The PostgreSQL Global Development Group has released an update to all supported versions of our database system, including 9.5.2, 9.4.7, 9.3.12, 9.2.16, and 9.1.21. This release fixes two security issues and one index corruption issue in version 9.5. It also contains a variety of bug fixes for earlier versions. Users of PostgreSQL 9.5.0 or 9.5.1 should update as soon as possible.

This release closes security hole CVE-2016-2193, where a query plan might get reused for more than one ROLE in the same session. This could cause the wrong set of Row Level Security (RLS) policies to be used for the query.

The update also fixes CVE-2016-3065, a server crash bug triggered by using pageinspect with BRIN index pages. Since an attacker might be able to expose a few bytes of server memory, this crash is being treated as a security issue.

3 files changed, 8 insertions, 9 deletions

diff --git a/databases/postgresql92/Makefile b/databases/postgresql92/Makefile
index 3bb7e27a8a3..d300926bf5f 100644
--- a/databases/postgresql92/Makefile
+++ b/databases/postgresql92/Makefile
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.10 2016/03/05 11:28:14 jperkin Exp $
+# $NetBSD: Makefile,v 1.11 2016/04/09 12:51:46 adam Exp $
 
 PKGNAME=	${DISTNAME:C/-/92-/}
-PKGREVISION=	1
 COMMENT=	Robust, next generation, object-relational DBMS
 
 DEPENDS+=	postgresql92-client>=${PKGVERSION_NOREV}:../../databases/postgresql92-client
diff --git a/databases/postgresql92/Makefile.common b/databases/postgresql92/Makefile.common
index bb4cbe91c09..e900829a97d 100644
--- a/databases/postgresql92/Makefile.common
+++ b/databases/postgresql92/Makefile.common
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.20 2016/02/25 11:46:21 jperkin Exp $
+# $NetBSD: Makefile.common,v 1.21 2016/04/09 12:51:46 adam Exp $
 #
 # This Makefile fragment is included by all PostgreSQL packages built from
 # the main sources of the PostgreSQL distribution except jdbc-postgresql.
@@ -23,7 +23,7 @@
 # used by databases/postgresql92-server/Makefile
 # used by databases/postgresql92-upgrade/Makefile
 
-DISTNAME=	postgresql-9.2.15
+DISTNAME=	postgresql-9.2.16
 CATEGORIES=	databases
 MASTER_SITES=	${MASTER_SITE_PGSQL:=source/v${PKGVERSION_NOREV}/}
 EXTRACT_SUFX=	.tar.bz2
diff --git a/databases/postgresql92/distinfo b/databases/postgresql92/distinfo
index 86bbe0ae5e4..b5f904be15b 100644
--- a/databases/postgresql92/distinfo
+++ b/databases/postgresql92/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.17 2016/02/25 00:41:54 tnn Exp $
+$NetBSD: distinfo,v 1.18 2016/04/09 12:51:46 adam Exp $
 
-SHA1 (postgresql-9.2.15.tar.bz2) = 73086d027966ffb190f650a468921e39f44120a4
-RMD160 (postgresql-9.2.15.tar.bz2) = 45c2727e8bcda9fdf654aeb93d36d05efa83705e
-SHA512 (postgresql-9.2.15.tar.bz2) = 4a0e52beaffc9f0b004c761a5ca107a019d6265877d36cd7be46912807da6fa6824ce469c8d59fb24092440646d3f0872b8aa62941b4b3ba657edc2f5678b2b1
-Size (postgresql-9.2.15.tar.bz2) = 16480973 bytes
+SHA1 (postgresql-9.2.16.tar.bz2) = cac510b58c7d91683315d0b3ee92b019223851a5
+RMD160 (postgresql-9.2.16.tar.bz2) = d9bc7d80d0d7f6cd2032c2cf3a38cad1ab43c184
+SHA512 (postgresql-9.2.16.tar.bz2) = 0f0b317473b4b42ae4261993c704a7c6cd28c7e6bd83e77a81850695655baa473d7d52e97441ee5500d646d405c84145a54f42b9bae89a0ddfebb0418d608820
+Size (postgresql-9.2.16.tar.bz2) = 16490199 bytes
 SHA1 (patch-config_missing) = c2d7d742922ba6861e7660c75b7b53f09e564813
 SHA1 (patch-config_perl.m4) = c7e5aaff1c47d2e33df7692a412ef984c77ffcc0
 SHA1 (patch-configure) = 21b27add570cff1a24c440201eb1ed49f8223747