Sumit Soni discovered that PostgreSQL, an object-relational SQL database, could be forced to crash when an internal function was called with invalid arguments, resulting in denial of service.

For the stable distribution (squeeze), this problem has been fixed in version 8.4.16-0squeeze1. For the testing distribution (wheezy), this problem has been fixed in version 8.4.16-1. For the unstable distribution (sid), this problem has been fixed in version 8.4.16-1. We recommend that you upgrade your postgresql-8.4 packages.

PostgreSQL is a fully featured object-relational database management system. It supports a large part of the SQL standard and is designed to be extensible by users in many aspects. Some of the features are: ACID transactions, foreign keys, views, sequences, subqueries, triggers, user-defined types and functions, outer joins, multiversion concurrency control. Graphical user interfaces and bindings for many programming languages are available as well.

postgresql-8.4 on Debian Linux

This check tests the installed software version using the apt package manager.

• http://www.debian.org/security/2013/dsa-2630.html

---

Updated on 2015-03-25