diff options
author | recht <recht> | 2005-05-15 12:31:57 +0000 |
---|---|---|
committer | recht <recht> | 2005-05-15 12:31:57 +0000 |
commit | 3f8c1ee89fc84c52e1c5a00806275fdd88fe4fa1 (patch) | |
tree | b7283dfc0a2c0fc9255090b7b39216750bdb2bfe /databases | |
parent | 66bce3af9799a44ed26f327ae7f3b19971656ca6 (diff) | |
download | pkgsrc-3f8c1ee89fc84c52e1c5a00806275fdd88fe4fa1.tar.gz |
Update to PostgreSQL 8.0.3
This release contains a variety of fixes from 8.0.2, including several
security-related issues.
__________________________________________________________________
Migration to version 8.0.3
A dump/restore is not required for those running 8.0.X. However, it is
one possible way of handling two significant security problems that
have been found in the initial contents of 8.0.X system catalogs. A
dump/initdb/reload sequence using 8.0.3's initdb will automatically
correct these problems.
The larger security problem is that the built-in character set encoding
conversion functions can be invoked from SQL commands by unprivileged
users, but the functions were not designed for such use and are not
secure against malicious choices of arguments. The fix involves
changing the declared parameter list of these functions so that they
can no longer be invoked from SQL commands. (This does not affect their
normal use by the encoding conversion machinery.)
The lesser problem is that the "contrib/tsearch2" module creates
several functions that are misdeclared to return internal when they do
not accept internal arguments. This breaks type safety for all
functions using internal arguments.
It is strongly recommended that all installations repair these errors,
either by initdb or by following the manual repair procedure given
below. The errors at least allow unprivileged database users to crash
their server process, and may allow unprivileged users to gain the
privileges of a database superuser.
If you wish not to do an initdb, perform the same manual repair
procedures shown in the 7.4.8 release notes.
__________________________________________________________________
Changes
* Change encoding function signature to prevent misuse
* Change "contrib/tsearch2" to avoid unsafe use of INTERNAL function
results
* Guard against incorrect second parameter to record_out
* Repair ancient race condition that allowed a transaction to be seen
as committed for some purposes (eg SELECT FOR UPDATE) slightly
sooner than for other purposes
This is an extremely serious bug since it could lead to apparent
data inconsistencies being briefly visible to applications.
* Repair race condition between relation extension and VACUUM
This could theoretically have caused loss of a page's worth of
freshly-inserted data, although the scenario seems of very low
probability. There are no known cases of it having caused more than
an Assert failure.
* Fix comparisons of TIME WITH TIME ZONE values
The comparison code was wrong in the case where the
--enable-integer-datetimes configuration switch had been used.
NOTE: if you have an index on a TIME WITH TIME ZONE column, it will
need to be "REINDEX"ed after installing this update, because the
fix corrects the sort order of column values.
* Fix EXTRACT(EPOCH) for TIME WITH TIME ZONE values
* Fix mis-display of negative fractional seconds in INTERVAL values
This error only occurred when the --enable-integer-datetimes
configuration switch had been used.
* Fix pg_dump to dump trigger names containing % correctly (Neil)
* Still more 64-bit fixes for "contrib/intagg"
* Prevent incorrect optimization of functions returning RECORD
* Prevent crash on COALESCE(NULL,NULL)
* Fix Borland makefile for libpq
* Fix "contrib/btree_gist" for timetz type (Teodor)
* Make "pg_ctl" check the PID found in "postmaster.pid" to see if it
is still a live process
* Fix "pg_dump"/"pg_restore" problems caused by addition of dump
timestamps
* Fix interaction between materializing holdable cursors and firing
deferred triggers during transaction commit
* Fix memory leak in SQL functions returning pass-by-reference data
types
pkgsrc specific change:
Instead of setting CONFIGURE_ART let configure find the template to use
iteself.
Diffstat (limited to 'databases')
-rw-r--r-- | databases/postgresql80/Makefile.common | 17 | ||||
-rw-r--r-- | databases/postgresql80/distinfo | 8 |
2 files changed, 9 insertions, 16 deletions
diff --git a/databases/postgresql80/Makefile.common b/databases/postgresql80/Makefile.common index 66381e19eee..63cf119887d 100644 --- a/databases/postgresql80/Makefile.common +++ b/databases/postgresql80/Makefile.common @@ -1,4 +1,4 @@ -# $NetBSD: Makefile.common,v 1.3 2005/04/11 21:45:15 tv Exp $ +# $NetBSD: Makefile.common,v 1.4 2005/05/15 12:31:57 recht Exp $ # # This Makefile fragment is included by all PostgreSQL packages built from # the main sources of the PostgreSQL distribution except jdbc-postgresql. @@ -36,11 +36,10 @@ PATCHDIR?= ${.CURDIR}/../postgresql80/patches # BASE_VERS pkgsrc-mangled version number (convert pl -> .) # # Note: Do not forget jdbc-postgresql when updating version -DIST_VERS?= 8.0.2 +DIST_VERS?= 8.0.3 BASE_VERS?= ${DIST_VERS} -BUILDLINK_DEPENDS.postgresql80-lib?= postgresql80-lib>=${BASE_VERS} -#BUILDLINK_DEPENDS.tcl-postgresql80?= tcl-postgresql80>=${BASE_VERS} +BUILDLINK_DEPENDS.postgresql80-client?= postgresql80-client>=${BASE_VERS} GNU_CONFIGURE= yes BUILD_USES_MSGFMT= yes @@ -57,7 +56,7 @@ SUBST_SED.pkglocaledir2= -e 's|\( localedir[ :]*=\).*|\1${_PKGLOCALEDIR}|' .include "../../mk/bsd.prefs.mk" # Add support for hierarchical queries with Oracle like CONNECT BY syntax. -# see http://gppl.terminal.ru/README.html for details. +# see http://gppl.moonbone.ru/README.html for details. .if defined(PGSQL_USE_HIER) && !empty(PGSQL_USE_HIER:M[yY][eE][sS]) PATCH_SITES= http://gppl.moonbone.ru/ PATCHFILES= hier-Pg8.0.1-0.5.4.diff.gz @@ -65,11 +64,6 @@ PATCH_DIST_STRIP= -p1 .endif BUILD_DEFS+= PGSQL_USE_HIER -PGSQL_TEMPLATE.SunOS= solaris -.if !defined(PGSQL_TEMPLATE.${OPSYS}) -PGSQL_TEMPLATE.${OPSYS}= ${LOWER_OPSYS} -.endif - PG_DIR= ${PREFIX} GNU_CONFIGURE_PREFIX= ${PG_DIR} INSTALLATION_DIRS+= ${PG_DIR} @@ -79,7 +73,6 @@ PG_DOC_DIR= ${PREFIX}/share/doc/postgresql80 #CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR} CONFIGURE_ARGS+= --datadir=${PG_DATA_DIR} CONFIGURE_ARGS+= --with-docdir=${PG_DOC_DIR} -CONFIGURE_ARGS+= --with-template="${PGSQL_TEMPLATE.${OPSYS}}" CONFIGURE_ARGS+= --without-readline CONFIGURE_ARGS+= --with-zlib CONFIGURE_ARGS+= --with-openssl @@ -96,7 +89,7 @@ CONFIGURE_ARGS+= --without-tk CONFIGURE_ARGS+= --with-rendezvous .endif -# Postgresql explicitly forbids any use of -ffast-math +# PostgreSQL explicitly forbids any use of -ffast-math CFLAGS:= ${CFLAGS:S/-ffast-math//} post-extract: diff --git a/databases/postgresql80/distinfo b/databases/postgresql80/distinfo index b33f4c5bb86..2f8437a5558 100644 --- a/databases/postgresql80/distinfo +++ b/databases/postgresql80/distinfo @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.4 2005/04/11 20:34:43 recht Exp $ +$NetBSD: distinfo,v 1.5 2005/05/15 12:31:57 recht Exp $ -SHA1 (postgresql-8.0.2.tar.bz2) = c42024236dceea78f07ba6a2ae40604b56a14b0f -RMD160 (postgresql-8.0.2.tar.bz2) = 887577dabbb5e88e6a8e561a66c1fc25f7ce61ca -Size (postgresql-8.0.2.tar.bz2) = 11050977 bytes +SHA1 (postgresql-8.0.3.tar.bz2) = 45f9a739e414e617d1e5f43779046546ee1a0d3a +RMD160 (postgresql-8.0.3.tar.bz2) = 62e6a28c0041a3f0d456efe1e985f03778e4bdfa +Size (postgresql-8.0.3.tar.bz2) = 11069624 bytes SHA1 (hier-Pg8.0.1-0.5.4.diff.gz) = c1a1141363c1d3c14025d97993b5367166c85da4 RMD160 (hier-Pg8.0.1-0.5.4.diff.gz) = f212f840d06a914fd668398848baef5a269875eb Size (hier-Pg8.0.1-0.5.4.diff.gz) = 30662 bytes |