DSA-165-1 postgresql -- buffer overflows

Debian Security Advisory

DSA-165-1 postgresql -- buffer overflows

Date Reported:

12 Sep 2002

Affected Packages:

postgresql

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2002-0972, CVE-2002-1398, CVE-2002-1400, CVE-2002-1401, CVE-2002-1402.

More information:

Mordred Labs and others found several vulnerabilities in PostgreSQL, an object-relational SQL database. They are inherited from several buffer overflows and integer overflows. Specially crafted long date and time input, currency, repeat data and long timezone names could cause the PostgreSQL server to crash as well as specially crafted input data for lpad() and rpad(). More buffer/integer overflows were found in circle_poly(), path_encode() and path_addr().

Except for the last three, these problems are fixed in the upstream release 7.2.2 of PostgreSQL which is the recommended version to use.

Most of these problems do not exist in the version of PostgreSQL that Debian ships in the potato release since the corresponding functionality is not yet implemented. However, PostgreSQL 6.5.3 is quite old and may bear more risks than we are aware of, which may include further buffer overflows, and certainly include bugs that threaten the integrity of your data.

You are strongly advised not to use this release but to upgrade your system to Debian 3.0 (stable) including PostgreSQL release 7.2.1 instead, where many bugs have been fixed and new features introduced to increase compatibility with the SQL standards.

If you consider an upgrade, please make sure to dump the entire database system using the pg_dumpall utility. Please take into consideration that the newer PostgreSQL is more strict in its input handling. This means that tests like "foo = NULL" which are not valid won't be accepted anymore. It also means that when using UNICODE encoding, ISO 8859-1 and ISO 8859-15 are no longer valid encodings to use when inserting data into the relation. In such a case you are advised to convert the dump in question using recode latin1..utf-16.

These problems have been fixed in version 7.2.1-2woody2 for the current stable distribution (woody) and in version 7.2.2-2 for the unstable distribution (sid). The old stable distribution (potato) is partially affected and we ship a fixed version 6.5.3-27.2 for it.

We recommend that you upgrade your PostgreSQL packages.

Fixed in:

Debian GNU/Linux 2.2 (potato)

Source:

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_6.5.3-27.2.dsc

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_6.5.3-27.2.diff.gz

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_6.5.3.orig.tar.gz

Architecture-independent component:

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-doc_6.5.3-27.2_all.deb

Alpha:

http://security.debian.org/pool/updates/main/p/postgresql/ecpg_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-pl_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-test_6.5.3-27.2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_6.5.3-27.2_alpha.deb

ARM:

http://security.debian.org/pool/updates/main/p/postgresql/ecpg_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-pl_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-test_6.5.3-27.2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_6.5.3-27.2_arm.deb

Intel IA-32:

http://security.debian.org/pool/updates/main/p/postgresql/ecpg_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-pl_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-test_6.5.3-27.2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_6.5.3-27.2_i386.deb

Motorola 680x0:

http://security.debian.org/pool/updates/main/p/postgresql/ecpg_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-pl_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-test_6.5.3-27.2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_6.5.3-27.2_m68k.deb

PowerPC:

http://security.debian.org/pool/updates/main/p/postgresql/ecpg_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-pl_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-test_6.5.3-27.2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_6.5.3-27.2_powerpc.deb

Sun Sparc:

http://security.debian.org/pool/updates/main/p/postgresql/ecpg_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-pl_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-test_6.5.3-27.2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_6.5.3-27.2_sparc.deb

Debian GNU/Linux 3.0 (woody)

Source:

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2.dsc

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2.diff.gz

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1.orig.tar.gz

Architecture-independent component:

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-doc_7.2.1-2woody2_all.deb

Alpha:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_alpha.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_alpha.deb

ARM:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_arm.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_arm.deb

Intel IA-32:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_i386.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_i386.deb

Intel IA-64:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_ia64.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_ia64.deb

HP Precision:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_hppa.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_hppa.deb

Motorola 680x0:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_m68k.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_m68k.deb

Big endian MIPS:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_mips.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_mips.deb

Little endian MIPS:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_mipsel.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_mipsel.deb

PowerPC:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_powerpc.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_powerpc.deb

IBM S/390:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_s390.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_s390.deb

Sun Sparc:

http://security.debian.org/pool/updates/main/c/courier-ssl/courier-authpostgresql_0.37.3-3.1_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libecpg3_7.2.1-2woody2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgperl_7.2.1-2woody2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgsql2_7.2.1-2woody2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/libpgtcl_7.2.1-2woody2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/odbc-postgresql_7.2.1-2woody2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/pgaccess_7.2.1-2woody2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql_7.2.1-2woody2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-client_7.2.1-2woody2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-contrib_7.2.1-2woody2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/postgresql-dev_7.2.1-2woody2_sparc.deb

http://security.debian.org/pool/updates/main/p/postgresql/python-pygresql_7.2.1-2woody2_sparc.deb

MD5 checksums of the listed files are available in the original advisory.