Oval Definition:oval:org.mitre.oval:def:7638
Revision Date:2014-06-23Version:18
Title:DSA-1909 postgresql-ocaml -- missing escape function
Description:It was discovered that postgresql-ocaml, OCaml bindings to PostgreSQL's libpq, was missing a function to call PQescapeStringConn(). This is needed, because PQescapeStringConn() honours the charset of the connection and prevents insufficient escaping, when certain multibyte character encodings are used. The added function is called escape_string_conn() and takes the established database connection as a first argument. The old escape_string() was kept for backwards compatibility. Developers using these bindings are encouraged to adjust their code to use the new function.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-2943
DSA-1909
Platform(s):Debian GNU/Linux 4.0
Debian GNU/Linux 5.0
Product(s):postgresql-ocaml
Definition Synopsis
  • Release section
  • Debian GNU/Linux 5.0 is installed
  • AND Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND Packages section
  • libpostgresql-ocaml-dev is earlier than 1.7.0-3+lenny1
  • OR libpostgresql-ocaml is earlier than 1.7.0-3+lenny1
  • OR Release section
  • Debian GNU/Linux 4.0 is installed.
  • AND Packages section
  • libpostgresql-ocaml-dev is earlier than 1.5.4-2+etch1
  • OR libpostgresql-ocaml is earlier than 1.5.4-2+etch1
  • BACK