Subject: CVS commit: pkgsrc/databases
From: Adam Ciarcinski
Date: 2013-02-09 12:19:19
Message id: 20130209111919.DE2F7175DD@cvs.netbsd.org

Log Message:
The PostgreSQL Global Development Group has released a security update to all \ 
current versions of the PostgreSQL database system, including versions 9.2.3, \ 
9.1.8, 9.0.12, 8.4.16, and 8.3.23. This update fixes a denial-of-service (DOS) \ 
vulnerability. All users should update their PostgreSQL installations as soon as \ 
possible.

The security issue fixed in this release, CVE-2013-0255, allows a previously \ 
authenticated user to crash the server by calling an internal function with \ 
invalid arguments. This issue was discovered by independent security researcher \ 
Sumit Soni this week and reported via Secunia SVCRP, and we are grateful for \ 
their efforts in making PostgreSQL more secure.

Today's update also fixes a performance regression which caused a decrease in \ 
throughput when using dynamic queries in stored procedures in version 9.2. \ 
Applications which use PL/pgSQL's EXECUTE are strongly affected by this \ 
regression and should be updated. Additionally, we have fixed intermittent \ 
crashes caused by CREATE/DROP INDEX CONCURRENTLY, and multiple minor issues with \ 
replication.

This release is expected to be the final update for version 8.3, which is now \ 
End-of-Life (EOL). Users of version 8.3 should plan to upgrade to a later \ 
version of PostgreSQL immediately. For more information, see our Versioning \ 
Policy.

This update release also contains fixes for many minor issues discovered and \ 
patched by the PostgreSQL community in the last two months, including:

* Prevent unnecessary table scans during vacuuming
* Prevent spurious cached plan error in PL/pgSQL
* Allow sub-SELECTs to be subscripted
* Prevent DROP OWNED from dropping databases or tablespaces
* Make ECPG use translated messages
* Allow PL/Python to use multi-table trigger functions (again) in 9.1 and 9.2
* Fix several activity log management issues on Windows
* Prevent autovacuum file truncation from being cancelled by deadlock_timeout
* Make extensions build with the .exe suffix automatically on Windows
* Fix concurrency issues with CREATE/DROP DATABASE
* Reject out-of-range values in to_date() conversion function
* Revert cost estimation for large indexes back to pre-9.2 behavior
* Make pg_basebackup tolerate timeline switches
* Cleanup leftover temp table entries during crash recovery
* Prevent infinite loop when COPY inserts a large tuple into a table with a \ 
large fillfactor
* Prevent integer overflow in dynahash creation
* Make pg_upgrade work with INVALID indexes
* Fix bugs in TYPE privileges
* Allow Contrib installchecks to run in their own databases
* Many documentation updates
* Add new timezone "FET".

Files:
RevisionActionfile
1.29modifypkgsrc/databases/postgresql83/Makefile.common
1.28modifypkgsrc/databases/postgresql83/distinfo
1.14modifypkgsrc/databases/postgresql83-adminpack/Makefile
1.31modifypkgsrc/databases/postgresql83-client/Makefile
1.25modifypkgsrc/databases/postgresql83-client/PLIST
1.22modifypkgsrc/databases/postgresql83-plperl/Makefile
1.18modifypkgsrc/databases/postgresql83-plpython/Makefile
1.14modifypkgsrc/databases/postgresql83-pltcl/Makefile
1.25modifypkgsrc/databases/postgresql83-server/Makefile
1.25modifypkgsrc/databases/postgresql84/Makefile.common
1.24modifypkgsrc/databases/postgresql84/distinfo
1.12modifypkgsrc/databases/postgresql84-adminpack/Makefile
1.22modifypkgsrc/databases/postgresql84-client/Makefile
1.18modifypkgsrc/databases/postgresql84-client/PLIST
1.11modifypkgsrc/databases/postgresql84-dblink/Makefile
1.9modifypkgsrc/databases/postgresql84-pgcrypto/Makefile
1.18modifypkgsrc/databases/postgresql84-plperl/Makefile
1.15modifypkgsrc/databases/postgresql84-plpython/Makefile
1.13modifypkgsrc/databases/postgresql84-pltcl/Makefile
1.20modifypkgsrc/databases/postgresql84-server/Makefile
1.14modifypkgsrc/databases/postgresql84-server/PLIST
1.23modifypkgsrc/databases/postgresql90/Makefile.common
1.16modifypkgsrc/databases/postgresql90/distinfo
1.10modifypkgsrc/databases/postgresql90-adminpack/Makefile
1.5modifypkgsrc/databases/postgresql90-adminpack/PLIST
1.17modifypkgsrc/databases/postgresql90-client/Makefile
1.8modifypkgsrc/databases/postgresql90-client/PLIST
1.7modifypkgsrc/databases/postgresql90-client/buildlink3.mk
1.10modifypkgsrc/databases/postgresql90-datatypes/Makefile
1.5modifypkgsrc/databases/postgresql90-datatypes/PLIST
1.10modifypkgsrc/databases/postgresql90-dblink/Makefile
1.4modifypkgsrc/databases/postgresql90-dblink/PLIST
1.10modifypkgsrc/databases/postgresql90-docs/Makefile
1.14modifypkgsrc/databases/postgresql90-docs/PLIST
1.9modifypkgsrc/databases/postgresql90-fuzzystrmatch/Makefile
1.11modifypkgsrc/databases/postgresql90-monitoring/Makefile
1.10modifypkgsrc/databases/postgresql90-pgcrypto/Makefile
1.14modifypkgsrc/databases/postgresql90-plperl/Makefile
1.11modifypkgsrc/databases/postgresql90-plpython/Makefile
1.10modifypkgsrc/databases/postgresql90-pltcl/Makefile
1.8modifypkgsrc/databases/postgresql90-replicationtools/Makefile
1.15modifypkgsrc/databases/postgresql90-server/Makefile
1.11modifypkgsrc/databases/postgresql90-server/PLIST
1.10modifypkgsrc/databases/postgresql90-upgrade/Makefile
1.13modifypkgsrc/databases/postgresql91/Makefile.common
1.13modifypkgsrc/databases/postgresql91/distinfo
1.7modifypkgsrc/databases/postgresql91-adminpack/Makefile
1.13modifypkgsrc/databases/postgresql91-client/Makefile
1.4modifypkgsrc/databases/postgresql91-client/PLIST
1.7modifypkgsrc/databases/postgresql91-datatypes/Makefile
1.7modifypkgsrc/databases/postgresql91-dblink/Makefile
1.6modifypkgsrc/databases/postgresql91-docs/Makefile
1.10modifypkgsrc/databases/postgresql91-docs/PLIST
1.7modifypkgsrc/databases/postgresql91-fuzzystrmatch/Makefile
1.7modifypkgsrc/databases/postgresql91-monitoring/Makefile
1.7modifypkgsrc/databases/postgresql91-pgcrypto/Makefile
1.9modifypkgsrc/databases/postgresql91-plperl/Makefile
1.3modifypkgsrc/databases/postgresql91-plperl/PLIST
1.8modifypkgsrc/databases/postgresql91-plpython/Makefile
1.4modifypkgsrc/databases/postgresql91-plpython/PLIST
1.7modifypkgsrc/databases/postgresql91-pltcl/Makefile
1.7modifypkgsrc/databases/postgresql91-replicationtools/Makefile
1.7modifypkgsrc/databases/postgresql91-server/Makefile
1.6modifypkgsrc/databases/postgresql91-server/PLIST
1.7modifypkgsrc/databases/postgresql91-upgrade/Makefile
1.4modifypkgsrc/databases/postgresql92/Makefile.common
1.3modifypkgsrc/databases/postgresql92/distinfo
1.4modifypkgsrc/databases/postgresql92-adminpack/Makefile
1.4modifypkgsrc/databases/postgresql92-client/Makefile
1.3modifypkgsrc/databases/postgresql92-client/PLIST
1.4modifypkgsrc/databases/postgresql92-datatypes/Makefile
1.4modifypkgsrc/databases/postgresql92-dblink/Makefile
1.3modifypkgsrc/databases/postgresql92-docs/Makefile
1.3modifypkgsrc/databases/postgresql92-docs/PLIST
1.4modifypkgsrc/databases/postgresql92-fuzzystrmatch/Makefile
1.4modifypkgsrc/databases/postgresql92-monitoring/Makefile
1.4modifypkgsrc/databases/postgresql92-pgcrypto/Makefile
1.4modifypkgsrc/databases/postgresql92-plperl/Makefile
1.2modifypkgsrc/databases/postgresql92-plperl/PLIST
1.4modifypkgsrc/databases/postgresql92-plpython/Makefile
1.3modifypkgsrc/databases/postgresql92-plpython/PLIST
1.4modifypkgsrc/databases/postgresql92-pltcl/Makefile
1.4modifypkgsrc/databases/postgresql92-replicationtools/Makefile
1.4modifypkgsrc/databases/postgresql92-server/Makefile
1.2modifypkgsrc/databases/postgresql92-server/PLIST
1.4modifypkgsrc/databases/postgresql92-upgrade/Makefile