diff options
| author | adam <adam> | 2013-04-04 21:08:25 +0000 |
|---|---|---|
| committer | adam <adam> | 2013-04-04 21:08:25 +0000 |
| commit | d6c4357e3078f7c9a76b837d020f53de07043c84 (patch) | |
| tree | 80c7435d598076d59e5b3c15db33a97bd3db4769 /databases/postgresql92-server | |
| parent | 9f3ff5f46400da181f8e720bb7d38f830780dad6 (diff) | |
| download | pkgsrc-d6c4357e3078f7c9a76b837d020f53de07043c84.tar.gz | |
The PostgreSQL Global Development Group has released a security update to all current versions of the PostgreSQL database system, including versions 9.2.4, 9.1.9, 9.0.13, and 8.4.17. This update fixes a high-exposure security vulnerability in versions 9.0 and later. All users of the affected versions are strongly urged to apply the update immediately.
A major security issue fixed in this release, CVE-2013-1899, makes it possible for a connection request containing a database name that begins with "-" to be crafted that can damage or destroy files within a server's data directory. Anyone with access to the port the PostgreSQL server listens on can initiate this request.
Two lesser security fixes are also included in this release: CVE-2013-1900, wherein random numbers generated by contrib/pgcrypto functions may be easy for another database user to guess, and CVE-2013-1901, which mistakenly allows an unprivileged user to run commands that could interfere with in-progress backups. Finally, this release fixes two security issues with the graphical installers for Linux and Mac OS X: insecure passing of superuser passwords to a script, CVE-2013-1903 and the use of predictable filenames in /tmp CVE-2013-1902.
Diffstat (limited to 'databases/postgresql92-server')
| -rw-r--r-- | databases/postgresql92-server/PLIST | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/databases/postgresql92-server/PLIST b/databases/postgresql92-server/PLIST index 058e20ca162..614da70f956 100644 --- a/databases/postgresql92-server/PLIST +++ b/databases/postgresql92-server/PLIST @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.2 2013/02/09 11:19:19 adam Exp $ +@comment $NetBSD: PLIST,v 1.3 2013/04/04 21:08:37 adam Exp $ bin/postgres bin/postmaster include/postgresql/server/plpgsql.h @@ -342,6 +342,7 @@ share/postgresql/timezone/Asia/Karachi share/postgresql/timezone/Asia/Kashgar share/postgresql/timezone/Asia/Kathmandu share/postgresql/timezone/Asia/Katmandu +share/postgresql/timezone/Asia/Khandyga share/postgresql/timezone/Asia/Kolkata share/postgresql/timezone/Asia/Krasnoyarsk share/postgresql/timezone/Asia/Kuala_Lumpur @@ -386,6 +387,7 @@ share/postgresql/timezone/Asia/Ujung_Pandang share/postgresql/timezone/Asia/Ulaanbaatar share/postgresql/timezone/Asia/Ulan_Bator share/postgresql/timezone/Asia/Urumqi +share/postgresql/timezone/Asia/Ust-Nera share/postgresql/timezone/Asia/Vientiane share/postgresql/timezone/Asia/Vladivostok share/postgresql/timezone/Asia/Yakutsk @@ -494,6 +496,7 @@ share/postgresql/timezone/Europe/Bratislava share/postgresql/timezone/Europe/Brussels share/postgresql/timezone/Europe/Bucharest share/postgresql/timezone/Europe/Budapest +share/postgresql/timezone/Europe/Busingen share/postgresql/timezone/Europe/Chisinau share/postgresql/timezone/Europe/Copenhagen share/postgresql/timezone/Europe/Dublin |