FreeBSD ports tree https://cgit-dev.freebsd.org/ports/atom?h=release%2F7.1.0 2008-06-12T23:46:07Z 2008-06-12T23:46:07Z Palle Girgensohn girgen@FreeBSD.org 2008-06-12T23:46:07Z urn:sha1:89025407ac8aa413884e5a33322957c188ca0a40 Updates for all maintained versions of PostgreSQL are available today: 8.3.3, 8.2.9, 8.1.13, 8.0.17 and 7.4.21. These releases fix more than two dozen minor issues reported and patched over the last few months. All PostgreSQL users should plan to update at their earliest convenience. People in affected time zones, in particular, should upgrade as soon as possible. Release Notes: http://www.postgresql.org/docs/8.3/static/release.html Also, fix umask error in periodic script [1]. PR: ports/124457 [1] Submitted by: Alexandre Perrin 2008-06-06T14:17:21Z Edwin Groothuis edwin@FreeBSD.org 2008-06-06T14:17:21Z urn:sha1:090059a2104b9f20d6996143c0d726aaf861788d The affected ports are the ones with gettext as a run-dependency according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT in Makefile (29 of them). PR: ports/124340 Submitted by: edwin@ Approved by: portmgr (pav) 2008-03-20T09:37:21Z Pav Lucistnik pav@FreeBSD.org 2008-03-20T09:37:21Z urn:sha1:026e7e59d0ed7d0547f4bbfeb78ec2d7314e4b7e 2008-01-07T20:41:37Z Palle Girgensohn girgen@FreeBSD.org 2008-01-07T20:41:37Z urn:sha1:45ad3569230dd98b4dcde28da27617467be04f82 2008-01-07T13:51:57Z Palle Girgensohn girgen@FreeBSD.org 2008-01-07T13:51:57Z urn:sha1:1d25499d3df3bf1af37d63c037d37cfa4f33e952 This includes a bunch of security fixes: CVE-2007-6067, CVE-2007-4772, CVE-2007-6601, CVE-2007-6600 and CVE-2007-4769. Security: http://www.postgresql.org/about/news.905 2007-10-17T10:13:01Z Ade Lovett ade@FreeBSD.org 2007-10-17T10:13:01Z urn:sha1:dbd39ca660cafa3d1f2acebf05c86bf17a035ff8 PR: 117086 Tested by: -exp runs 2007-09-17T16:45:00Z Palle Girgensohn girgen@FreeBSD.org 2007-09-17T16:45:00Z urn:sha1:9d6b68248f2bed40cb10387e7fb28b67c6afa75c PR: ports/104075 2007-07-23T09:25:51Z Rong-En Fan rafan@FreeBSD.org 2007-07-23T09:25:51Z urn:sha1:703b5eb18b542fec0e78704ada72142cd2b33175 set --mandir and --infodir in bsd.port.mk for GNU_CONFIGURE PR: ports/111470 Approved by: portmgr Tested by: pointyhat exp run 2007-05-19T20:36:56Z Florent Thoumie flz@FreeBSD.org 2007-05-19T20:36:56Z urn:sha1:d4f0d0048a8755106a4b0445221a19761e746984 - Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}. - Bump PORTREVISION for ports intalling files in ${X11BASE}. 2007-04-23T16:10:54Z Palle Girgensohn girgen@FreeBSD.org 2007-04-23T16:10:54Z urn:sha1:0460921154a83d30802fb47542396c669821a8c0 The PostgreSQL Global Development Group has released updated versions for PostgreSQL 8.2 and all back versions to patch a privilege escalation exploit in SECURITY DEFINER functions. All users of this feature are urged to update to the latest minor version and follow instructions on securing these functions as soon as possible. This minor release also contains other fixes, so all users should plan to deploy it. Once you have updated, additional steps are required to secure your database against the exploit. Please read the release notes at http://www.postgresql.org/docs/8.2/static/release.html and the TechDocs article at http://www.postgresql.org/docs/techdocs.77 on how to lock down your security definer functions, if you use them. As always, application of a minor release does not require a dump and reload of the database. The frequency of security fixes recently is a result of increased scrutiny of the PostgreSQL code by government agencies and security-conscious companies. Rapid turnaround on security patches is key to keeping PostgreSQL the most secure SQL database. Your work and vigilance in applying the latest security updates ensures that there will never be a PostgreSQL "worm". http://www.postgresql.org/docs/8.2/static/release-8-2-4.html http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-9 http://www.postgresql.org/docs/8.0/static/release.html#RELEASE-8-0-13 http://www.postgresql.org/docs/7.4/static/release.html#RELEASE-7-4-17 http://www.postgresql.org/docs/techdocs.77 Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2138