FreeBSD ports tree https://cgit-dev.freebsd.org/ports/atom?h=2016Q3 2016-08-30T11:12:22Z 2016-08-30T11:12:22Z Palle Girgensohn girgen@FreeBSD.org 2016-08-30T11:12:22Z urn:sha1:d50dadd11dd6d6e869a76590b3d91aa7a076e242 Approved by: ports-secteam@ 2016-08-24T14:30:47Z Mark Felder feld@FreeBSD.org 2016-08-24T14:30:47Z urn:sha1:29de818549a8b4350d60c0a7176c4129fe47d6f8 The PostgreSQL Global Development Group has released an update to all supported versions of our database system, including 9.5.4, 9.4.9, 9.3.14, 9.2.18 and 9.1.23. This release fixes two security issues. It also patches a number of other bugs reported over the last three months. Users who rely on security isolation between database users should update as soon as possible. Other users should plan to update at the next convenient downtime. If you are using the ICU patch, please consult UPDATING. Improve periodic cleanup, suggested by claudius (at) ambtec.de. [1] PR: 210941 [1] Security: CVE-2016-5423, CVE-2016-5424 Approved by: ports-secteam (with hat) 2016-06-17T23:28:04Z Mathieu Arnold mat@FreeBSD.org 2016-06-17T23:28:04Z urn:sha1:1a8a092d9fefcbd7f960c82c59802c61807867a6 While there, run make makepatch on affected ports, and rename patches accordingly. Sponsored by: Absolight 2016-05-19T11:09:14Z Dmitry Marakasov amdmi3@FreeBSD.org 2016-05-19T11:09:14Z urn:sha1:e87a8bd319cefd3a75d9d061fe9ac6bad980b0db Approved by: portmgr blanket 2016-05-12T22:36:10Z Palle Girgensohn girgen@FreeBSD.org 2016-05-12T22:36:10Z urn:sha1:71b54620678ff776dc658f03ada695403280ce37 URL: http://www.postgresql.org/docs/9.5/static/release-9-5-3.html 2016-04-01T14:00:51Z Mathieu Arnold mat@FreeBSD.org 2016-04-01T14:00:51Z urn:sha1:4e1b79a0a61f4973df8b4b0864d22086c769e219 With hat: portmgr Sponsored by: Absolight 2016-03-31T14:49:01Z Palle Girgensohn girgen@FreeBSD.org 2016-03-31T14:49:01Z urn:sha1:1b201272e79fe7d0bb509523405e44a27cb3d7ab URL: http://www.postgresql.org/about/news/1656/ 2016-02-13T22:42:04Z Palle Girgensohn girgen@FreeBSD.org 2016-02-13T22:42:04Z urn:sha1:70a06c4f2e2e669f6795dcec5165c0ea83f94e3b Security Fixes for Regular Expressions, PL/Java This release closes security hole CVE-2016-0773, an issue with regular expression (regex) parsing. Prior code allowed users to pass in expressions which included out-of-range Unicode characters, triggering a backend crash. This issue is critical for PostgreSQL systems with untrusted users or which generate regexes based on user input. The update also fixes CVE-2016-0766, a privilege escalation issue for users of PL/Java. Certain custom configuration settings (GUCS) for PL/Java will now be modifiable only by the database superuser URL: http://www.postgresql.org/about/news/1644/ Security: CVE-2016-0773, CVE-2016-0766 2016-01-13T10:36:22Z Palle Girgensohn girgen@FreeBSD.org 2016-01-13T10:36:22Z urn:sha1:a9c901ec2bd7061cb5a9f38c4aa1b4608c00cf1f pg_upgrade. Other where added in 9.5, but the port failed to install them. Make sure they are properly installed by the correct port (-client or -server) [1] Remove unused and hence confusing OSSP_UUID parameters from Makefile [2] Add options to allow user to be set for the backup script in periodic. Add this option only to 9.5 for now. It will be updated to other servers at next regular patch release. [3] The path to perl in hard coded into pgxs/src/Makefile.global which is then installed. Hence, we must depend on perl when that file is installed. Noticed by: Paul Guyot [1] PR: 192387 [2] PR: 172110 [3] PR: 206046 [4] 2015-10-15T14:55:14Z Mathieu Arnold mat@FreeBSD.org 2015-10-15T14:55:14Z urn:sha1:7f0f664d7e0d5fbb1fd0e1cc45d4b413f66c97ae With hat: portmgr Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D3694