diff options
author | adam <adam@pkgsrc.org> | 2013-04-04 21:08:25 +0000 |
---|---|---|
committer | adam <adam@pkgsrc.org> | 2013-04-04 21:08:25 +0000 |
commit | cb7095580ab18262f02e705d5ca622063ac42137 (patch) | |
tree | 80c7435d598076d59e5b3c15db33a97bd3db4769 /databases/postgresql91-docs | |
parent | 5bf004b2cbb9e7c089d7faa3e34b43a29e725d81 (diff) | |
download | pkgsrc-cb7095580ab18262f02e705d5ca622063ac42137.tar.gz |
The PostgreSQL Global Development Group has released a security update to all current versions of the PostgreSQL database system, including versions 9.2.4, 9.1.9, 9.0.13, and 8.4.17. This update fixes a high-exposure security vulnerability in versions 9.0 and later. All users of the affected versions are strongly urged to apply the update immediately.
A major security issue fixed in this release, CVE-2013-1899, makes it possible for a connection request containing a database name that begins with "-" to be crafted that can damage or destroy files within a server's data directory. Anyone with access to the port the PostgreSQL server listens on can initiate this request.
Two lesser security fixes are also included in this release: CVE-2013-1900, wherein random numbers generated by contrib/pgcrypto functions may be easy for another database user to guess, and CVE-2013-1901, which mistakenly allows an unprivileged user to run commands that could interfere with in-progress backups. Finally, this release fixes two security issues with the graphical installers for Linux and Mac OS X: insecure passing of superuser passwords to a script, CVE-2013-1903 and the use of predictable filenames in /tmp CVE-2013-1902.
Diffstat (limited to 'databases/postgresql91-docs')
-rw-r--r-- | databases/postgresql91-docs/PLIST | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/databases/postgresql91-docs/PLIST b/databases/postgresql91-docs/PLIST index 1f8f6131a21..d2d5a4bf984 100644 --- a/databases/postgresql91-docs/PLIST +++ b/databases/postgresql91-docs/PLIST @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.10 2013/02/09 11:19:15 adam Exp $ +@comment $NetBSD: PLIST,v 1.11 2013/04/04 21:08:35 adam Exp $ man/man1/clusterdb.1 man/man1/createdb.1 man/man1/createlang.1 @@ -971,6 +971,7 @@ share/doc/postgresql/html/release-8-4-13.html share/doc/postgresql/html/release-8-4-14.html share/doc/postgresql/html/release-8-4-15.html share/doc/postgresql/html/release-8-4-16.html +share/doc/postgresql/html/release-8-4-17.html share/doc/postgresql/html/release-8-4-2.html share/doc/postgresql/html/release-8-4-3.html share/doc/postgresql/html/release-8-4-4.html @@ -984,6 +985,7 @@ share/doc/postgresql/html/release-9-0-1.html share/doc/postgresql/html/release-9-0-10.html share/doc/postgresql/html/release-9-0-11.html share/doc/postgresql/html/release-9-0-12.html +share/doc/postgresql/html/release-9-0-13.html share/doc/postgresql/html/release-9-0-2.html share/doc/postgresql/html/release-9-0-3.html share/doc/postgresql/html/release-9-0-4.html @@ -1001,6 +1003,7 @@ share/doc/postgresql/html/release-9-1-5.html share/doc/postgresql/html/release-9-1-6.html share/doc/postgresql/html/release-9-1-7.html share/doc/postgresql/html/release-9-1-8.html +share/doc/postgresql/html/release-9-1-9.html share/doc/postgresql/html/release-9-1.html share/doc/postgresql/html/release.html share/doc/postgresql/html/resources.html |