FreeBSD ports tree https://cgit-dev.freebsd.org/ports/atom?h=release%2F8.0.0 2009-03-18T15:13:39Z 2009-03-18T15:13:39Z Palle Girgensohn girgen@FreeBSD.org 2009-03-18T15:13:39Z urn:sha1:e6109cdbcf9ebe450a8567e9bc392d8ed8b60748 The PostgreSQL Project today released minor versions updating all active branches of the PostgreSQL object-relational database system, including versions 8.3.7, 8.2.13, 8.1.17, 8.0.21 and 7.4.25. This release fixes a denial of service issue with encoding conversion, and all users should update their installations at the next reasonable opportunity. There are 12 other minor fixes contained in these update releases, including fixes for xpath() functions in version 8.3. See the release notes for full details. URL: http://www.postgresql.org/docs/8.3/static/release-8-3-7.html URL: http://www.postgresql.org/docs/8.2/static/release-8-2-13.html URL: http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-17 URL: http://www.postgresql.org/docs/8.0/static/release.html#RELEASE-8-0-21 URL: http://www.postgresql.org/docs/7.4/static/release.html#RELEASE-7-4-24 2009-02-10T11:59:15Z Palle Girgensohn girgen@FreeBSD.org 2009-02-10T11:59:15Z urn:sha1:4faeb886a5b489d9c68a0dd15ae8faf2e3e72545 URL: http://www.postgresql.org/about/news.1055 The PostgreSQL Project today released updates to all active branches of the PostgreSQL object-relational database system, including versions 8.3.6, 8.2.12, 8.1.16, 8.0.20 and 7.4.24. These updates include two serious fixes, for autovacuum crashes in version 8.1 and GiST indexing data loss in 8.3, and those two versions should be updated as soon as possible. These update releases also include patches for several low-risk security holes, as well as up to 17 other minor fixes, depending on your major version of PostgreSQL. Included as well are Daylight Savings Time changes for Nepal, Switzerland and Cuba. See the release notes for full details. The first serious issue affects users who are using version 8.1 with Autovacuum, which will fail when XID rollover is required. The second serious issue can cause data loss when CLUSTER is used with GiST indexes (such as full text indexes) on version 8.3. Both issues are fixed in these releases. 2008-11-07T09:49:49Z Palle Girgensohn girgen@FreeBSD.org 2008-11-07T09:49:49Z urn:sha1:978e3de48fd8491061803765cdc592ab234edd46 http://www.postgresql.org/docs/current/static/release-8-3-5.html http://www.postgresql.org/docs/current/static/release-8-2-11.html http://www.postgresql.org/docs/current/static/release-8-1-15.html http://www.postgresql.org/docs/current/static/release-8-0-19.html http://www.postgresql.org/docs/current/static/release-7-4-23.html Note that the GiST problem mentioned does not apply to users of the FreeBSD port, since the previous version of PostgreSQL never reached the ports tree, due to the freeze of the tree pending the FreeBSD 7.1 update. PR: 121848, 124713 2008-06-12T23:46:07Z Palle Girgensohn girgen@FreeBSD.org 2008-06-12T23:46:07Z urn:sha1:89025407ac8aa413884e5a33322957c188ca0a40 Updates for all maintained versions of PostgreSQL are available today: 8.3.3, 8.2.9, 8.1.13, 8.0.17 and 7.4.21. These releases fix more than two dozen minor issues reported and patched over the last few months. All PostgreSQL users should plan to update at their earliest convenience. People in affected time zones, in particular, should upgrade as soon as possible. Release Notes: http://www.postgresql.org/docs/8.3/static/release.html Also, fix umask error in periodic script [1]. PR: ports/124457 [1] Submitted by: Alexandre Perrin 2008-03-25T04:35:50Z Edwin Groothuis edwin@FreeBSD.org 2008-03-25T04:35:50Z urn:sha1:68086583ebef19059934a41eeae7116e52e9340b 2008-01-08T12:32:10Z Palle Girgensohn girgen@FreeBSD.org 2008-01-08T12:32:10Z urn:sha1:07e04baf8df373cb19b3427146a4e08f4aa50c6f 2008-01-07T20:41:37Z Palle Girgensohn girgen@FreeBSD.org 2008-01-07T20:41:37Z urn:sha1:45ad3569230dd98b4dcde28da27617467be04f82 2008-01-07T13:51:57Z Palle Girgensohn girgen@FreeBSD.org 2008-01-07T13:51:57Z urn:sha1:1d25499d3df3bf1af37d63c037d37cfa4f33e952 This includes a bunch of security fixes: CVE-2007-6067, CVE-2007-4772, CVE-2007-6601, CVE-2007-6600 and CVE-2007-4769. Security: http://www.postgresql.org/about/news.905 2007-09-17T16:45:00Z Palle Girgensohn girgen@FreeBSD.org 2007-09-17T16:45:00Z urn:sha1:9d6b68248f2bed40cb10387e7fb28b67c6afa75c PR: ports/104075 2007-04-23T16:10:54Z Palle Girgensohn girgen@FreeBSD.org 2007-04-23T16:10:54Z urn:sha1:0460921154a83d30802fb47542396c669821a8c0 The PostgreSQL Global Development Group has released updated versions for PostgreSQL 8.2 and all back versions to patch a privilege escalation exploit in SECURITY DEFINER functions. All users of this feature are urged to update to the latest minor version and follow instructions on securing these functions as soon as possible. This minor release also contains other fixes, so all users should plan to deploy it. Once you have updated, additional steps are required to secure your database against the exploit. Please read the release notes at http://www.postgresql.org/docs/8.2/static/release.html and the TechDocs article at http://www.postgresql.org/docs/techdocs.77 on how to lock down your security definer functions, if you use them. As always, application of a minor release does not require a dump and reload of the database. The frequency of security fixes recently is a result of increased scrutiny of the PostgreSQL code by government agencies and security-conscious companies. Rapid turnaround on security patches is key to keeping PostgreSQL the most secure SQL database. Your work and vigilance in applying the latest security updates ensures that there will never be a PostgreSQL "worm". http://www.postgresql.org/docs/8.2/static/release-8-2-4.html http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-9 http://www.postgresql.org/docs/8.0/static/release.html#RELEASE-8-0-13 http://www.postgresql.org/docs/7.4/static/release.html#RELEASE-7-4-17 http://www.postgresql.org/docs/techdocs.77 Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2138