-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2007-10
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 28 Feb 2007
 Last revised: 28 Feb 2007

 Package: postgresql

 Summary: PostgreSQL denial of service attack

 More information :
    PostgreSQL is an advanced Object-Relational database management system
    (DBMS) that supports almost all SQL constructs

    The postgresql contains a vulnerability that can cause denial of service.

 Impact :
    These vulnerabilities may allow remote attackers to cause denial of service.

  Affected Products:
    - Turbolinux Appliance Server 2.0
    - Turbolinux 10 Server x64 Edition
    - Turbolinux Appliance Server 1.0 Hosting Edition
    - Turbolinux Appliance Server 1.0 Workgroup Edition
    - Turbolinux 10 Server
    - Turbolinux Home
    - Turbolinux 10 F...
    - Turbolinux 10 Desktop
    - Turbolinux Multimedia
    - Turbolinux Personal
    - Turbolinux 8 Server


 <Turbolinux Appliance Server 2.0>

   Source Packages
   Size: MD5

   postgresql-7.4.16-1.src.rpm
     12276643 12c38be18985d98e6d82f231ee47246a

   Binary Packages
   Size: MD5

   postgresql-7.4.16-1.i586.rpm
      1321573 7fae6886592e8991f30e28c3e30b6970
   postgresql-contrib-7.4.16-1.i586.rpm
      3745122 5fa5881d4b97569df7ca352cf5714afc
   postgresql-devel-7.4.16-1.i586.rpm
       859263 3f611fe21e805f1af864ef126986e62e
   postgresql-jdbc-7.4.16-1.i586.rpm
       695937 ed403d69b7f585c0db39035067ecced6
   postgresql-libs-7.4.16-1.i586.rpm
       123572 940d3dca6b7d861355b4189a9861c50f
   postgresql-odbc-7.4.16-1.i586.rpm
       138734 55ae68aef3f7787fbf2d6eb0cf10a92b
   postgresql-perl-7.4.16-1.i586.rpm
       610762 1c206f2997476932f81b77dd069b0d31
   postgresql-python-7.4.16-1.i586.rpm
       414404 3563a9d39e4746c0386c68734da7bd95
   postgresql-server-7.4.16-1.i586.rpm
      2448929 2918e12fd1590520155a79c1d893ec67
   postgresql-tcl-7.4.16-1.i586.rpm
        52811 d4ce0a440c0e4601abb2b326ec6ccea0
   postgresql-tk-7.4.16-1.i586.rpm
        24114 892d5d46e6cbf2b65c28642afb42d2ad

 <Turbolinux 10 Server x64 Edition>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/SRPMS/postgresql-8.0.12-1.src.rpm
     13257308 1a4ee68451f1633e122177ca7f046809

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-8.0.12-1.x86_64.rpm
       620713 c3b4bfda6247883f5043d3cecf4b18a7
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-contrib-8.0.12-1.x86_64.rpm
      4500722 1a716131ed44eba2ff59ad010252c722
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-devel-8.0.12-1.x86_64.rpm
       675476 60cf378776d415485d7ef88ba0be7f4b
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-docs-8.0.12-1.x86_64.rpm
      1264098 ed218e1e7fbd4827cd179760002cced1
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-jdbc-8.0.12-1.x86_64.rpm
       869987 3a2f0f30914d2dc7fe893e4bea03b979
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-libs-8.0.12-1.x86_64.rpm
      2826522 5a17b6dd1400936229490b9aab359b17
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-odbc-8.0.12-1.x86_64.rpm
       171032 25cdf62fa614d06296319dd6188357ea
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-perl-8.0.12-1.x86_64.rpm
       625196 233320ed02558b7d0cf6e91293ade977
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-python-8.0.12-1.x86_64.rpm
       469767 c05e85e11dcd1450ea9f7e9a65bb98eb
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-server-8.0.12-1.x86_64.rpm
      2909526 02b01e74779d80a8681f4470774b52d3
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-tcl-8.0.12-1.x86_64.rpm
        39724 7a212d4a714c0d7ab39f5f0bd78842c1
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-test-8.0.12-1.x86_64.rpm
       999644 adbdafba3e8ceab688bdccfe2a058936
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/postgresql-tk-8.0.12-1.x86_64.rpm
        20734 1e1db87f4d8b9c915349ae974e957a1c

 <Turbolinux Appliance Server 1.0 Hosting Edition>

   Source Packages
   Size: MD5

   postgresql-7.2.2-12.src.rpm
      9635105 3452b1a46cb5765acfa8c514b85ac002

   Binary Packages
   Size: MD5

   postgresql-7.2.2-12.i586.rpm
      1072739 44456ab84c2d2f96a4cb0f86fd008eb7
   postgresql-contrib-7.2.2-12.i586.rpm
       986086 dd346b0ad5ca31233476dc7c5ba0906d
   postgresql-devel-7.2.2-12.i586.rpm
       582523 21e3729cc75553a2417491208da5d224
   postgresql-docs-7.2.2-12.i586.rpm
       948591 8499de2d678d999e1e454eb1e3b058d0
   postgresql-jdbc-7.2.2-12.i586.rpm
       378961 cb3bb04f2b4372d01a2ea8a15bd07e46
   postgresql-libs-7.2.2-12.i586.rpm
        88543 9c6108017899ddd38a855cec592b6cff
   postgresql-odbc-7.2.2-12.i586.rpm
       110149 cd4890b47ca84a6006d4d5dd1f7ac10f
   postgresql-perl-7.2.2-12.i586.rpm
        59917 f30e78d9ba2c11d8cf8be5b78b058485
   postgresql-python-7.2.2-12.i586.rpm
        67698 85c6831836af3e7cac01727f8af3a094
   postgresql-server-7.2.2-12.i586.rpm
      1392807 8a200ba70ace225f0bb7c6d66f481b24
   postgresql-test-7.2.2-12.i586.rpm
       864029 f6942b528fa1b87a45dffdea03d26bc9

 <Turbolinux Appliance Server 1.0 Workgroup Edition>

   Source Packages
   Size: MD5

   postgresql-7.2.2-12.src.rpm
      9635105 8c5b101f7d86e68d75fcbb31449483b6

   Binary Packages
   Size: MD5

   postgresql-7.2.2-12.i586.rpm
      1072962 07d02c608837da213c3cfbbe4ba81170
   postgresql-contrib-7.2.2-12.i586.rpm
       986101 fc0c09e4587c15403c0e9ef82337273b
   postgresql-devel-7.2.2-12.i586.rpm
       582566 d6a33eb424cabb91e437876c780135fc
   postgresql-docs-7.2.2-12.i586.rpm
       948013 7c3bfeadd2b571d834172ff35ae00632
   postgresql-jdbc-7.2.2-12.i586.rpm
       379128 4c15a7e5218fda0cf0b86d190a5710ba
   postgresql-libs-7.2.2-12.i586.rpm
        88728 c8c7c926021c1ea29f3f7ac50e700538
   postgresql-odbc-7.2.2-12.i586.rpm
       110293 5d1eca958cfd8dc3fb0e33a718392f27
   postgresql-perl-7.2.2-12.i586.rpm
        60111 af9ddc86de4c696ae62b8a7d86319f08
   postgresql-python-7.2.2-12.i586.rpm
        67875 55f44271249f2589848112c71ef5903d
   postgresql-server-7.2.2-12.i586.rpm
      1392792 717a60be4b545527e040bf9e4b22cc14
   postgresql-test-7.2.2-12.i586.rpm
       864327 c380379b1113b3ea65ab6832600937b7

 <Turbolinux 10 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/postgresql-7.4.16-1.src.rpm
     12276643 12c38be18985d98e6d82f231ee47246a

   Binary Packages
   Size: MD5

   postgresql-7.4.16-1.i586.rpm
      1321573 7fae6886592e8991f30e28c3e30b6970
   postgresql-contrib-7.4.16-1.i586.rpm
      3745122 5fa5881d4b97569df7ca352cf5714afc
   postgresql-docs-7.4.16-1.i586.rpm
      1084323 9dfa7d11c0652765829f7c380cb52e07
   postgresql-devel-7.4.16-1.i586.rpm
       859263 3f611fe21e805f1af864ef126986e62e
   postgresql-jdbc-7.4.16-1.i586.rpm
       695937 ed403d69b7f585c0db39035067ecced6
   postgresql-libs-7.4.16-1.i586.rpm
       123572 940d3dca6b7d861355b4189a9861c50f
   postgresql-odbc-7.4.16-1.i586.rpm
       138734 55ae68aef3f7787fbf2d6eb0cf10a92b
   postgresql-perl-7.4.16-1.i586.rpm
       610762 1c206f2997476932f81b77dd069b0d31
   postgresql-python-7.4.16-1.i586.rpm
       414404 3563a9d39e4746c0386c68734da7bd95
   postgresql-server-7.4.16-1.i586.rpm
      2448929 2918e12fd1590520155a79c1d893ec67
   postgresql-tcl-7.4.16-1.i586.rpm
        52811 d4ce0a440c0e4601abb2b326ec6ccea0
   postgresql-test-7.4.16-1.i586.rpm
       925498 b505f759fdc44ae48b0bea09381b639b
   postgresql-tk-7.4.16-1.i586.rpm
        24114 892d5d46e6cbf2b65c28642afb42d2ad

 <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/postgresql-7.3-18.src.rpm
     11304086 f84a2d71ca8e686be2d2feebca0c8fcb

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-7.3-18.i586.rpm
      1228398 6982ba6402dcc45f76ce1bdac3d5ea62
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-contrib-7.3-18.i586.rpm
       686975 b5638169426917ae92c075d1e9a13f17
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-devel-7.3-18.i586.rpm
       576056 54cbcc3c18f1da2a2b6d1e4c8705c560
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-docs-7.3-18.i586.rpm
      1075726 d7a392c2e0d75113668c54152989f090
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-libs-7.3-18.i586.rpm
       117697 fb81205c7d0a23a78034fd7399445d7d
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-odbc-7.3-18.i586.rpm
       132059 3f7098804aa4f07fc19e84902005c045
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-perl-7.3-18.i586.rpm
      3019416 417eafef270d70406384cc78b23caf7d
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-python-7.3-18.i586.rpm
        58781 7064cf30213415152df31fcd0adc1186
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-server-7.3-18.i586.rpm
      2272485 e8e7391623582e58c3eb727aceba4af7
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-tcl-7.3-18.i586.rpm
        50269 0376250b2c04468d07dd491bc00e44f7
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-test-7.3-18.i586.rpm
       908901 d5db68372539bdc4897d797bc4be242c
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-tk-7.3-18.i586.rpm
        22621 001b0d647eb02a9167c1a8396b866240

 <Turbolinux 8 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/postgresql-7.2.2-12.src.rpm
      9635105 1028794b9e35128a89f40794cd8bd2c5

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-7.2.2-12.i586.rpm
      1073357 2ba7ce89ccb9ef1d552a27812a10609a
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-contrib-7.2.2-12.i586.rpm
       986409 b779a2e53181274f0e8ef340597742db
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-devel-7.2.2-12.i586.rpm
       582688 409001ae16fb8d7ce28d27de6a9e0384
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-docs-7.2.2-12.i586.rpm
       948020 b6dd12ecdf88b5a12c94b8714678e25d
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-jdbc-7.2.2-12.i586.rpm
       379070 f8690a0581e2f7abe564dd5ab2e2629b
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-libs-7.2.2-12.i586.rpm
        88746 473db3a44f83bc21cf743786faf08a67
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-odbc-7.2.2-12.i586.rpm
       110306 b3c90a387557cf8dca22e660b0090355
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-perl-7.2.2-12.i586.rpm
        60126 200b3ac1355737929690b68e6091eb32
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-python-7.2.2-12.i586.rpm
        67851 5d287a19d9514bafae73c753d7752af8
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-server-7.2.2-12.i586.rpm
      1393626 27a945deb36b7923475a67a87602cee3
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-tcl-7.2.2-12.i586.rpm
        51196 1c717ac101237767977024a32c6927b8
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-test-7.2.2-12.i586.rpm
       864414 58d11c00d47386e2e3f2dc45a25f4938
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-tk-7.2.2-12.i586.rpm
       424925 ade768bb8fe255b031bd6f3eea33e129


 References:

 CVE
   [CVE-2007-0555]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0555
   [CVE-2007-0556]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0556

 --------------------------------------------------------------------------
 Revision History
    28 Feb 2007 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2007 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFF5SwCK0LzjOqIJMwRAr78AJ9f/qjnElPuwh+Eo+vTzhmEp2s2bQCgkGXn
iPuzXGc6RdKUHhN0EKcyzrU=
=HVLD
-----END PGP SIGNATURE-----