From c224c812159a3c41d22af2af1e31b7fc1acee1ee Mon Sep 17 00:00:00 2001 From: adam Date: Sun, 11 Oct 2015 10:59:20 +0000 Subject: Changes 9.2.14: Two security issues have been fixed in this release which affect users of specific PostgreSQL features: CVE-2015-5289: json or jsonb input values constructed from arbitrary user input can crash the PostgreSQL server and cause a denial of service. CVE-2015-5288: The crypt() function included with the optional pgCrypto extension could be exploited to read a few additional bytes of memory. No working exploit for this issue has been developed. --- databases/postgresql92/Makefile.common | 4 ++-- databases/postgresql92/distinfo | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) (limited to 'databases/postgresql92') diff --git a/databases/postgresql92/Makefile.common b/databases/postgresql92/Makefile.common index bdf2ffef49f..c1839e4b751 100644 --- a/databases/postgresql92/Makefile.common +++ b/databases/postgresql92/Makefile.common @@ -1,4 +1,4 @@ -# $NetBSD: Makefile.common,v 1.17 2015/06/18 14:46:14 adam Exp $ +# $NetBSD: Makefile.common,v 1.18 2015/10/11 10:59:20 adam Exp $ # # This Makefile fragment is included by all PostgreSQL packages built from # the main sources of the PostgreSQL distribution except jdbc-postgresql. @@ -23,7 +23,7 @@ # used by databases/postgresql92-server/Makefile # used by databases/postgresql92-upgrade/Makefile -DISTNAME= postgresql-9.2.13 +DISTNAME= postgresql-9.2.14 CATEGORIES= databases MASTER_SITES= ${MASTER_SITE_PGSQL:=source/v${PKGVERSION_NOREV}/} EXTRACT_SUFX= .tar.bz2 diff --git a/databases/postgresql92/distinfo b/databases/postgresql92/distinfo index d2fa6fab7c4..732e8563f65 100644 --- a/databases/postgresql92/distinfo +++ b/databases/postgresql92/distinfo @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.14 2015/06/18 14:46:14 adam Exp $ +$NetBSD: distinfo,v 1.15 2015/10/11 10:59:20 adam Exp $ -SHA1 (postgresql-9.2.13.tar.bz2) = 8078c44b092dc25b8d338110e80872682fa42a2b -RMD160 (postgresql-9.2.13.tar.bz2) = 450e2bf5078f9e89141ccfad1299bab0c937bc2d -Size (postgresql-9.2.13.tar.bz2) = 16401289 bytes +SHA1 (postgresql-9.2.14.tar.bz2) = d07311e7b44f92fb7b5e127c2f7069ff4dd47607 +RMD160 (postgresql-9.2.14.tar.bz2) = 604388eeb9f331d7f7ae66a0c237c3ed9d86ded5 +Size (postgresql-9.2.14.tar.bz2) = 16451398 bytes SHA1 (patch-config_missing) = c2d7d742922ba6861e7660c75b7b53f09e564813 SHA1 (patch-config_perl.m4) = c7e5aaff1c47d2e33df7692a412ef984c77ffcc0 SHA1 (patch-configure) = 21b27add570cff1a24c440201eb1ed49f8223747 -- cgit v1.2.3