Critical Updates for PostgreSQL Database System Released

WebKnowHow
Wednesday, May 24, 2006; 06:30 AM

The PostgreSQL Global Development Group (GDG) released versions 8.1.4, 8.0.8, 7.4.13 and 7.3.15. This is an urgent update to close a serious security hole which can permit a SQL injection attack on some applications running PostgreSQL.

Users are urged to apply the update as soon as reasonably possible. Since the update affects client functionality, most driver projects will be updating this week as well.

Because the security issue involved is complex, Postgre GDG added a section on their website to explain it ( http://www.postgresql.org/docs/techdocs.52 ).

PostgreSQL is a free object-relational database server,  released under a flexible BSD-style license. It offers an alternative to other open-source database systems (such as MySQL and Firebird), as well as to proprietary systems such as Oracle, Sybase, IBM's DB2 and Microsoft SQL Server.  PostgreSQL is not controlled by any single company, but relies on a global community of developers and companies to develop it.