-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
I've submitted Marc's announcement and approved it. Just changed the
wording for RPMS since they are available now except 7.2.6.
Regards, Devrim
On Sat, 23 Oct 2004, World Wide Web Owner wrote:
> A new entry has been added to the news database.
>
> Database Admin: http://www.postgresql.org/admin/edit_news.php?234
>
> Submitted by: press@PostgreSQL.org
> Headline: PostgreSQL Security Release(s) for 7.2, 7.3 and 7.4
> Summary:
>
> In order to address a recent security report from iDefence, we have released 3 new \"point\" releases: 7.2.6, 7.3.8
and7.4.6. Click the news title for details.
>
>
> Story:
>
> In order to address a recent security report from iDefence, we have released 3 new \"point\" releases: 7.2.6, 7.3.8
and7.4.6
>
> Although rated only a Medium risk, according to their web site: \"A vulnerability exists due to the insecure creation
oftemporary files, which could possibly let a malicious user overwrite arbitrary files.\"
>
> Also in these releases is a potential \'data loss\' bug that was recently identified:
>
> * Repair possible failure to update hint bits on disk
>
Under rare circumstances this oversight could lead to \"could not access transaction status\" failures,
whichqualifies it as a potential-data-loss bug.
>
> Although not yet available via Bittorrent, these releases are available through ftp at all of the mirrors, as well as
the(S)RPMS for various OSes.
>
> For a listing of all currently available FTP mirrors, please see:
>
> <a href=\"http://www.postgresql.org/mirrors-ftp.html\">http://www.postgresql.org/mirrors-ftp.html
> </a>
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: if posting/reading through Usenet, please send an appropriate
> subscribe-nomail command to majordomo@postgresql.org so that your
> message can get through to the mailing list cleanly
>
- --
Devrim GUNDUZ
devrim~gunduz.org devrim.gunduz~linux.org.tr
http://www.tdmsoft.com
http://www.gunduz.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQFBeobmtl86P3SPfQ4RAtv1AJ9lIjFzGMNcoikKs4kM60mvnon9ugCgmFLp
ejjvB0mxbR9cOqmSt3l0iq0=
=Tj1V
-----END PGP SIGNATURE-----