The PostgreSQL Global Development Group today released security updates for all active branches of the PostgreSQL database system, including versions 9.1.4, 9.0.8, 8.4.12 and 8.3.19.

Users of the crypt(text, text) function with DES encryption in the optional pgcrypto module should upgrade their installations immediately. All other database administrators are urged to upgrade your version of PostgreSQL at the next scheduled downtime. More details on the security fixes are included below.

This release contains 42 fixes to version 9.1, and a smaller number of fixes to older versions, including:

• Fix citext upgrade script for collations of citext arrays and domains over citext
• Fixes for timezone handling
• Fix text or char to name casts to perform string truncation correctly in multibyte encodings
• Fix memory copying bug in to_tsquery()
• Ensure txid_current() reports the correct epoch when executed in hot standby
• Fix planner’s handling of sub-SELECTS referencing variables coming from the nullable side of an outer join of the surrounding query
• Fix planning of UNION ALL subqueries with output columns that are not simple variables
• Fix slow session startup when pg_attribute is very large
• Ensure sequential scans check for query cancel reasonably often
• Show whole-row variables safely when printing views or rules
• Fix COPY FROM to properly handle null marker strings that correspond to invalid encoding
• Fix EXPLAIN VERBOSE for writable CTEs containing RETURNING clauses
• Fix PREPARE TRANSACTION to work correctly in the presence of advisory locks
• Fix bugs with temporary or transient tables used in extension scripts
• Ensure autovacuum worker processes perform stack depth checking properly
• Fix logging collector to not lose log coherency under high load
• Fix logging collector to ensure it will restart file rotation after receiving SIGHUP
• Fix WAL replay logic for GIN indexes to not fail if the index was subsequently dropped
• Avoid synchronous replication delay when committing a transaction that only modified temporary tables

As with other minor releases, users are not required to dump and reload their database or use pg_upgrade in order to apply this update release; you may simply shut down PostgreSQL and update its binaries. Perform post-update steps after the database is restarted. If you use the citext data type, and you upgraded from a previous major release by running pg_upgrade, please see the release notes for 9.1.4 for important post-upgrade steps.

This update includes two security fixes for the following issues:

• CVE-2012-2143: Fix incorrect password transformation in contrib/pgcrypto’s DES crypt() function

This vulnerability affects PostgreSQL users who use the crypt(text, text) function (in the optional pgcrypto module) with DES encryption and non-ASCII passwords. Passwords affected are those that contain the byte value 0x80. Characters after such a byte were ignored, making the effective password shorter and easier to crack than it should be. After the upgrade, any passwords containing such bytes will need to be regenerated.

• CVE-2012-2655: Ignore SECURITY DEFINER and SET attributes for a procedural language’s call handler

Applying such attributes to a call handler could crash the server.

All supported versions of PostgreSQL are affected. See the release notes for each version for a full list of changes with details of the fixes and steps.

Download new versions now at the main download page.

REDMOND , W ash. — June 1, 2012 — Microsoft Corp. today announced the availability of the Windows Upgrade Offer for consumers purchasing a qualifying new Windows 7 PC. The Windows Upgrade Offer provides consumers who buy an eligible Windows 7 PC the option to purchase a downloadable upgrade to Windows 8 Pro for an estimated retail price of just $14.99 (U.S.) during the time of the promotion, which will be redeemable when Windows 8 is generally available. The Windows Upgrade Offer is just the first of many consumer offers that will roll out in conjunction with the general availability of Windows 8.

“We’ve seen a great interest in Windows 8, especially given the availability of the Windows 8 Release Preview this week, and yet we know many consumers want a new PC now,” said Tami Reller, chief marketing officer and chief financial officer of Windows at Microsoft. “The Windows Upgrade Offer gives people the flexibility to purchase the new Windows 7 PC they need today, with the knowledge they can easily get Windows 8 when it’s available.”

This program begins tomorrow in 131 markets including the U.S. and Canada and is available for consumers buying new Windows 7 PCs that are preinstalled with Windows 7 Home Basic, Home Premium, Professional or Ultimate and include a matching and valid OEM Certificate of Authenticity. The Windows 7 PC must be purchased new during the eligibility period June 2, 2012–Jan. 31, 2013, and redeemed before the program expiration at the end of February 2013. Consumers who register for the Windows Upgrade Offer will be able to download Windows 8 starting the day it is made available generally. The upgrade can be installed on any eligible and compatible Windows PC and comes with 90 days of support from Microsoft.

More information on taking advantage of the Windows Upgrade Offer can be found by visiting http://www.windowsupgradeoffer.com. More information about Windows 8 is available at http://windowsteamblog.com.

Founded in 1975, Microsoft (Nasdaq “MSFT”) is the worldwide leader in software, services and solutions that help people and businesses realize their full potential.

Some information relates to a prerelease product, which may be substantially modified before it is commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

Note to editors : For more information, news and perspectives from Microsoft, please visit the Microsoft News Center at http://www.microsoft.com/news. Web links, telephone numbers and titles were correct at time of publication, but may have changed. For additional assistance, journalists and analysts may contact Microsoft’s Rapid Response Team or other appropriate contacts listed at http://www.microsoft.com/news/contactpr.mspx.

REDMOND, Wash. — June 1, 2012 — Microsoft Corp. today announced the availability of the Windows Upgrade Offer providing consumers who buy qualifying Windows 7 PCs the option to purchase a downloadable upgrade to Windows 8 Pro for an estimated retail price of $14.99 (U.S.) during the time of the promotion.

Beginning June 2, 2012, consumers who purchase up to five new Windows 7 PCs preinstalled with Windows 7 Home Basic, Home Premium, Professional, or Ultimate will be eligible to purchase an upgrade to Windows 8 Pro upon general availability of Windows 8. Qualifying purchases must be made before January 31, 2013, and offers must be redeemed by February 28, 2013.

For additional details on the Windows Upgrade Offer, please see the company’s announcement at http://www.windowsupgradeoffer.com.

Unlike previous upgrade programs, Microsoft will manage the redemption process, including eligibility verification, payment, software delivery, and support. Delivery of Windows 8 Pro will occur via electronic software distribution.

In association with the Windows Upgrade Offer, Microsoft will defer revenue from eligible sales under the program to the earlier of the fulfillment date or the program’s expiration date. For the fourth quarter of fiscal year 2012, Microsoft will defer an estimated $450 million to $550 million of revenue. The deferral only impacts the timing of revenue recognition and will not impact cash flows from operations.

Microsoft Investor Relations will host a conference call and webcast at 9:00 a.m. PDT today to discuss details of the accounting treatment for the program. The conference call will be hosted by Frank Brod, chief accounting officer, and Bill Koefoed, general manager of Investor Relations, and will be made available on the Microsoft Investor Relations website.

About Microsoft

Founded in 1975, Microsoft (Nasdaq “MSFT”) is the worldwide leader in software, services and solutions that help people and businesses realize their full potential.

Forward-Looking Statements

Statements in this release that are “forward-looking statements” are based on current expectations and assumptions that are subject to risks and uncertainties. Actual results could differ materially because of factors such as:

• execution and competitive risks in transitioning to cloud-based computing;

• challenges to Microsoft’s business model;

• intense competition in all of Microsoft’s markets;

• Microsoft’s continued ability to protect its intellectual property rights;

• claims that Microsoft has infringed the intellectual property rights of others;

• the possibility of unauthorized disclosure of significant portions of Microsoft’s source code;

• actual or perceived security vulnerabilities in Microsoft products that could reduce revenue or lead to liability;

• improper disclosure of personal data that could result in liability and harm to Microsoft’s reputation;

• outages and disruptions of services provided to customers directly or through third parties if Microsoft fails to maintain an adequate operations infrastructure;

• government litigation and regulation affecting how Microsoft designs and markets its products;

• Microsoft’s ability to attract and retain talented employees;

• delays in product development and related product release schedules;

• significant business investments that may not gain customer acceptance and produce offsetting increases in revenue;

• unfavorable changes in general economic conditions, disruption of our partner networks or sales channels, or the availability of credit that affect demand for Microsoft’s products and services or the value of our investment portfolio;

• adverse results in legal disputes;

• unanticipated tax liabilities;

• quality or supply problems in Microsoft’s consumer hardware or other vertically integrated hardware and software products;

• impairment of goodwill or amortizable intangible assets causing a charge to earnings;

• exposure to increased economic and regulatory uncertainties from operating a global business;

• geopolitical conditions, natural disaster, cyberattack or other catastrophic events disrupting Microsoft’s business; and

• acquisitions, joint ventures and strategic alliances that adversely affect the business.

For further information regarding risks and uncertainties associated with Microsoft’s business, please refer to the “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and “Risk Factors” sections of Microsoft’s SEC filings, including, but not limited to, its annual report on Form 10-K and quarterly reports on Form 10-Q, copies of which may be obtained by contacting Microsoft’s Investor Relations department at (800) 285-7772 or at Microsoft’s Investor Relations website at http://www.microsoft.com/investor/.

All information in this release is as of June 1, 2012. The company undertakes no duty to update any forward-looking statement to conform the statement to actual results or changes in the company’s expectations.

For more information, press only:

Rapid Response Team, Waggener Edstrom Worldwide, (503) 443-7070, rrt@waggeneredstrom.com

For more information, financial analysts and investors only:

Bill Koefoed, general manager, Investor Relations, (425) 706-4400

Note to editors: For more information, news and perspectives from Microsoft, please visit the Microsoft News Center at http://www.microsoft.com/news/. Web links, telephone numbers and titles were correct at time of publication, but may since have changed. Shareholder and financial information, as well as today’s 9:00 a.m. PDT conference call with investors and analysts, is available at http://www.microsoft.com/investor/.