Ubuntu
pike7.2 package

  1. Bug #58169
  2. Comment #9

Comment 9 for bug 58169

Revision history for this message
Martin Pitt (pitti) wrote : Re: CVE-2006-4041: Pike Unspecified SQL Injection Vulnerability

pike7.6 (7.6.61-1ubuntu2.1) dapper-security; urgency=low

  * SECURITY UPDATE: SQL injections were possible via the postgres module.
  * Add 'debian/patches/10_postgres_string_quoting.diff' to add string
    quoting.
  * References
    http://pike.ida.liu.se/development/cvs/pike.xml?between=2006-05-24&and=2006-06-07
    CVE-2006-4041

 -- Kees Cook <email address hidden> Tue, 17 Oct 2006 13:12:03 -0700