[Pkg-postgresql-public] Bug#778850: Missing 20-column_privilege_leak.patch file in postgresql-8.4 8.4.22-0ubuntu0.10.04.1 source package

Charlie Brady charlieb at budge.apana.org.au
Fri Feb 20 15:54:40 UTC 2015


Package: postgresql
Version: 8.4.22-0ubuntu0.10.04.1

Changelog for this package contains:

...
  * Add 20-column_privilege_leak.patch:
    Fix information leak via constraint-violation error messages
    [CVE-2014-8161]
...

But there is no such patch file.

See:

http://launchpadlibrarian.net/197335367/postgresql-8.4_8.4.22-0ubuntu0.10.04_8.4.22-0ubuntu0.10.04.1.diff.gz

I think that means that CVE-2014-8161 is not fixed in this version.



More information about the Pkg-postgresql-public mailing list