PostgreSQL 2009-09-09 Security Update

Posted by press@postgresql.org

The PostgreSQL Project today released minor versions updating all active branches of the PostgreSQL object-relational database system, including versions 8.4.1, 8.3.8, 8.2.14, 8.1.18, 8.0.22, and 7.4.26. This release fixes one moderate-risk and two low-risk security issues: an authentication issue, a denial of service issue, and a privilege-escalation exploit. All users should upgrade their database installations as soon as reasonably possible.

This update release also fixes the "could not reattach shared memory" issue which has plagued many Windows PostgreSQL users, and updates time zone files for several countries. There are 23 other minor fixes, many of them affecting only version 8.4. See the release notes for full details.

As with other minor releases, users are not required to dump and reload their database in order to apply this update release; you may simply shut down PostgreSQL and update its binaries. Users skipping more than one update may need to check the release notes for extra, post-update steps.

Release Notes
Installation Packages
Source Code
Details of Security Issues

Distribution Release: Red Hat Enterprise Linux 5.4

2009-09-02

Red Hat has announced the release of Red Hat Enterprise Linux (RHEL) 5.4: "Red Hat is pleased to announce the availability of the latest update to Red Hat Enterprise Linux 5, release 5.4. New in Red Hat Enterprise Linux 5.4 is a reorganization of the release note material; now the release notes are a condensed set of major release highlights. The following list summarizes improvements in this release: hardware - 10 GigE drivers with GRO support, FCoE support on standard NICs, SR I/OV support; system - kernel tracepoints for systemtap use; per process I/O accounting, FIEMAP support; virtualization - hypervisor scalability to 192 CPUs, additional hypervisor - Kernel Based Virtual Machine (KVM)." Read the release announcement and release notes for further information. Red Hat Enterprise Linux 5.4 is available either via the usual update mechanism or as a set of ISO images for new installation (Red Hat Networks subscribers only). An unsupported 30-day evaluation edition can be requested here.

Distribution Release: Slackware Linux 13.0

2009-08-28

Patrick Volkerding has announced the release of Slackware Linux 13.0, a major update of the world's oldest surviving Linux distribution: "After one of the most intensive periods of development in Slackware's history, the long-awaited stable release of Slackware 13.0 is ready. This release brings with it many major changes since Slackware 12.2, including a completely reworked collection of X packages (a configuration file for X is no longer needed in most cases), major upgrades to the desktop environments (KDE 4.2.4 and Xfce 4.6.1), a new .txz package format with much better compression, and other upgrades all around -- to the development system, network services, libraries, and major applications like Firefox and Thunderbird. We think you'll agree that this version of Slackware was worth the wait. Also, this is the first release of Slackware with native support for the 64-bit x86_64 architecture!" See the release announcement and release notes for more information. Download (torrents) the installation DVD images from here: slackware-13.0-install-dvd.iso (3,739MB, MD5, torrent), slackware64-13.0-install-dvd.iso (3,762MB, MD5, torrent).

Development Release: Slackware Linux 13.0 RC2

Patrick Volkerding has announced that Slackware "current", the distribution's development branch, has reached release candidate 2 status: "Hi folks! We're going to call this set of updates RC2. There are still README files to be handled (that's the nature of documentation, I guess), as well as some other things remaining on the TODO list, but X seems pretty stable now, and it seems like a release soon would be in order so that we can march right back into development territory with -current again soon. Enjoy, and let us know about any problems you run into!" Find more information in the changelog. Slackware Linux 13.0 RC2 comes with Linux kernel 2.6.29.6, GCC 4.3.3, X.Org Server 1.6.3 and KDE 4.2.4. As always, there are no official ISO images to download, but those interested in helping with last-minute testing can get these unofficial installation DVDs and upgrade to RC2 with slackpkg: slackware-current-04_Aug_2009-DVD.iso (1,743MB, MD5), slackware64-current-04_Aug_2009-DVD.iso (1,678MB, MD5).

PostgreSQL 8.4 Released: Now Easier to Use than Ever

Posted on 2009-07-01
Posted by press@postgresql.org

The PostgreSQL Global Development Group has released version 8.4, continuing the rapid development of the world's most advanced open source database. This release contains an abundance of enhancements to make administering, querying, and programming of PostgreSQL databases easier than ever before. Our development team has spent 16 months adding over two hundred improvements to all aspects of database functionality, helping every PostgreSQL user in small or large ways.

Many of the changes in PostgreSQL 8.4 are new or improved administration and monitoring tools and commands. Each user has their own favorite features which will make day-to-day work with PostgreSQL easier and more productive for them. Among the most popular enhancements are:

Parallel Database Restore, speeding up recovery from backup up to 8 times
Per-Column Permissions, allowing more granular control of sensitive data
Per-database Collation Support, making PostgreSQL more useful in multi-lingual environments
In-place Upgrades through pg_migrator (beta), enabling upgrades from 8.3 to 8.4 without extensive downtime
New Query Monitoring Tools, giving administrators more insight into query activity
Greatly Reduced VACUUM Overhead through the Visibility Map
New Monitoring Tools for current queries, query load and deadlocks

Version 8.4 also makes data analysis easier through the advanced ANSI SQL2003 features of windowing functions, common table expressions and recursive queries. Enhancements to stored procedures, such as default parameters and variadic parameters, make database server programming simpler and more compact. Of course, there are also performance improvements included in this version.

Download version 8.4 today and start enjoying using PostgreSQL even more!

Download PostgreSQL 8.4
Release Notes
List of 8.4 Features
Official Press Release

PostgreSQL 8.4 Release Candidate 1 Now Available Posted on 2009-06-14 Posted by press@postgresql.org

Final release of PostgreSQL 8.4 comes much closer today with our first Release Candidate. Now, we count on all of the PostgreSQL users and developers worldwide to test this Release Candidate to make sure that it is stable, reliable, secure and high-performance enough to be called an official PostgreSQL release. Please download 8.4 RC1 today and test it with your applications.

Beta testing information page and download links

Note that no Windows MSI installer will be released for this Release Candidate. Windows users are advised to use the One-Click Installer instead.

Several of the issues patched in this release relate to pg_migrator, the new beta in-place upgrade tool for upgrading PostgreSQL databases. Please test migrating a copy of your 8.3 databases to 8.4 and report further issues with pg_migrator, especially issues related to Additional Modules (contrib). pg_migrator will release version RC1 soon which will be compatible with 8.4 RC1, and you can get it on pgFoundry.

This Release Candidate also includes a number of changes to handling of NULL inputs to internal functions in order to prevent denial-of-service exploits. First, the general internal_in() function is now NONSTRICT in order to trap NULL errors for debugging. Second, several internal functions in our Additional Modules have been marked STRICT to lock them down, especially several GiST index functions and pg_freespacemap. Please check for unanticipated side-effects of this more secure policy for internal functions against your application, especially if you use PostgreSQL plug-ins like GIS and BLAST.

Other specific items fixed since Beta2 Include:

-- Fix FreeBSD Kerberos support
-- Fix row ordering on scrollable and WITH HOLD cursors
-- Make datetime precision in INFORMATION_SCHEMA comply with the standard
-- Normalize input for INTERVAL subtypes
-- Prevent double-escaping of XML strings, and eliminate XML crash bug
-- Fix DBlink default encoding issue
-- Reverted incompatible change to Intarray operators
-- Fix estimated row count statistic for partial vacuums
-- Add support for the SQL/MED API to DBlink
-- Fix a GIN index corruption issue
-- Improve coding of pluralization in translatable strings
-- Correct initialization of Perl library support to support Perl 5.10
-- Fix several issues with rotation of pg_standby log segments
-- Fix handling of LIKE '%_' syntax
-- Multiple minor fixes to ECPG interface

For a complete list of fixes, see our Git mirror

We rely on our community of users to ensure that PostgreSQL continues to be the most bug-free SQL database in the industry. This means we need your testing and bug reports as soon as possible.

MySQL 5 Installation on Debian Linux (LENNY)

i think you have debian linux and can install packages from mirror.

there were any step :

1.  as root , type

     apt-get update  

     this command will get update list packages from mirror debian

2. type

     apt-cache search mysql-server

     this command will show  result (mysql-server)

3. type

     apt-get install mysql-server-5.0

4. mysql is installed

    the default :

    user mysql = root

    password =           (blank / no password)