[ubuntu/lucid-security] bind9_9.7.0.dfsg.P1-1ubuntu0.5_amd64_translations.tar.gz, bind9_9.7.0.dfsg.P1-1ubuntu0.5_armel_translations.tar.gz, bind9_9.7.0.dfsg.P1-1ubuntu0.5_ia64_translations.tar.gz, bin

2012-06-05 Thread Marc Deslauriers
bind9 (1:9.7.0.dfsg.P1-1ubuntu0.5) lucid-security; urgency=low * SECURITY UPDATE: ghost domain names attack - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that of the old NS RRset when replacing it. - Patch backported from 9.7.5. - CVE-2012-1033 * SECURITY UP

[ubuntu/lucid-security] postgresql-8.4, postgresql-8.4_8.4.12-0ubuntu10.04_powerpc_translations.tar.gz, postgresql-8.4_8.4.12-0ubuntu10.04_amd64_translations.tar.gz, postgresql-8.4_8.4.12-0ubuntu10.04

2012-06-05 Thread Martin Pitt
postgresql-8.4 (8.4.12-0ubuntu10.04) lucid-security; urgency=low * New upstream security/bug fix release: (LP: #1008317) - Fix incorrect password transformation in "contrib/pgcrypto"'s DES crypt() function. If a password string contained the byte value 0x80, the remainder o