The PostgreSQL Global Development Group has released an update to all supported versions of our database system, including 9.5.2, 9.4.7, 9.3.12, 9.2.16, and 9.1.21. This release fixes two security issues and one index corruption issue in version 9.5. It also contains a variety of bug fixes for earlier versions. Users of PostgreSQL 9.5.0 or 9.5.1 should update as soon as possible.

This release closes security hole CVE-2016-2193, where a query plan might get reused for more than one ROLE in the same session. This could cause the wrong set of Row Level Security (RLS) policies to be used for the query.

The update also fixes CVE-2016-3065, a server crash bug triggered by using pageinspect with BRIN index pages. Since an attacker might be able to expose a few bytes of server memory, this crash is being treated as a security issue.

3 files changed, 8 insertions, 9 deletions

diff --git a/databases/postgresql95/Makefile b/databases/postgresql95/Makefile
index 7cf72379a65..879302e52c1 100644
--- a/databases/postgresql95/Makefile
+++ b/databases/postgresql95/Makefile
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.2 2016/03/05 11:28:17 jperkin Exp $
+# $NetBSD: Makefile,v 1.3 2016/04/09 12:51:49 adam Exp $
 
 PKGNAME=	${DISTNAME:C/-/95-/}
-PKGREVISION=	1
 COMMENT=	Robust, next generation, object-relational DBMS
 
 DEPENDS+=	postgresql95-client>=${PKGVERSION_NOREV}:../../databases/postgresql95-client
diff --git a/databases/postgresql95/Makefile.common b/databases/postgresql95/Makefile.common
index 6d8e986dcb1..7709848e59c 100644
--- a/databases/postgresql95/Makefile.common
+++ b/databases/postgresql95/Makefile.common
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.1 2016/02/25 21:37:35 tnn Exp $
+# $NetBSD: Makefile.common,v 1.2 2016/04/09 12:51:49 adam Exp $
 #
 # This Makefile fragment is included by all PostgreSQL packages built from
 # the main sources of the PostgreSQL distribution except jdbc-postgresql.
@@ -23,7 +23,7 @@
 # used by databases/postgresql95-server/Makefile
 # used by databases/postgresql95-upgrade/Makefile
 
-DISTNAME=	postgresql-9.5.1
+DISTNAME=	postgresql-9.5.2
 CATEGORIES=	databases
 MASTER_SITES=	${MASTER_SITE_PGSQL:=source/v${PKGVERSION_NOREV}/}
 EXTRACT_SUFX=	.tar.bz2
diff --git a/databases/postgresql95/distinfo b/databases/postgresql95/distinfo
index 28b2811ae7c..3f29179370e 100644
--- a/databases/postgresql95/distinfo
+++ b/databases/postgresql95/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.1 2016/02/25 21:37:35 tnn Exp $
+$NetBSD: distinfo,v 1.2 2016/04/09 12:51:49 adam Exp $
 
-SHA1 (postgresql-9.5.1.tar.bz2) = 905bc31bc4d500e9498340407740a61835a2022e
-RMD160 (postgresql-9.5.1.tar.bz2) = 4758bd11dea976147a6a698f9fb0e1acc4b17db3
-SHA512 (postgresql-9.5.1.tar.bz2) = fcb2b3bde51c4152b3a72764de1f9b4e607cb591571ed5bc1187b2c6938c33e21bdd512694a969a03c046e4889a129bb0e75fa676d55a1a1e77142da1e984192
-Size (postgresql-9.5.1.tar.bz2) = 18441638 bytes
+SHA1 (postgresql-9.5.2.tar.bz2) = e139e5607fafd96926463123f7751086adaad724
+RMD160 (postgresql-9.5.2.tar.bz2) = 89cf1a346814999846c14c048cbf263590977975
+SHA512 (postgresql-9.5.2.tar.bz2) = ba31dddee8a960a4b1a97394eae5ea7efaa5e74e21c755882efcef90404676c6052dff55f40b585932e4f752cbcda5ceac0e29d601ea6651cfbab7a49190381a
+Size (postgresql-9.5.2.tar.bz2) = 18446616 bytes
 SHA1 (patch-config_missing) = c2d7d742922ba6861e7660c75b7b53f09e564813
 SHA1 (patch-config_perl.m4) = e035132b1c281a75752d570ac5e29a11176c25c5
 SHA1 (patch-configure) = 59fe9a768caf8a5d308acac60c28bc6bb2c40632