Oval Definition:oval:org.mitre.oval:def:13062
Revision Date:2014-06-23Version:20
Title:DSA-1909-1 postgresql-ocaml -- missing escape function
Description:It was discovered that postgresql-ocaml, OCaml bindings to PostgreSQL's libpq, was missing a function to call PQescapeStringConn. This is needed, because PQescapeStringConn honours the charset of the connection and prevents insufficient escaping, when certain multibyte character encodings are used. The added function is called escape_string_conn and takes the established database connection as a first argument. The old escape_string was kept for backwards compatibility. Developers using these bindings are encouraged to adjust their code to use the new function. For the stable distribution, this problem has been fixed in version 1.7.0-3+lenny1. For the oldstable distribution, this problem has been fixed in version 1.5.4-2+etch1. For the testing distribution and the unstable distribution, this problem has been fixed in version 1.12.1-1. We recommend that you upgrade your postgresql-ocaml packages.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-2943
DSA-1909-1
Platform(s):Debian GNU/Linux 4.0
Debian GNU/Linux 5.0
Product(s):postgresql-ocaml
Definition Synopsis
  • Release section
  • Debian GNU/Linux 5.0 is installed
  • AND Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND Packages section
  • libpostgresql-ocaml-dev DPKG is earlier than 1.7.0-3+lenny1
  • OR libpostgresql-ocaml DPKG is earlier than 1.7.0-3+lenny1
  • OR Release section
  • Debian GNU/Linux 4.0 is installed.
  • AND Packages section
  • libpostgresql-ocaml-dev DPKG is earlier than 1.5.4-2+etch1
  • OR libpostgresql-ocaml DPKG is earlier than 1.5.4-2+etch1
  • BACK