ef7490cb699fa3cab
      
      Size/MD5 checksum:    65720 2abea5f9d2e57e56ec91005a95fc5ec4
      
      Size/MD5 checksum:    54286 433390125e665a2df05b1982aaff3c7f
      
      Size/MD5 checksum:   201594 969d21dec60b328d287e870b173f2987
      
      Size/MD5 checksum:   426000 b07264cca3f22fd5da6bb65a9d65004c
      
      Size/MD5 checksum:  1553782 8aa11e24f7500fecaf3d78c10cdd8c32
      
      Size/MD5 checksum:   280964 b044073939a17327d1439bf8a67751b7
      
      Size/MD5 checksum:   327910 839d3a4c73f59ba0253dd6c26a576923
      
      Size/MD5 checksum:   497702 32bf7129d31765938340cc734fc4ac8d
      
      Size/MD5 checksum:    61228 0a473f8d08f517aaf24cd7a7707cd9a1

  Intel IA-64 architecture:

      
      Size/MD5 checksum:    39104 2e2b49ceab6f75c4eafe1803ea1f2d41
      
      Size/MD5 checksum:    76822 3077ee626e5557c99a25664ad9138be5
      
      Size/MD5 checksum:    90292 c990bcfba32cba098cc789543d17861a
      
      Size/MD5 checksum:    76758 b6c0b4e857fd76d167b5d17f6b83166e
      
      Size/MD5 checksum:   332852 add9f1038e2d5bb8981651a0058f453d
      
      Size/MD5 checksum:   424908 ae897f7d9d7ba643e33ce626dc791a01
      
      Size/MD5 checksum:  2092092 8dc3c51bf3106bd2bc97b6c094161740
      
      Size/MD5 checksum:   363118 c724d865d91d8eea9de654b031a0c8de
      
      Size/MD5 checksum:   434310 a4bea3a76278ae871a454fa25689d81f
      
      Size/MD5 checksum:   554748 a0fbdf37d7b1012838a48de6afb22b48
      
      Size/MD5 checksum:    70668 21f8914238251c13af225121cecd97d2

  HP Precision architecture:

      
      Size/MD5 checksum:    33580 2f0bd2c4b52e5af66422ce5efdeeb530
      
      Size/MD5 checksum:    70262 a9bd3a46360200a6554f95dbaa7ff94c
      
      Size/MD5 checksum:    76664 f84f7f4e08d1ed05a1af78d47682d802
      
      Size/MD5 checksum:    65402 ac8daf782c12df66f42e68a0d753ddf7
      
      Size/MD5 checksum:   254342 1410ba2d32628cfbaf3d87c3be389e1d
      
      Size/MD5 checksum:   425062 b81a0c52857b657f75613163d56a0502
      
      Size/MD5 checksum:  1826206 a65d21521c62acbd68aac0d4c6f7fbba
      
      Size/MD5 checksum:   304346 22627ab09d6bc312971e1642da7552e5
      
      Size/MD5 checksum:   371684 a21fac74c5f94b8d287677c7f29ebfb0
      
      Size/MD5 checksum:   523818 937cbc718d73fbeb411d65ac61dfb124
      
      Size/MD5 checksum:    65812 e4eaa35bf81244d341ab822f954e9d39

  Motorola 680x0 architecture:

      
      Size/MD5 checksum:    30256 da48d662aa603a9fffeb1c36ab3b7c99
      
      Size/MD5 checksum:    62712 e9cbbc8c5cf456f323c5a9260c8e4f55
      
      Size/MD5 checksum:    65332 c35d2ead6b95f78eb0e673d024ab7e4f
      
      Size/MD5 checksum:    54466 24c3dd0e488ff1d6fe70543be4199935
      
      Size/MD5 checksum:   187146 b390b1e9d80cfb06bc90a3bcd9c8e236
      
      Size/MD5 checksum:   425308 26fac921fb9eb5f7c5a52efa55bce6a6
      
      Size/MD5 checksum:  1583270 df4df8f522732d6c43f1df0accba8112
      
      Size/MD5 checksum:   269616 201a4493f8af1585a989e8ed82a51cc0
      
      Size/MD5 checksum:   324886 6e51a169b7d0ec74fdeff2c5886dba3b
      
      Size/MD5 checksum:   489934 cec341af75ef2d1174fcacb8431162fe
      
      Size/MD5 checksum:    61980 21450725c887e01dba071bf77ff5aa4e

  Big endian MIPS architecture:

      
      Size/MD5 checksum:    30704 759c796a562de2a1e8fc07e2cf3ab7a3
      
      Size/MD5 checksum:    58678 f1837f55b5f0e3c4690d361b3cc6feaf
      
      Size/MD5 checksum:    64962 7d9369a781be6da40c64443dad4ddf5d
      
      Size/MD5 checksum:    58808 7ddf87b5711ae7d5f5df2bd9d22a72f4
      
      Size/MD5 checksum:   237014 7628c60ea1540d4cc49ba1352fefe032
      
      Size/MD5 checksum:   425154 7aedb457149df2687557604f687ef3bb
      
      Size/MD5 checksum:  1750210 87a24511e8b6a800e94098c267646baf
      
      Size/MD5 checksum:   293826 68f239dd9e644050a538be7747003af0
      
      Size/MD5 checksum:   343488 259bbf09e18c121ac36d7b7f6ef01b11
      
      Size/MD5 checksum:   515110 309ffc15e3a8d4453b7a663b52b22a34
      
      Size/MD5 checksum:    61258 72e323d3c8486b05cc920c837dfce965

  Little endian MIPS architecture:

      
      Size/MD5 checksum:    30712 07fdf57e04f07c4be76c35c7eaa4318d
      
      Size/MD5 checksum:    58414 b9ccbf0ae3a14e18aaf58d52238c1428
      
      Size/MD5 checksum:    64562 9252ed661fa295ae4ace327c89c8860f
      
      Size/MD5 checksum:    58746 7d22971774224ccc80d2a90090730c71
      
      Size/MD5 checksum:   237420 dbf5b222cc119f5b1395f295705e24d4
      
      Size/MD5 checksum:   425054 825a11f0a8bcc5dd829d3ac9fb777f17
      
      Size/MD5 checksum:  1661924 887104f5498e665a77bce68ecd7b81b2
      
      Size/MD5 checksum:   294144 e9de313201d193fbc84a2a145c17b310
      
      Size/MD5 checksum:   343198 50bfbe9f2d9fa899376584fd9dbc58c9
      
      Size/MD5 checksum:   512400 42967a1b4e9838a2e98b145c44d4f9da
      
      Size/MD5 checksum:    61198 8bda41a7df1117e3d871eaaadb9aaee4

  PowerPC architecture:

      
      Size/MD5 checksum:    32076 f53e4cf4d47c3d7a8c3f8bb383222ae9
      
      Size/MD5 checksum:    69222 8b3b4f71252d43554d444a5a39618a7f
      
      Size/MD5 checksum:    67172 7246ce0c589597f5d4fc57b1e9297bb4
      
      Size/MD5 checksum:    56684 2c39270493a80d024109a594ebe849fa
      
      Size/MD5 checksum:   242572 9490b8269b40c555d76b9445752cc959
      
      Size/MD5 checksum:   424950 2a43fe0f1d932f084f761028fde72ba2
      
      Size/MD5 checksum:  1700774 af8f179e744defbcb2de0fe820e7b8c3
      
      Size/MD5 checksum:   288166 0c5e7ed8e40b0b4d1bbd8b6f18f1027a
      
      Size/MD5 checksum:   341534 91883697118d6cc4035dc3cf5aa1db5d
      
      Size/MD5 checksum:   510736 3cfb7c7072aaa6795ad806493d08d95d
      
      Size/MD5 checksum:    62072 82466754f9e268f557d3032de3966639

  IBM S/390 architecture:

      
      Size/MD5 checksum:    30996 6f0af43311b27669c6619a22aa7bc315
      
      Size/MD5 checksum:    63556 646076aec41162cf302628bdebdd5438
      
      Size/MD5 checksum:    67832 d5e1fa058beef9ce7d1ae263ea8352b7
      
      Size/MD5 checksum:    55966 8f3ef06a43e799f64b956c7f213f85c3
      
      Size/MD5 checksum:   214586 5be949e0a602da5b9bacdcb38e8bb11d
      
      Size/MD5 checksum:   424912 73c6ab2d0370393155bdbcced10ac410
      
      Size/MD5 checksum:  1668794 1df52e99999735073594818a9de79d7e
      
      Size/MD5 checksum:   283922 dc742847f189ea2e7c98df80166bdc74
      
      Size/MD5 checksum:   346534 4cda6a813c032484d2e2475958c25557
      
      Size/MD5 checksum:   501780 09cfb180ef32d9d9d74ed6d9d2d6e2bc
      
      Size/MD5 checksum:    62584 3f100448c8878c19bb25c7535eadb927

  Sun Sparc architecture:

      
      Size/MD5 checksum:    30666 5dbd7896cbab66c6baa924b7a8d19db4
      
      Size/MD5 checksum:    64384 4138202014e9adb5a3437d43af8c4489
      
      Size/MD5 checksum:    67914 bdae3180c820e7d086d67352a58525aa
      
      Size/MD5 checksum:    54776 d3fe7fb157e567c06d92077969d247c4
      
      Size/MD5 checksum:   232342 01bbde0036b1a633f3e0e7eb6efbf507
      
      Size/MD5 checksum:   424956 24a3c01b545b17d10ebc36eb08729784
      
      Size/MD5 checksum:  1671358 a2aa1d755dca60aa056bbe18bd9049d8
      
      Size/MD5 checksum:   288574 e1152b9f142201d901bd847ff6f316c1
      
      Size/MD5 checksum:   370862 a529b352731287162f738fbca8f46fbb
      
      Size/MD5 checksum:   501866 5e1788307a029b0f1629d971810c83e4
      
      Size/MD5 checksum:    62130 cb92d1b4bdf8f9eef11a01ab85182253


  These files will probably be moved into the stable distribution on
  its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb  Debian -- Security Information  stable/updates main
For dpkg-ftp:    dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and  http://packages.debian.org/