Security Advisories (2)
CVE-2009-1341 (2009-04-30)

Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.

CVE-2012-1151 (2012-09-09)

Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.

Changes for version 0.94

  • applied patch from Rudy Lippan <almighty@randomc.com> which fixes a memory-leak with failed connections.
  • applied patch from Hein Roehrig <hein@acm.org> which fixes a bug with escaping a backslash except for octal presentation
  • applied patch from Francis J. Lacoste <francis.lacoste@iNsu.COM which fixes a segmentation fault when all binded parameters are NULL
  • adapt test.pl to avoid warnings with postgresql-7.0
  • added support for 'COPY FROM STDIN' and 'COPY TO STDOUT'
  • added patch from Mark Stosberg <mark@summersault.com> to enhance the table_attributes subroutine

Documentation

PostgreSQL database driver for the DBI module

Modules

PostgreSQL database driver for the DBI module

Provides

in Pg.pm
in Pg.pm
in Pg.pm

Examples