diff options
author | Palle Girgensohn <girgen@FreeBSD.org> | 2023-05-11 15:21:54 +0000 |
---|---|---|
committer | Palle Girgensohn <girgen@FreeBSD.org> | 2023-05-11 15:42:57 +0000 |
commit | 3fd6f200dc8c12022515f7c3f662df148941e261 (patch) | |
tree | 6ed0390bd88d1c57a8ef565d5784227eea0dc903 /databases/postgresql15-server | |
parent | c58dfdc149af7043cb7edbe9d36bf4a9177b8c77 (diff) | |
download | ports-3fd6f200dc8c12022515f7c3f662df148941e261.tar.gz ports-3fd6f200dc8c12022515f7c3f662df148941e261.zip |
databases/postgresql??-server: update to latest version
The PostgreSQL Global Development Group has released an update to all
supported versions of PostgreSQL, including 15.3, 14.8, 13.11, 12.15,
and 11.20. This release fixes two security vulnerabilities over 80 bugs
reported over the last several months.
CVE-2023-2454: CREATE SCHEMA ... schema_element defeats protective search_path changes.
This enabled an attacker having database-level CREATE privilege to
execute arbitrary code as the bootstrap superuser. Database owners have
that right by default, and explicit grants may extend it to other users.
CVE-2023-2455: Row security policies disregard user ID changes after inlining.
While CVE-2016-2193 fixed most interaction between row security and user
ID changes, it missed a scenario involving function inlining. This leads
to potentially incorrect policies being applied in cases where
role-specific policies are used and a given query is planned under one
role and then executed under other roles. This scenario can happen under
security definer functions or when a common user and query is planned
initially and then re-used across multiple SET ROLEs. Applying an
incorrect policy may permit a user to complete otherwise-forbidden reads
and modifications. This affects only databases that have used CREATE
POLICY to define a row security policy.
Security: fbb5a260-f00f-11ed-bbae-6cc21735f730
Security: 4b636f50-f011-11ed-bbae-6cc21735f730
Release-notes: https://www.postgresql.org/docs/release/
Diffstat (limited to 'databases/postgresql15-server')
-rw-r--r-- | databases/postgresql15-server/Makefile | 4 | ||||
-rw-r--r-- | databases/postgresql15-server/distinfo | 6 | ||||
-rw-r--r-- | databases/postgresql15-server/pkg-plist-client | 1 | ||||
-rw-r--r-- | databases/postgresql15-server/pkg-plist-server | 33 |
4 files changed, 28 insertions, 16 deletions
diff --git a/databases/postgresql15-server/Makefile b/databases/postgresql15-server/Makefile index 13c0043bf133..a44c1093df4b 100644 --- a/databases/postgresql15-server/Makefile +++ b/databases/postgresql15-server/Makefile @@ -1,8 +1,8 @@ PORTNAME?= postgresql -DISTVERSION?= 15.2 +DISTVERSION?= 15.3 # PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and # not their own. Probably best to keep it at ?=0 when reset here too. -PORTREVISION?= 1 +PORTREVISION?= 0 CATEGORIES?= databases MASTER_SITES= PGSQL/source/v${DISTVERSION} PKGNAMESUFFIX?= ${PORTVERSION:R}${COMPONENT} diff --git a/databases/postgresql15-server/distinfo b/databases/postgresql15-server/distinfo index dc2176452793..96b03c9c614f 100644 --- a/databases/postgresql15-server/distinfo +++ b/databases/postgresql15-server/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1675791442 -SHA256 (postgresql/postgresql-15.2.tar.bz2) = 99a2171fc3d6b5b5f56b757a7a3cb85d509a38e4273805def23941ed2b8468c7 -SIZE (postgresql/postgresql-15.2.tar.bz2) = 22688379 +TIMESTAMP = 1683631078 +SHA256 (postgresql/postgresql-15.3.tar.bz2) = ffc7d4891f00ffbf5c3f4eab7fbbced8460b8c0ee63c5a5167133b9e6599d932 +SIZE (postgresql/postgresql-15.3.tar.bz2) = 22819107 diff --git a/databases/postgresql15-server/pkg-plist-client b/databases/postgresql15-server/pkg-plist-client index 7af2fbe666c3..d4ff8a8d1d21 100644 --- a/databases/postgresql15-server/pkg-plist-client +++ b/databases/postgresql15-server/pkg-plist-client @@ -1259,6 +1259,7 @@ man/man7/WITH.7.gz %%NLS%%share/locale/ko/LC_MESSAGES/ecpg-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/ecpglib6-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/libpq5-%%PG_VERSION%%.mo +%%NLS%%share/locale/ko/LC_MESSAGES/pg_amcheck-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/pg_config-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/pg_dump-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/pgscripts-%%PG_VERSION%%.mo diff --git a/databases/postgresql15-server/pkg-plist-server b/databases/postgresql15-server/pkg-plist-server index 7b47b3ebfd15..57297e9e3dd4 100644 --- a/databases/postgresql15-server/pkg-plist-server +++ b/databases/postgresql15-server/pkg-plist-server @@ -818,11 +818,15 @@ lib/postgresql/utf8_and_win.so %%NLS%%share/locale/de/LC_MESSAGES/postgres-%%PG_VERSION%%.mo %%NLS%%share/locale/el/LC_MESSAGES/initdb-%%PG_VERSION%%.mo %%NLS%%share/locale/el/LC_MESSAGES/pg_archivecleanup-%%PG_VERSION%%.mo +%%NLS%%share/locale/el/LC_MESSAGES/pg_basebackup-%%PG_VERSION%%.mo +%%NLS%%share/locale/el/LC_MESSAGES/pg_checksums-%%PG_VERSION%%.mo %%NLS%%share/locale/el/LC_MESSAGES/pg_controldata-%%PG_VERSION%%.mo %%NLS%%share/locale/el/LC_MESSAGES/pg_ctl-%%PG_VERSION%%.mo %%NLS%%share/locale/el/LC_MESSAGES/pg_resetwal-%%PG_VERSION%%.mo %%NLS%%share/locale/el/LC_MESSAGES/pg_rewind-%%PG_VERSION%%.mo +%%NLS%%share/locale/el/LC_MESSAGES/pg_test_fsync-%%PG_VERSION%%.mo %%NLS%%share/locale/el/LC_MESSAGES/pg_test_timing-%%PG_VERSION%%.mo +%%NLS%%share/locale/el/LC_MESSAGES/pg_waldump-%%PG_VERSION%%.mo %%NLS%%share/locale/el/LC_MESSAGES/plpgsql-%%PG_VERSION%%.mo %%NLS%%share/locale/es/LC_MESSAGES/initdb-%%PG_VERSION%%.mo %%NLS%%share/locale/es/LC_MESSAGES/pg_archivecleanup-%%PG_VERSION%%.mo @@ -852,9 +856,20 @@ lib/postgresql/utf8_and_win.so %%NLS%%share/locale/fr/LC_MESSAGES/pg_waldump-%%PG_VERSION%%.mo %%NLS%%share/locale/fr/LC_MESSAGES/plpgsql-%%PG_VERSION%%.mo %%NLS%%share/locale/fr/LC_MESSAGES/postgres-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/initdb-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/pg_archivecleanup-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/pg_basebackup-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/pg_checksums-%%PG_VERSION%%.mo %%NLS%%share/locale/it/LC_MESSAGES/pg_controldata-%%PG_VERSION%%.mo %%NLS%%share/locale/it/LC_MESSAGES/pg_ctl-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/pg_resetwal-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/pg_rewind-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/pg_test_fsync-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/pg_test_timing-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/pg_upgrade-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/pg_waldump-%%PG_VERSION%%.mo %%NLS%%share/locale/it/LC_MESSAGES/plpgsql-%%PG_VERSION%%.mo +%%NLS%%share/locale/it/LC_MESSAGES/postgres-%%PG_VERSION%%.mo %%NLS%%share/locale/ja/LC_MESSAGES/initdb-%%PG_VERSION%%.mo %%NLS%%share/locale/ja/LC_MESSAGES/pg_archivecleanup-%%PG_VERSION%%.mo %%NLS%%share/locale/ja/LC_MESSAGES/pg_basebackup-%%PG_VERSION%%.mo @@ -882,22 +897,18 @@ lib/postgresql/utf8_and_win.so %%NLS%%share/locale/ka/LC_MESSAGES/pg_upgrade-%%PG_VERSION%%.mo %%NLS%%share/locale/ka/LC_MESSAGES/pg_waldump-%%PG_VERSION%%.mo %%NLS%%share/locale/ka/LC_MESSAGES/plpgsql-%%PG_VERSION%%.mo +%%NLS%%share/locale/ko/LC_MESSAGES/initdb-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/pg_archivecleanup-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/postgres-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/initdb-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/pg_archivecleanup-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/pg_basebackup-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/pg_checksums-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/pg_resetwal-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/pg_rewind-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/pg_test_fsync-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/pg_test_timing-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/pg_upgrade-%%PG_VERSION%%.mo -%%NLS%%share/locale/it/LC_MESSAGES/pg_waldump-%%PG_VERSION%%.mo +%%NLS%%share/locale/ko/LC_MESSAGES/pg_basebackup-%%PG_VERSION%%.mo +%%NLS%%share/locale/ko/LC_MESSAGES/pg_checksums-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/pg_controldata-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/pg_ctl-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/pg_resetwal-%%PG_VERSION%%.mo +%%NLS%%share/locale/ko/LC_MESSAGES/pg_rewind-%%PG_VERSION%%.mo +%%NLS%%share/locale/ko/LC_MESSAGES/pg_test_fsync-%%PG_VERSION%%.mo +%%NLS%%share/locale/ko/LC_MESSAGES/pg_test_timing-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/pg_upgrade-%%PG_VERSION%%.mo +%%NLS%%share/locale/ko/LC_MESSAGES/pg_waldump-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/plpgsql-%%PG_VERSION%%.mo %%NLS%%share/locale/ko/LC_MESSAGES/postgres-%%PG_VERSION%%.mo %%NLS%%share/locale/pl/LC_MESSAGES/plpgsql-%%PG_VERSION%%.mo |