public inbox for [email protected]
help / color / mirror / Atom feedFrom: apt.postgresql.org Repository Update <[email protected]>
To: PostgreSQL on Debian and Ubuntu <[email protected]>
Subject: postgresql-13 updated to version 13.19-1.pgdg+1
Date: Thu, 13 Feb 2025 14:09:23 +0000
Message-ID: <[email protected]> (raw)
The package postgresql-13 was updated on apt.postgresql.org.
apt-listchanges: Changelogs
---------------------------
postgresql-13 (13.19-1.pgdg+1) sid-pgdg; urgency=medium
* Rebuild for sid-pgdg.
* Changes applied by generate-pgdg-source:
+ Moving lib packages to component 13.
+ Enabling cassert.
-- PostgreSQL on Debian and Ubuntu <[email protected]> Tue, 11 Feb 2025 11:27:41 +0100
postgresql-13 (13.19-1) unstable; urgency=medium
* New upstream version 13.19.
+ Harden PQescapeString and allied functions against invalidly-encoded
input strings (Andres Freund, Noah Misch)
Data-quoting functions supplied by libpq now fully check the encoding
validity of their input. If invalid characters are detected, they
report an error if possible. For the ones that lack an error return
convention, the output string is adjusted to ensure that the server will
report invalid encoding and no intervening processing will be fooled by
bytes that might happen to match single quote, backslash, etc.
The purpose of this change is to guard against SQL-injection attacks
that are possible if one of these functions is used to quote crafted
input. There is no hazard when the resulting string is sent directly to
a PostgreSQL server (which would check its encoding anyway), but there
is a risk when it is passed through psql or other client-side code.
Historically such code has not carefully vetted encoding, and in many
cases it's not clear what it should do if it did detect such a problem.
This fix is effective only if the data-quoting function, the server, and
any intermediate processing agree on the character encoding that's being
used. Applications that insert untrusted input into SQL commands should
take special care to ensure that that's true.
Applications and drivers that quote untrusted input without using these
libpq functions may be at risk of similar problems. They should first
confirm the data is valid in the encoding expected by the server.
The PostgreSQL Project thanks Stephen Fewer for reporting this problem.
(CVE-2025-1094)
* B-D on postgresql-common-dev.
* Test-depend only our server packages, i.e. allow libpq5 to be newer.
-- Christoph Berg <[email protected]> Tue, 11 Feb 2025 11:27:41 +0100
New version 13.19-1.pgdg+1:
postgresql-13 | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-13 | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-13 | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-13 | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-13 | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64, source
postgresql-13 | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-13 | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-13 | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-13-dbgsym | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-13-dbgsym | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-13-dbgsym | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-13-dbgsym | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-13-dbgsym | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-13-dbgsym | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-13-dbgsym | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-13-dbgsym | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13 | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13 | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13 | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13 | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13 | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-client-13 | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13 | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13 | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13-dbgsym | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13-dbgsym | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13-dbgsym | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13-dbgsym | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13-dbgsym | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-client-13-dbgsym | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13-dbgsym | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-13-dbgsym | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-13 | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-13 | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-13 | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-13 | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-13 | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-doc-13 | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-13 | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-13 | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13 | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13 | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13 | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13 | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13 | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-plperl-13 | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13 | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13 | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13-dbgsym | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13-dbgsym | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13-dbgsym | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13-dbgsym | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13-dbgsym | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-plperl-13-dbgsym | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13-dbgsym | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-13-dbgsym | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13 | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13 | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13 | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13 | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13 | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-plpython3-13 | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13 | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13 | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13-dbgsym | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13-dbgsym | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13-dbgsym | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13-dbgsym | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13-dbgsym | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-plpython3-13-dbgsym | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13-dbgsym | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-13-dbgsym | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13 | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13 | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13 | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13 | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13 | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-pltcl-13 | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13 | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13 | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13-dbgsym | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13-dbgsym | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13-dbgsym | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13-dbgsym | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13-dbgsym | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-pltcl-13-dbgsym | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13-dbgsym | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-13-dbgsym | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-13 | 13.19-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-13 | 13.19-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-13 | 13.19-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-13 | 13.19-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-13 | 13.19-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-server-dev-13 | 13.19-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-13 | 13.19-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-13 | 13.19-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
The public mirrors serving apt.postgresql.org are synced hourly,
the updated packages will be available there shortly.
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected]
Subject: Re: postgresql-13 updated to version 13.19-1.pgdg+1
In-Reply-To: <[email protected]>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox