2018-03-01 Security Update Release

The PostgreSQL Global Development Group has released an update to all supported
versions of the PostgreSQL database system, including 10.3, 9.6.8, 9.5.12,
9.4.17, and 9.3.22.

The purpose of this release is to address CVE-2018-1058, which describes how a
user can create like-named objects in different schemas that can change the
behavior of other users' queries and cause unexpected or malicious behavior,
also known as a "trojan-horse" attack. Most of this release centers around added
documentation that describes the issue and how to take steps to mitigate the
impact on PostgreSQL databases.

We strongly encourage all of our users to please visit
https://wiki.postgresql.org/wiki/A_Guide_to_CVE-2018-1058:_Protect_Your_Search_Path
for a detailed explanation of CVE-2018-1058 and how to protect your PostgreSQL
installations.

After evaluating the documentation for CVE-2018-1058, a database administrator
may need to take follow up steps on their PostgreSQL installations to ensure
they are protected from exploitation.

Security:	CVE-2018-1058

4 files changed, 21 insertions, 4 deletions

diff --git a/databases/postgresql10-server/Makefile b/databases/postgresql10-server/Makefile
index 2f0d2b79f882..c3e057537a04 100644
--- a/databases/postgresql10-server/Makefile
+++ b/databases/postgresql10-server/Makefile
@@ -2,7 +2,7 @@
 # $FreeBSD$
 
 PORTNAME?=	postgresql
-DISTVERSION?=	10.2
+DISTVERSION?=	10.3
 PORTREVISION?=	0
 CATEGORIES?=	databases
 MASTER_SITES=	PGSQL/source/v${DISTVERSION}
diff --git a/databases/postgresql10-server/distinfo b/databases/postgresql10-server/distinfo
index fac6cf7215da..cb3f2db9121f 100644
--- a/databases/postgresql10-server/distinfo
+++ b/databases/postgresql10-server/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1518110073
-SHA256 (postgresql/postgresql-10.2.tar.bz2) = fe32009b62ddb97f7f014307ce9d0edb6972f5a698e63cb531088e147d145bad
-SIZE (postgresql/postgresql-10.2.tar.bz2) = 19901836
+TIMESTAMP = 1519720433
+SHA256 (postgresql/postgresql-10.3.tar.bz2) = 6ea268780ee35e88c65cdb0af7955ad90b7d0ef34573867f223f14e43467931a
+SIZE (postgresql/postgresql-10.3.tar.bz2) = 19959653
diff --git a/databases/postgresql10-server/pkg-plist-client b/databases/postgresql10-server/pkg-plist-client
index 80bebac22052..21a53cc8f467 100644
--- a/databases/postgresql10-server/pkg-plist-client
+++ b/databases/postgresql10-server/pkg-plist-client
@@ -309,6 +309,7 @@ include/postgresql/server/executor/tablefunc.h
 include/postgresql/server/executor/tqueue.h
 include/postgresql/server/executor/tstoreReceiver.h
 include/postgresql/server/executor/tuptable.h
+include/postgresql/server/fe_utils/connect.h
 include/postgresql/server/fe_utils/mbprint.h
 include/postgresql/server/fe_utils/print.h
 include/postgresql/server/fe_utils/psqlscan.h
@@ -1048,6 +1049,7 @@ man/man7/WITH.7.gz
 %%NLS%%share/locale/ja/LC_MESSAGES/pg_config-10.mo
 %%NLS%%share/locale/ja/LC_MESSAGES/pg_dump-10.mo
 %%NLS%%share/locale/ja/LC_MESSAGES/pgscripts-10.mo
+%%NLS%%share/locale/ja/LC_MESSAGES/psql-10.mo
 %%NLS%%share/locale/ko/LC_MESSAGES/ecpg-10.mo
 %%NLS%%share/locale/ko/LC_MESSAGES/ecpglib6-10.mo
 %%NLS%%share/locale/ko/LC_MESSAGES/libpq5-10.mo
@@ -1091,6 +1093,7 @@ man/man7/WITH.7.gz
 %%NLS%%share/locale/tr/LC_MESSAGES/libpq5-10.mo
 %%NLS%%share/locale/tr/LC_MESSAGES/pg_config-10.mo
 %%NLS%%share/locale/tr/LC_MESSAGES/pg_dump-10.mo
+%%NLS%%share/locale/tr/LC_MESSAGES/pgscripts-10.mo
 %%NLS%%share/locale/zh_CN/LC_MESSAGES/ecpg-10.mo
 %%NLS%%share/locale/zh_CN/LC_MESSAGES/ecpglib6-10.mo
 %%NLS%%share/locale/zh_CN/LC_MESSAGES/libpq5-10.mo
diff --git a/databases/postgresql10-server/pkg-plist-server b/databases/postgresql10-server/pkg-plist-server
index a125d0bf0fa5..62f8a27e1cdd 100644
--- a/databases/postgresql10-server/pkg-plist-server
+++ b/databases/postgresql10-server/pkg-plist-server
@@ -87,6 +87,7 @@ lib/libpgcommon.a
 %%NLS%%share/locale/es/LC_MESSAGES/pg_rewind-10.mo
 %%NLS%%share/locale/es/LC_MESSAGES/pg_test_fsync-10.mo
 %%NLS%%share/locale/es/LC_MESSAGES/pg_test_timing-10.mo
+%%NLS%%share/locale/es/LC_MESSAGES/pg_waldump-10.mo
 %%NLS%%share/locale/es/LC_MESSAGES/plpgsql-10.mo
 %%NLS%%share/locale/es/LC_MESSAGES/postgres-10.mo
 %%NLS%%share/locale/fr/LC_MESSAGES/initdb-10.mo
@@ -113,10 +114,16 @@ lib/libpgcommon.a
 %%NLS%%share/locale/it/LC_MESSAGES/plpgsql-10.mo
 %%NLS%%share/locale/it/LC_MESSAGES/postgres-10.mo
 %%NLS%%share/locale/ja/LC_MESSAGES/initdb-10.mo
+%%NLS%%share/locale/ja/LC_MESSAGES/pg_archivecleanup-10.mo
+%%NLS%%share/locale/ja/LC_MESSAGES/pg_basebackup-10.mo
 %%NLS%%share/locale/ja/LC_MESSAGES/pg_controldata-10.mo
 %%NLS%%share/locale/ja/LC_MESSAGES/pg_ctl-10.mo
 %%NLS%%share/locale/ja/LC_MESSAGES/pg_resetwal-10.mo
 %%NLS%%share/locale/ja/LC_MESSAGES/pg_rewind-10.mo
+%%NLS%%share/locale/ja/LC_MESSAGES/pg_test_fsync-10.mo
+%%NLS%%share/locale/ja/LC_MESSAGES/pg_test_timing-10.mo
+%%NLS%%share/locale/ja/LC_MESSAGES/pg_upgrade-10.mo
+%%NLS%%share/locale/ja/LC_MESSAGES/pg_waldump-10.mo
 %%NLS%%share/locale/ja/LC_MESSAGES/plpgsql-10.mo
 %%NLS%%share/locale/ko/LC_MESSAGES/initdb-10.mo
 %%NLS%%share/locale/ko/LC_MESSAGES/pg_archivecleanup-10.mo
@@ -175,11 +182,18 @@ lib/libpgcommon.a
 %%NLS%%share/locale/sv/LC_MESSAGES/pg_waldump-10.mo
 %%NLS%%share/locale/sv/LC_MESSAGES/plpgsql-10.mo
 %%NLS%%share/locale/sv/LC_MESSAGES/postgres-10.mo
+%%NLS%%share/locale/tr/LC_MESSAGES/initdb-10.mo
 %%NLS%%share/locale/tr/LC_MESSAGES/pg_archivecleanup-10.mo
 %%NLS%%share/locale/tr/LC_MESSAGES/pg_basebackup-10.mo
+%%NLS%%share/locale/tr/LC_MESSAGES/pg_controldata-10.mo
+%%NLS%%share/locale/tr/LC_MESSAGES/pg_ctl-10.mo
+%%NLS%%share/locale/tr/LC_MESSAGES/pg_resetwal-10.mo
+%%NLS%%share/locale/tr/LC_MESSAGES/pg_rewind-10.mo
 %%NLS%%share/locale/tr/LC_MESSAGES/pg_test_fsync-10.mo
+%%NLS%%share/locale/tr/LC_MESSAGES/pg_test_timing-10.mo
 %%NLS%%share/locale/tr/LC_MESSAGES/pg_upgrade-10.mo
 %%NLS%%share/locale/tr/LC_MESSAGES/pg_waldump-10.mo
+%%NLS%%share/locale/tr/LC_MESSAGES/plpgsql-10.mo
 %%NLS%%share/locale/tr/LC_MESSAGES/postgres-10.mo
 %%NLS%%share/locale/zh_CN/LC_MESSAGES/initdb-10.mo
 %%NLS%%share/locale/zh_CN/LC_MESSAGES/pg_controldata-10.mo