Path to this page:
Next | Query returned 4 messages, browsing 1 to 10 | previous
CVS Commit History:
2013-04-04 23:08:38 by Adam Ciarcinski | Files touched by this commit (66) | |
Log message:
The PostgreSQL Global Development Group has released a security update to all \
current versions of the PostgreSQL database system, including versions 9.2.4, \
9.1.9, 9.0.13, and 8.4.17. This update fixes a high-exposure security \
vulnerability in versions 9.0 and later. All users of the affected versions are \
strongly urged to apply the update immediately.
A major security issue fixed in this release, CVE-2013-1899, makes it possible \
for a connection request containing a database name that begins with \
"-" to be crafted that can damage or destroy files within a server's \
data directory. Anyone with access to the port the PostgreSQL server listens on \
can initiate this request.
Two lesser security fixes are also included in this release: CVE-2013-1900, \
wherein random numbers generated by contrib/pgcrypto functions may be easy for \
another database user to guess, and CVE-2013-1901, which mistakenly allows an \
unprivileged user to run commands that could interfere with in-progress backups. \
Finally, this release fixes two security issues with the graphical installers \
for Linux and Mac OS X: insecure passing of superuser passwords to a script, \
CVE-2013-1903 and the use of predictable filenames in /tmp CVE-2013-1902.
|
2012-07-01 21:21:14 by Daniel Horecki | Files touched by this commit (7) |
Log message:
Remove PKGREVISION
|
2011-04-22 16:40:46 by OBATA Akio | Files touched by this commit (58) |
Log message:
recursive bump from gettext-lib shlib bump.
|
2011-03-05 18:54:35 by Brook Milligan | Files touched by this commit (3) | |
Log message:
Initial import of the uuid v1.0.2 package from pgfoundry.org.
The ``uuid'' PostgreSQL package implements creation of Universally
Unique Identifiers (UUIDs), also referred to as Globally Unique
Identifiers (GUIDs). Although PostgreSQL supports storing UUIDs as a
native datatype, it does not provide any mechanism for creating them.
This package wraps openssl-supplied md5 and sha1 functions to create
UUIDs within PostgreSQL.
|
Next | Query returned 4 messages, browsing 1 to 10 | previous