Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 10: 2023-21584 Critical: ocaml-postgresql Escape Function Update

fedora
Calendar Grey November 10, 2009
Dist Fedora Esm H88
The latest release of ocaml-postgresql includes an essential security enhancement and an improved way to handle escape sequences. Please be sure to adapt your implementations as needed.
- New upstream version 1.12.3

Summary

This OCaml-library provides an interface to PostgreSQL, an efficient

and reliable, open source, relational database. Almost all

functionality available through the C-API (libpq) is replicated in a

type-safe way. This library uses objects for representing database

connections and results of queries.

Update Information:

- New upstream version 1.12.3. - This contains a SECURITY fix for: https://bugzilla.redhat.com/show_bug.cgi?id=529325 CVE-2009-2943 ocaml- postgresql: Missing escape function (DSA-1909-1) HOWEVER you are not protected until you change your code to use the new connection#escape_string method.

Topics%20covered

Topics Covered

security advisory critical Fedora security fix database access escape function ocaml-postgresql

Change Log

* Fri Oct 16 2009 Richard W.M. Jones - 1.12.3-1.fc10.2 - Fix build process for new upstream tarball layout. * Fri Oct 16 2009 Richard W.M. Jones - 1.12.3-1 - New upstream version 1.12.3. - This contains a SECURITY fix for: https://bugzilla.redhat.com/show_bug.cgi?id=529325 CVE-2009-2943 ocaml-postgresql: Missing escape function (DSA-1909-1) HOWEVER you are not protected until you change your code to use the new connection#escape_string method.

References


[ 1 ] Bug #529325 - CVE-2009-2943 ocaml-postgresql: Missing escape function (DSA-1909-1) https://bugzilla.redhat.com/show_bug.cgi?id=529325

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update ocaml-postgresql' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: ocaml-postgresql
Product: Fedora 10
Version: 1.12.3
Release: 1.fc10.2
URL: Summary : OCaml library for accessing PostreSQL databases

Topics%20covered

Topics Covered

security advisory critical Fedora security fix database access escape function ocaml-postgresql

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here