-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                         ESB-2008.0042 -- [Debian]
          New postgresql-8.1 packages fix several vulnerabilities
                              14 January 2008

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:              postgresql-8.1
Publisher:            Debian
Operating System:     Debian GNU/Linux 4.0
Impact:               Denial of Service
                      Increased Privileges
Access:               Existing Account
CVE Names:            CVE-2007-6601 CVE-2007-6600 CVE-2007-6067
                      CVE-2007-4772 CVE-2007-4769 CVE-2007-3278

Ref:                  ESB-2008.0022

Original Bulletin:    http://www.debian.org/security/2008/dsa-1460

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - ------------------------------------------------------------------------
Debian Security Advisory DSA-1460-1                  security@debian.org
http://www.debian.org/security/                       Moritz Muehlenhoff
January 13, 2008                      http://www.debian.org/security/faq
- - ------------------------------------------------------------------------

Package        : postgresql-8.1
Vulnerability  : several
Problem type   : local
Debian-specific: no
CVE Id(s)      : CVE-2007-3278 CVE-2007-4769 CVE-2007-4772 CVE-2007-6067 CVE-2007-6600 CVE-2007-6601

Several local vulnerabilities have been discovered in PostgreSQL, an
object-relational SQL database. The Common Vulnerabilities and Exposures
project identifies the following problems:

CVE-2007-3278

    It was discovered that the DBLink module performed insufficient
    credential validation. This issue is also tracked as CVE-2007-6601,
    since the initial upstream fix was incomplete.

CVE-2007-4769

    Tavis Ormandy and Will Drewry discovered that a bug in the handling
    of back-references inside the regular expressions engine could lead
    to an out of bands read, resulting in a crash. This constitutes only
    a security problem if an application using ProgreSQL processes
    regular expressions from untrusted sources.

CVE-2007-4772

    Tavis Ormandy and Will Drewry discovered that the optimizer for regular
    expression could be tricked into an infinite loop, resulting in denial
    of service. This constitutes only a security problem if an application
    using ProgreSQL processes regular expressions from untrusted sources.

CVE-2007-6067

    Tavis Ormandy and Will Drewry discovered that the optimizer for regular
    expression could be tricked massive ressource consumption. This
    constitutes only a security problem if an application using ProgreSQL
    processes regular expressions from untrusted sources.
    
CVE-2007-6600

    Functions in index expressions could lead to privilege escalation. For
    a more in depth explanation please see the upstream announce available
    at http://www.postgresql.org/about/news.905.

For the unstable distribution (sid), these problems have been fixed in
version 8.2.6-1 of postgresql-8.2.

For the stable distribution (etch), these problems have been fixed in version
postgresql-8.1 8.1.11-0etch1.

The old stable distribution (sarge), doesn't contain postgresql-8.1.

We recommend that you upgrade your postgresql-8.1 (8.1.11-0etch1) package.

Upgrade instructions
- - --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian 4.0 (stable)
- - -------------------

Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1.diff.gz
    Size/MD5 checksum:    35762 c4858189bfd1ef7b426d7ad337293a00
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11.orig.tar.gz
    Size/MD5 checksum: 11444400 9eadd7e16f547a8ce1e0eec5de96632e
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1.dsc
    Size/MD5 checksum:     1171 118e1cfc403a8299dfa76fc1e267342e

Architecture independent packages:

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-doc-8.1_8.1.11-0etch1_all.deb
    Size/MD5 checksum:  1597344 fc757ca9e80c49309458624a4d6fd3ab

alpha architecture (DEC Alpha)

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   671056 d60a96a721b26b2b5bd1c5ee7ef10de0
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:  4485032 288e073ec4ba0291155d26e8bda27d89
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   615002 9f7b83a128b100c1848f791aa3fd4bc5
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   179300 bf2196f4fe7fa598045630d8cf6182bd
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq4_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   288728 451ad14dc38e9dd85854b0bce01f9074
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpgtypes2_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   194344 3e900434f89cbcaf48ebac01df90acfd
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-dev_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   385616 5930618352cb115115b3628f39ab65a1
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg5_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   192240 88a3512b394d91c305cd3965e4a5037e
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq-dev_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   372570 e5ff8fb09312ffbcfe8f1850c4a94f5b
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   179692 ac196e73f2b58d35dbf144a97ad0c51a
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-compat2_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   169342 8443f4b7fbc010308c8942616dd6571b
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-client-8.1_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:  1506432 d404f1b70312c03ebcfcb803361cc969
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.11-0etch1_alpha.deb
    Size/MD5 checksum:   185872 63456965d24105c5bb844e380d3fd72e

amd64 architecture (AMD x86_64 (AMD64))

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-compat2_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   167984 dff8b8ccb1d9441bcd8a7babcd5e054c
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-dev_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   358830 de2a6906b2f7be6650482c869b67f1bf
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:  4359520 d2c7cfcd6b225fdc5e3620bc6f914e70
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg5_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   188626 4e0aeb2c9d1709a5721d5dea2f37ca28
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq-dev_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   341616 8f86216c386e542945931fea3f486318
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   184302 e1f38d75fe5f28fe76148c398f82d309
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   178564 16268efa8e610c989f23958780956c5f
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   613692 0293b6deea8ab2228c03f35c4c7a2cba
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   177974 ce66da98adc202d33eba56c4a9411401
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq4_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   281150 1ecebfe7616c4094cb21f7b68bc2a6d5
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpgtypes2_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   189772 7fa219d74a3999dc61ce723bd120887c
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:   634182 11a0c0d0b6fff605416814f9d0df5d42
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-client-8.1_8.1.11-0etch1_amd64.deb
    Size/MD5 checksum:  1457502 cb240c04cf79d35d32323c6913f66b23

arm architecture (ARM)

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:  4285426 2a56c74bfda490554cc60451de919f6b
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   181696 70fc8536616b8cf2fdc8072133b8431f
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-dev_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   346224 eddc2770bd67c88f4e967eea57cdef18
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   614330 89374bf3135141b1ef04d1c49972eb21
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpgtypes2_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   189254 dbff7d9333154fa84bd75bfdbab546f8
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq-dev_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   325418 a987851b027f00c18f98fb89b70e9600
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   178052 d029ce834b5101213e439832ee090d65
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq4_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   270090 9989a567df8f83f7fe7f571b05409e4f
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-client-8.1_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:  1424902 edd28eebef6e21ad8b1cea77d7e5dd47
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-compat2_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   167560 754baff8e971dacc7b9cf139c2fe7ce8
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg5_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   185666 6f891583878dedde5784e57f946f8b18
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   602668 4ea6bd89094088ab7bf1bcbc212d20d1
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.11-0etch1_arm.deb
    Size/MD5 checksum:   176828 0d5952a2df2f37a02e713410e4ad5307

hppa architecture (HP PA RISC)

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpgtypes2_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   195148 0468f2250bd62ab711ce551f43a7c0ab
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   180664 91671b1cdbf9902fc1b0feeedaf9c13a
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-client-8.1_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:  1506136 f10ec552370d4ee866d5033566e455c8
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq4_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   286222 e331ce08e73a60ad7ae335bd3d07cb56
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   661174 a05f0976f97eaeb3ac1fda9d4456a408
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg5_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   191426 5fcb2e9052080f2c309d1d1270b4d7c1
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-compat2_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   169556 596adfb8a5e43e3c913a83a0c1ea83f7
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   613770 c6ddd70dd0106f140af204169becfba5
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:  4800524 a942b7744fcd9b6f63807bcceff8874d
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq-dev_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   348378 10e9927dc5f390afa7187abfb98c3f0b
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   186922 296a46b37b5030d6e0223f14ea06e129
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   180776 7ab8cdac4f30e74eae7d3f0f9100b002
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-dev_8.1.11-0etch1_hppa.deb
    Size/MD5 checksum:   368036 35bbfee4582401a9703ee0ebe662c9c8

i386 architecture (Intel ia32)

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-compat2_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   167228 3172d106b9d2a0b07704e5d54c759a09
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   177926 7fb0712c60c7fcedda0bd0072cda73a8
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpgtypes2_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   189320 b236d5aee0d1c56976086ee341769a97
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq-dev_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   333814 8edaaf6888ab48b74132da1ff9465199
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   614612 7ba6b7c533d94b2c8503d7b5a3af1ce6
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq4_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   277312 c0539ad7f6398157baa7edbcefa70f35
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-dev_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   354808 f60ddea50db8aa7cd534c0453cd23d5a
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:  4288660 00b00a934c4e9452cfac1088e0226ddc
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   183540 253aa290befff3621d773156b59c6c4e
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg5_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   187642 cfedb34389b4dbcb6943a07b36a2d576
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   176284 34ea5de587476536d40e09bb2c4e5348
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:   607444 92357426f909eef72992b68cafd7a7e1
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-client-8.1_8.1.11-0etch1_i386.deb
    Size/MD5 checksum:  1422416 2647366c2c5e3f6ad7fc6973f0a2d761

ia64 architecture (Intel ia64)

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpgtypes2_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   206266 59326303e8af22f4ea1161f9b7789490
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   186552 e1a3049a341bce026841fe7fa87e54ff
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-client-8.1_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:  1639402 b76d158dbbdd486607260c657ea79fff
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   189152 72a5e78e4df438455535022a6e412f94
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-dev_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   408536 ead410ed6db4f32c4659d0b9ffcf64a0
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   775540 358b6d4fe053b98891b4fd40673453a0
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   613788 48b321e0fc76d8d7811ce94d1551036c
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   196006 276e02fe51cd553475d878365bc64aec
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq-dev_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   378282 5b282caf341ddb5b187e3e809b66efb2
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:  5097000 17f1d7e4e3afbd9d7dd57a11933999a5
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq4_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   306350 913e49427d99925aa122970763a71e3a
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-compat2_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   171252 ba330738c66d9c70c336ac04cc8c239b
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg5_8.1.11-0etch1_ia64.deb
    Size/MD5 checksum:   200326 f5bf2d2f764367b2555ae5a9aac59b71

mips architecture (MIPS (Big Endian))

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:  4608214 ee9465f9baba6fccb586842b80f8bc87
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-dev_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   354398 1b93192720edc8b7666eb7a3ecfd8333
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   177702 3eeec0ccd96b8031622dff02785f4d93
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   180274 87f32086606c2d6649a3891996583f88
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   178648 f0efcca56299d5b52f0ae6416572aac7
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq-dev_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   345458 6cb66f3c9fa3f08e75d6d3ccf0d63eed
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-compat2_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   167832 4fda26f6830bd1f1c55b4e6850617c52
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg5_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   187184 1fc7e6557d5c3be8eb1a5a8d4157466b
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq4_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   277508 7c3d28499e55c67cd6dbbaffeb7837e8
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   612104 e181230855179d0a26e3f679f62940b7
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   613786 1282b8370864a3905101378bf3b50c93
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpgtypes2_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:   192116 16f46f61a5a2ce6f9b7f90de2f8d174f
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-client-8.1_8.1.11-0etch1_mips.deb
    Size/MD5 checksum:  1458256 f535b5734723f9be801e47551d444a25

powerpc architecture (PowerPC)

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   180398 2e0c4be889396b9385c1feca879b2d9a
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq4_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   279904 6e6f874cee109cd4b7292ce4ec7d5e30
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   179232 c3086c1376ce9e8cfdb76f12fba853aa
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-dev_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   354008 6e8264271d78145b04e448095b4fc07b
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg5_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   190166 9b6861834562ec4d051cb70cac515a1d
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   613780 2d9267da4fcb86d6309aab0a6fe4545c
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq-dev_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   337492 8cf24186b5cf77d331086bd28a334526
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   654184 9bf80f7ed225da053656289ad2b60111
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-compat2_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   169184 1fea38fb908d18c718f15b322fdad34a
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-client-8.1_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:  1475808 36e71297f5f7817d90352f468ab4ec61
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:  4659520 748f57da738be243bc0d677ce10626af
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpgtypes2_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   193378 8679ec821fbfb58376129ea9d239d840
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.11-0etch1_powerpc.deb
    Size/MD5 checksum:   184774 050f33fa11be53f0e5d521da8a384cac

s390 architecture (IBM S/390)

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   643548 fe587dde496d5edf6e76e89ec4196892
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg5_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   190032 5b161602145a8d1071a26b854062da6f
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   179386 4fdb8d9be39664db65a9fb497e435f46
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   179236 07d12dd26dfad3f6410c1d089ef54758
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-dev_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   353914 50d354b3c6f4672adf1a849ba9099288
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   613756 50c536fea2dadf65d405fa31ab27486f
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpgtypes2_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   192634 9cd35f4035ed8bb3e7d22caa9185162b
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   183302 cb2ebac90e7e19bbf541d57c80dc63c3
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq4_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   284736 a0f1197f0669f46899b998cb5d5f532e
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:  4724082 ef912c10e9dfe5c26654f56a531484d0
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq-dev_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   343822 c03e4a03c78a327179d11e3448d0701b
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-compat2_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:   168518 774e82a37790fee36636e8932e9fd3de
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-client-8.1_8.1.11-0etch1_s390.deb
    Size/MD5 checksum:  1477014 5cd1f20f85c994243a90739e2a2e64a9

sparc architecture (Sun SPARC/UltraSPARC)

  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-server-dev-8.1_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   613762 b64d6b7dc60158b50e17e91c88e4029f
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-compat2_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   167056 8ecef3bf04656b0a2a787624e724dd47
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plperl-8.1_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   183458 69630d0d139aa4d5a91a57d2ea7a1c0a
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg5_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   187562 ae149e9ee7bb6130e7e04369baa652fc
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-client-8.1_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:  1449106 a7d12df5c784c32a738c682b3e76336d
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-8.1_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:  4587008 e83347c13ea19c5bf233ecf7286f5459
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-plpython-8.1_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   177608 14f2fb006cfa5e05229b4412937c1f99
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-contrib-8.1_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   613916 75501a9a8621f20594c1d4b857b33c97
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq-dev_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   334628 f301f0cae78ba6f9feb214bc6255d311
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpq4_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   276478 161332f46188063bbd8d76b4e67d4ea4
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libecpg-dev_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   350068 1ba7be6ab648d17c1a921f9d2087f709
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/postgresql-pltcl-8.1_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   178422 bd57a7b4d1b0ddf227bc33834f1e5a7b
  http://security.debian.org/pool/updates/main/p/postgresql-8.1/libpgtypes2_8.1.11-0etch1_sparc.deb
    Size/MD5 checksum:   188322 b28ec84a27653bc55692fe5c6b961a71


  These files will probably be moved into the stable distribution on
  its next update.

- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHijGgXm3vHE4uyloRAj7jAKCtyMTD1l66JAEvXKM2j+ApxsXEkgCgqM38
/qve0NdqX8n9phdh0DIzV54=
=Fa+/
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBR4qilCh9+71yA2DNAQLWwwP+PoEfZqE3S/D9vcX1Ft1fmXGArAJTNrWv
ggG1EjNlpru/+1aAU1lD+nKpzkPZIlg9kgul0UUOr6e2mEXB0NHld704vpQvdVJm
qaYMUktu/6difNVacxRp0WEn5O0q2j8kvuj8YTUCLO5rXpvicM3T412GDBdy5Qgy
5fBcXHgaYuw=
=HWIx
-----END PGP SIGNATURE-----