Next | Query returned 30 messages, browsing 11 to 20 | Previous

History of commit frequency

CVS Commit History:


   2016-05-23 16:27:35 by Adam Ciarcinski | Files touched by this commit (26)
Log message:
This release fixes a number of issues reported by users over the last two \ 
months. Most database administrators should plan to upgrade at the next \ 
available downtime, unless they have been affected directly by the fixed issues.
   2016-04-09 14:51:50 by Adam Ciarcinski | Files touched by this commit (90) | Package updated
Log message:
The PostgreSQL Global Development Group has released an update to all supported \ 
versions of our database system, including 9.5.2, 9.4.7, 9.3.12, 9.2.16, and \ 
9.1.21. This release fixes two security issues and one index corruption issue in \ 
version 9.5. It also contains a variety of bug fixes for earlier versions. Users \ 
of PostgreSQL 9.5.0 or 9.5.1 should update as soon as possible.

This release closes security hole CVE-2016-2193, where a query plan might get \ 
reused for more than one ROLE in the same session. This could cause the wrong \ 
set of Row Level Security (RLS) policies to be used for the query.

The update also fixes CVE-2016-3065, a server crash bug triggered by using \ 
pageinspect with BRIN index pages. Since an attacker might be able to expose a \ 
few bytes of server memory, this crash is being treated as a security issue.
   2016-02-25 01:41:54 by Tobias Nygren | Files touched by this commit (4)
Log message:
Update to PostgreSQL 9.2.15 (2016-02-11)

This release fixes two security issues, as well as several bugs found
over the last four months.

CVE-2016-0773 Unicode regular expression buffer overflow
CVE-2016-0766 PL/Java privilege escalation
   2015-10-11 12:59:20 by Adam Ciarcinski | Files touched by this commit (4)
Log message:
Changes 9.2.14:
Two security issues have been fixed in this release which affect users of \ 
specific PostgreSQL features:

CVE-2015-5289: json or jsonb input values constructed from arbitrary user input \ 
can crash the PostgreSQL server and cause a denial of service.

CVE-2015-5288: The crypt() function included with the optional pgCrypto \ 
extension could be exploited to read a few additional bytes of memory. No \ 
working exploit for this issue has been developed.
   2015-06-18 16:46:14 by Adam Ciarcinski | Files touched by this commit (25) | Package updated
Log message:
Changes:
This release primarily fixes issues not successfully fixed in prior releases. It \ 
should be applied as soon as possible all users of major versions 9.3 and 9.4. \ 
Other users should apply at the next available downtime.

Crash Recovery Fixes:
Earlier update releases attempted to fix an issue in PostgreSQL 9.3 and 9.4 with \ 
"multixact wraparound", but failed to account for issues doing \ 
multixact cleanup during crash recovery. This could cause servers to be unable \ 
to restart after a crash. As such, all users of 9.3 and 9.4 should apply this \ 
update as soon as possible.
   2015-06-12 12:52:19 by Thomas Klausner | Files touched by this commit (3152)
Log message:
Recursive PKGREVISION bump for all packages mentioning 'perl',
having a PKGNAME of p5-*, or depending such a package,
for perl-5.22.0.
   2015-06-08 14:52:08 by Adam Ciarcinski | Files touched by this commit (12)
Log message:
Changes:
* File Permissions Fix
* Have pg_get_functiondef() show the LEAKPROOF property
* Make pushJsonbValue() function push jbvBinary type
* Allow building with threaded Python on OpenBSD
   2015-05-27 15:27:28 by Adam Ciarcinski | Files touched by this commit (20) | Package updated
Log message:
The PostgreSQL Global Development Group has released an update with multiple \ 
functionality and security fixes to all supported versions of the PostgreSQL \ 
database system, which includes minor versions 9.4.2, 9.3.7, 9.2.11, 9.1.16, and \ 
9.0.20. The update contains a critical fix for a potential data corruption issue \ 
in PostgreSQL 9.3 and 9.4; users of those versions should update their servers \ 
at the next possible opportunity.
   2015-02-14 08:57:40 by Adam Ciarcinski | Files touched by this commit (5)
Log message:
Changes 9.2.10:
Security Fixes
* CVE-2015-0241 Buffer overruns in "to_char" functions.
* CVE-2015-0242 Buffer overrun in replacement printf family of functions.
* CVE-2015-0243 Memory errors in functions in the pgcrypto extension.
* CVE-2015-0244 An error in extended protocol message reading.
* CVE-2014-8161 Constraint violation errors can cause display of values in \ 
columns which the user would not normally have rights to see.

JSON and JSONB Unicode Escapes

Other Fixes and Improvements
* Cope with the non-ASCII Norwegian Windows locale name.
* Avoid data corruption when databases are moved to new tablespaces and back again.
* Ensure that UNLOGGED tables are correctly copied during ALTER DATABASE operations.
* Avoid deadlocks when locking recently modified rows.
* Fix two SELECT FOR UPDATE query issues.
* Prevent false negative for shortest-first regular expression matches.
* Fix false positives and negatives in tsquery contains operator.
* Fix namespace handling in xpath().
* Prevent row-producing functions from creating empty column names.
* Make autovacuum use per-table cost_limit and cost_delay settings.
* When autovacuum=off, limit autovacuum work to wraparound prevention only.
* Multiple fixes for logical decoding in 9.4.
* Fix transient errors on hot standby queries due to page replacement.
* Prevent duplicate WAL file archiving at end of recovery or standby promotion.
* Prevent deadlock in parallel restore of schema-only dump.
   2014-07-26 00:14:57 by Adam Ciarcinski | Files touched by this commit (44) | Package updated
Log message:
The PostgreSQL Global Development Group has released an update to all supported \ 
version of the database system, including versions 9.3.5, 9.2.9, 9.1.14, 9.0.18, \ 
and 8.4.22. This minor release fixes a number of issues discovered and reported \ 
by users over the last four months, including some data corruption issues, and \ 
is the last update of version 8.4. Users of version 9.3 will want to update at \ 
the earliest opportunity; users of version 8.4 will want to schedule an upgrade \ 
to a supported PostgreSQL version.

Next | Query returned 30 messages, browsing 11 to 20 | Previous