Log message:
Pullup ticket #3842 - requested by morr
databases/postgresql83-adminpack: security update
databases/postgresql83-client: security update
databases/postgresql83-plperl: security update
databases/postgresql83-pltcl: security update
databases/postgresql83-server: security update
databases/postgresql83-uuid: security update
databases/postgresql83: security update
Revisions pulled up:
- databases/postgresql83-adminpack/Makefile 1.10
- databases/postgresql83-client/Makefile 1.27
- databases/postgresql83-client/PLIST 1.21
- databases/postgresql83-plperl/Makefile 1.16
- databases/postgresql83-plpython/Makefile 1.14
- databases/postgresql83-pltcl/Makefile 1.10
- databases/postgresql83-server/Makefile 1.19
- databases/postgresql83-server/PLIST 1.18
- databases/postgresql83-uuid/Makefile 1.3
- databases/postgresql83/Makefile 1.8
- databases/postgresql83/Makefile.common 1.24
- databases/postgresql83/distinfo 1.22
---
Module Name: pkgsrc
Committed By: morr
Date: Sun Jul 1 19:19:42 UTC 2012
Modified Files:
pkgsrc/databases/postgresql83: Makefile.common distinfo
pkgsrc/databases/postgresql83-client: PLIST
pkgsrc/databases/postgresql83-plpython: Makefile
pkgsrc/databases/postgresql83-server: PLIST
Log message:
Security update to version 8.3.19.
Changes:
* Fix incorrect password transformation in contrib/pgcrypto's DES crypt() \
function (Solar Designer)
* If a password string contained the byte value 0x80, the remainder of the \
password was ignored, causing the password to be much weaker than it appeared. \
With this fix, the rest of the string is properly included in the DES hash. Any \
stored password values that are affected by this bug will thus no longer match, \
so the stored values may need to be updated. (CVE-2012-2143)
* Ignore SECURITY DEFINER and SET attributes for a procedural language's call \
handler (Tom Lane)
* Applying such attributes to a call handler could crash the server. \
(CVE-2012-2655)
* Allow numeric timezone offsets in timestamp input to be up to 16 hours away \
from UTC (Tom Lane)
* Some historical time zones have offsets larger than 15 hours, the previous \
limit. This could result in dumped data values being rejected during reload.
* Fix timestamp conversion to cope when the given time is exactly the last \
DST transition time for the current timezone (Tom Lane)
* This oversight has been there a long time, but was not noticed previously \
because most DST-using zones are presumed to have an indefinite sequence of \
future DST transitions.
* Fix text to name and char to name casts to perform string truncation \
correctly in multibyte encodings (Karl Schnaitter)
* Fix memory copying bug in to_tsquery() (Heikki Linnakangas)
* Fix slow session startup when pg_attribute is very large (Tom Lane)
* If pg_attribute exceeds one-fourth of shared_buffers, cache rebuilding code \
that is sometimes needed during session start would trigger the \
synchronized-scan logic, causing it to take many times longer than normal. The \
problem was particularly acute if many new sessions were starting at once.
* Ensure sequential scans check for query cancel reasonably often (Merlin Moncure)
* A scan encountering many consecutive pages that contain no live tuples \
would not respond to interrupts meanwhile.
* Ensure the Windows implementation of PGSemaphoreLock() clears \
ImmediateInterruptOK before returning (Tom Lane)
* This oversight meant that a query-cancel interrupt received later in the \
same query could be accepted at an unsafe time, with unpredictable but not good \
consequences.
* Show whole-row variables safely when printing views or rules (Abbas Butt, \
Tom Lane)
* Corner cases involving ambiguous names (that is, the name could be either a \
table or column name of the query) were printed in an ambiguous way, risking \
that the view or rule would be interpreted differently after dump and reload. \
Avoid the ambiguous case by attaching a no-op cast.
* Ensure autovacuum worker processes perform stack depth checking properly \
(Heikki Linnakangas)
* Previously, infinite recursion in a function invoked by auto-ANALYZE could \
crash worker processes.
* Fix logging collector to not lose log coherency under high load (Andrew Dunstan)
* The collector previously could fail to reassemble large messages if it got \
too busy.
* Fix logging collector to ensure it will restart file rotation after \
receiving SIGHUP (Tom Lane)
* Fix PL/pgSQL's GET DIAGNOSTICS command when the target is the function's \
first variable (Tom Lane)
* Fix several performance problems in pg_dump when the database contains many \
objects (Jeff Janes, Tom Lane)
* pg_dump could get very slow if the database contained many schemas, or if \
many objects are in dependency loops, or if there are many owned sequences.
* Fix contrib/dblink's dblink_exec() to not leak temporary database \
connections upon error (Tom Lane)
* Update time zone data files to tzdata release 2012c for DST law changes in \
Antarctica, Armenia, Chile, Cuba, Falkland Islands, Gaza, Haiti, Hebron, \
Morocco, Syria, and Tokelau Islands; also historical corrections for Canada.
---
Module Name: pkgsrc
Committed By: morr
Date: Sun Jul 1 19:21:14 UTC 2012
Modified Files:
pkgsrc/databases/postgresql83: Makefile
pkgsrc/databases/postgresql83-adminpack: Makefile
pkgsrc/databases/postgresql83-client: Makefile
pkgsrc/databases/postgresql83-plperl: Makefile
pkgsrc/databases/postgresql83-pltcl: Makefile
pkgsrc/databases/postgresql83-server: Makefile
pkgsrc/databases/postgresql83-uuid: Makefile
Log message:
Remove PKGREVISION
|