Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 8905 - PostgreSQL 7.2.3 Released - Security Fix
Summary: PostgreSQL 7.2.3 Released - Security Fix
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Ryan Phillips (RETIRED)
URL: http://www.postgresql.org/news.html
Whiteboard:
Keywords: SECURITY
Depends on:
Blocks:
 
Reported: 2002-10-08 13:33 UTC by Richard C
Modified: 2007-09-22 23:08 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Ebuild + Support files for Postgresql 7.2.3 (postgresql-7.2.3.ebuild.tar.bz2,3.96 KB, application/octet-stream)
2002-10-08 13:38 UTC, Richard C
Details
.tar.bz2 of Postgresql-7.2.3-r1.ebuild (postgresql-7.2.3-r1.ebuild.tar.bz2,4.15 KB, application/octet-stream)
2002-10-16 13:07 UTC, Richard C
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Richard C 2002-10-08 13:33:14 UTC
In order to address a potentially critical bug in the VACUUM code, the
PostgreSQL Global Development Group is releasing v7.2.3 of PostgreSQL.

This release includes a fix for a serious problem that has affected all 7.2.*
releases: if a VACUUM command is run by a non-superuser, it is sometimes
possible for the system to prematurely remove old transaction log data (pg_clog
files). This can result in data becoming unrecoverable. All 7.2.* installations
are urged to update to 7.2.3 as soon as possible.

Other changes include;

    * Prevent non-superuser from increasing most recent vacuum info (Tom)
    * Handle pre-1970 date values in newer versions of glibc (Tom)
    * Fix possible hang during server shutdown
    * Prevent spinlock hangs on SMP PPC machines (Tomoyuki Niijima)
    * Fix pg_dump to properly dump FULL JOIN USING (Tom) 

-------------------

Attached is ebuild package for 7.2.3
    1) I have removed the postgresql-7.2.2-perl-gentoo.diff patch - It caused
sandbox errors for me.  See http://bugs.gentoo.org/show_bug.cgi?id=8483
    2) I copied the postgresql-7.2.2-dyn-libperl-gentoo.diff up to the new
version number - no changes, and it applied clean.
    3) All other support files remain unchanged.
Comment 1 Richard C 2002-10-08 13:38:42 UTC
Created attachment 4526 [details]
Ebuild + Support files for Postgresql 7.2.3
Comment 2 Richard C 2002-10-08 13:43:23 UTC
Attachment is a .tar.bz2 file
Comment 3 Ryan Phillips (RETIRED) gentoo-dev 2002-10-08 19:25:26 UTC
committed... Sending out a GLSA
Comment 4 Richard C 2002-10-16 13:07:30 UTC
Created attachment 4752 [details]
.tar.bz2 of Postgresql-7.2.3-r1.ebuild

Put the patch for the Perl Module MAN3 sandbox bug back into 7.2.3 ebuild.
http://bugs.gentoo.org/show_bug.cgi?id=8483

The man file was pre-existing on my previous install, so it might have tainted
my test of my ebuild.  This time I tested the build on a machine that had never
seen a Postgres install (Gentoo 1.4r1)
Comment 5 Ryan Phillips (RETIRED) gentoo-dev 2002-10-31 15:24:52 UTC
Richard... The patch should be included.