New commits:
commit 741249e4f3d0b1bec969d92dccd13b92aee262fd
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>
postgresql: => 9.1.3
multiple security fixes
Users of pg_dump, users of SSL certificates for validation or users of
triggers using
SECURITY DEFINER should upgrade their installations immediately
see <http://www.postgresql.org/about/news/1377/>
WEB_SITE=http://www.postgresql.org/
GATHER_DOCS=off
- SECURITY_PATCH=9
+ SECURITY_PATCH=10
ENTERED=20011113
LICENSE[0]=BSD
KEYWORDS="database"
diff --git a/database/postgresql/HISTORY b/database/postgresql/HISTORY
index 81cb5c3..77f6e0a 100644
--- a/database/postgresql/HISTORY
+++ b/database/postgresql/HISTORY
@@ -1,3 +1,14 @@
+2012-04-10 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 9.1.3
+ SECURITY_PATCH=10
+ multiple security fixes
+ CVE-2012-0866: Permissions on a function called by a trigger are
not checked
+ CVE-2012-0867: SSL certificate name checks are truncated to 32
characters,
+ allowing connection spoofing under some circumstances.
+ CVE-2012-0868: Line breaks in object names can be exploited to
execute code
+ when loading a pg_dump file.
+ see <http://www.postgresql.org/about/news/1377/>
+
2011-12-06 Vlad Glagolev <stealth AT sourcemage.org>
* DETAILS: updated spell to 9.1.2
[SM-Commit] GIT changes to master grimoire by Treeve Jelbert (741249e4f3d0b1bec969d92dccd13b92aee262fd),
Treeve Jelbert, 04/11/2012