From 7f3d3ad9ef1a471583976ef0750447e723cab2ed Mon Sep 17 00:00:00 2001 From: "Richard W.M. Jones" Date: Fri, 16 Oct 2009 10:19:00 +0000 Subject: [PATCH] - New upstream version 1.12.3. - This contains a SECURITY fix for: https://bugzilla.redhat.com/show_bug.cgi?id=529325 CVE-2009-2943 ocaml-postgresql: Missing escape function (DSA-1909-1) HOWEVER you are not protected until you change your code to use the new connection#escape_string method. --- .cvsignore | 2 +- ocaml-postgresql.spec | 10 +++++++++- sources | 2 +- 3 files changed, 11 insertions(+), 3 deletions(-) diff --git a/.cvsignore b/.cvsignore index c955695..941057b 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -release-1.10.3.tar.bz2 +release-1.12.3.tar.bz2 diff --git a/ocaml-postgresql.spec b/ocaml-postgresql.spec index b3e82c5..f9dc65f 100644 --- a/ocaml-postgresql.spec +++ b/ocaml-postgresql.spec @@ -2,7 +2,7 @@ %define debug_package %{nil} Name: ocaml-postgresql -Version: 1.10.3 +Version: 1.12.3 Release: 1%{?dist} Summary: OCaml library for accessing PostgreSQL databases @@ -91,6 +91,14 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Fri Oct 16 2009 Richard W.M. Jones - 1.12.3-1 +- New upstream version 1.12.3. +- This contains a SECURITY fix for: + https://bugzilla.redhat.com/show_bug.cgi?id=529325 + CVE-2009-2943 ocaml-postgresql: Missing escape function (DSA-1909-1) + HOWEVER you are not protected until you change your code to + use the new connection#escape_string method. + * Tue Mar 10 2009 Richard W.M. Jones - 1.10.3-1 - New upstream version 1.10.3. - Fix URL. diff --git a/sources b/sources index 43a9eb0..8a8b074 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -ebac79d610e5be1cfb39b69be2865e5d release-1.10.3.tar.bz2 +64d6fdc1a23dc3315c61771f1d28f592 release-1.12.3.tar.bz2