Hello, Earlier this month the PostgreSQL project released 4 bugfix releases, including fixes for 2 security issues : * Fix incorrect password transformation in contrib/pgcrypto's DES crypt() function. CVE-2012-2143 * Ignore SECURITY DEFINER and SET attributes for a procedural language's call handler. CVE-2012-2655 Please find attached 4 patches to upgrade PostgreSQL packages to 8.3.19, 8.4.12, 9.0.8 and 9.1.4. Regards, -- Nicolas
Index: databases/postgresql83/Makefile.common =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql83/Makefile.common,v retrieving revision 1.23 diff -u -p -r1.23 Makefile.common --- databases/postgresql83/Makefile.common 11 Mar 2012 10:32:35 -0000 1.23 +++ databases/postgresql83/Makefile.common 27 Jun 2012 09:30:54 -0000 @@ -15,7 +15,7 @@ # <lang>-postgresql client-side interface to PostgreSQL # postgresql-<lang> server-side module for PostgreSQL backend -DISTNAME= postgresql-8.3.18 +DISTNAME= postgresql-8.3.19 CATEGORIES= databases MASTER_SITES= ${MASTER_SITE_PGSQL:=source/v${PKGVERSION_NOREV}/} EXTRACT_SUFX= .tar.bz2 Index: databases/postgresql83/distinfo =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql83/distinfo,v retrieving revision 1.21 diff -u -p -r1.21 distinfo --- databases/postgresql83/distinfo 5 Mar 2012 14:12:21 -0000 1.21 +++ databases/postgresql83/distinfo 27 Jun 2012 09:30:54 -0000 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.21 2012/03/05 14:12:21 adam Exp $ +$NetBSD$ -SHA1 (postgresql-8.3.18.tar.bz2) = 0d832fc9c7dba5de1716921274ce0ca276418070 -RMD160 (postgresql-8.3.18.tar.bz2) = d276a468f59b4def821b686b5504a549bd0491c3 -Size (postgresql-8.3.18.tar.bz2) = 14563583 bytes +SHA1 (postgresql-8.3.19.tar.bz2) = bd7fcb188f668d30029f02048b5b5b86b9d3d14e +RMD160 (postgresql-8.3.19.tar.bz2) = 1611a009386ba6984689fbbf8663c49d405f864c +Size (postgresql-8.3.19.tar.bz2) = 14570746 bytes SHA1 (patch-aa) = 6d5e9aa58975181d189060f8523c022aa6c82277 SHA1 (patch-ab) = 1ba1bb53ca5a74d09fc2b7d07d98b0a0ffd57202 SHA1 (patch-ac) = 8e3a7021fdd01810d4ebcbd20002b28164b22279 Index: databases/postgresql83-client/PLIST =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql83-client/PLIST,v retrieving revision 1.20 diff -u -p -r1.20 PLIST --- databases/postgresql83-client/PLIST 5 Mar 2012 14:12:21 -0000 1.20 +++ databases/postgresql83-client/PLIST 27 Jun 2012 09:30:54 -0000 @@ -1302,6 +1302,7 @@ share/doc/postgresql/html/release-8-3-15 share/doc/postgresql/html/release-8-3-16.html share/doc/postgresql/html/release-8-3-17.html share/doc/postgresql/html/release-8-3-18.html +share/doc/postgresql/html/release-8-3-19.html share/doc/postgresql/html/release-8-3-2.html share/doc/postgresql/html/release-8-3-3.html share/doc/postgresql/html/release-8-3-4.html Index: databases/postgresql83-plpython/Makefile =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql83-plpython/Makefile,v retrieving revision 1.12 diff -u -p -r1.12 Makefile --- databases/postgresql83-plpython/Makefile 15 Mar 2012 11:53:22 -0000 1.12 +++ databases/postgresql83-plpython/Makefile 27 Jun 2012 09:30:54 -0000 @@ -1,7 +1,6 @@ # $NetBSD: Makefile,v 1.12 2012/03/15 11:53:22 obache Exp $ PKGNAME= ${DISTNAME:C/-/83-plpython-/} -PKGREVISION= 1 COMMENT= PL/Python procedural language for the PostgreSQL backend PKG_DESTDIR_SUPPORT= user-destdir Index: databases/postgresql83-server/PLIST =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql83-server/PLIST,v retrieving revision 1.17 diff -u -p -r1.17 PLIST --- databases/postgresql83-server/PLIST 15 Dec 2011 17:31:09 -0000 1.17 +++ databases/postgresql83-server/PLIST 27 Jun 2012 09:30:54 -0000 @@ -161,6 +161,7 @@ share/postgresql/timezone/America/Chihua share/postgresql/timezone/America/Coral_Harbour share/postgresql/timezone/America/Cordoba share/postgresql/timezone/America/Costa_Rica +share/postgresql/timezone/America/Creston share/postgresql/timezone/America/Cuiaba share/postgresql/timezone/America/Curacao share/postgresql/timezone/America/Danmarkshavn
Index: databases/postgresql84/Makefile.common =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql84/Makefile.common,v retrieving revision 1.19 diff -u -p -r1.19 Makefile.common --- databases/postgresql84/Makefile.common 11 Mar 2012 10:32:35 -0000 1.19 +++ databases/postgresql84/Makefile.common 27 Jun 2012 09:30:54 -0000 @@ -17,7 +17,7 @@ # <lang>-postgresql client-side interface to PostgreSQL # postgresql-<lang> server-side module for PostgreSQL backend -DISTNAME= postgresql-8.4.11 +DISTNAME= postgresql-8.4.12 CATEGORIES= databases MASTER_SITES= ${MASTER_SITE_PGSQL:=source/v${PKGVERSION_NOREV}/} EXTRACT_SUFX= .tar.bz2 Index: databases/postgresql84/distinfo =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql84/distinfo,v retrieving revision 1.17 diff -u -p -r1.17 distinfo --- databases/postgresql84/distinfo 5 Mar 2012 14:13:19 -0000 1.17 +++ databases/postgresql84/distinfo 27 Jun 2012 09:30:54 -0000 @@ -1,8 +1,8 @@ $NetBSD: distinfo,v 1.17 2012/03/05 14:13:19 adam Exp $ -SHA1 (postgresql-8.4.11.tar.bz2) = ce9581b9f03bd884417b988ec317ce2ed06bb15f -RMD160 (postgresql-8.4.11.tar.bz2) = 85b4be0884ca11855eb0dbc1541403e7baf7c0aa -Size (postgresql-8.4.11.tar.bz2) = 14502434 bytes +SHA1 (postgresql-8.4.12.tar.bz2) = 04ad9650573df7723511f57ef8cdeadce8d3855d +RMD160 (postgresql-8.4.12.tar.bz2) = 2aa0da64dc3220497d510bd60a1abf0b68fd51ef +Size (postgresql-8.4.12.tar.bz2) = 14509007 bytes SHA1 (patch-aa) = 72437773d67939c8d8c8e9a99caf430590fd726f SHA1 (patch-ab) = aa46d88c8a72edaf95880de48474ea484d6d2bf5 SHA1 (patch-ac) = 0b82797d0b80bdd1e9b5f3de4989fe3848adf6cb Index: databases/postgresql84-client/PLIST =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql84-client/PLIST,v retrieving revision 1.13 diff -u -p -r1.13 PLIST --- databases/postgresql84-client/PLIST 5 Mar 2012 14:13:19 -0000 1.13 +++ databases/postgresql84-client/PLIST 27 Jun 2012 09:30:55 -0000 @@ -1333,6 +1333,7 @@ share/doc/postgresql/html/release-8-3-15 share/doc/postgresql/html/release-8-3-16.html share/doc/postgresql/html/release-8-3-17.html share/doc/postgresql/html/release-8-3-18.html +share/doc/postgresql/html/release-8-3-19.html share/doc/postgresql/html/release-8-3-2.html share/doc/postgresql/html/release-8-3-3.html share/doc/postgresql/html/release-8-3-4.html @@ -1345,6 +1346,7 @@ share/doc/postgresql/html/release-8-3.ht share/doc/postgresql/html/release-8-4-1.html share/doc/postgresql/html/release-8-4-10.html share/doc/postgresql/html/release-8-4-11.html +share/doc/postgresql/html/release-8-4-12.html share/doc/postgresql/html/release-8-4-2.html share/doc/postgresql/html/release-8-4-3.html share/doc/postgresql/html/release-8-4-4.html Index: databases/postgresql84-plpython/Makefile =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql84-plpython/Makefile,v retrieving revision 1.7 diff -u -p -r1.7 Makefile --- databases/postgresql84-plpython/Makefile 15 Mar 2012 11:53:22 -0000 1.7 +++ databases/postgresql84-plpython/Makefile 27 Jun 2012 09:30:55 -0000 @@ -1,7 +1,6 @@ # $NetBSD: Makefile,v 1.7 2012/03/15 11:53:22 obache Exp $ PKGNAME= ${DISTNAME:C/-/84-plpython-/} -PKGREVISION= 1 COMMENT= PL/Python procedural language for the PostgreSQL backend PKG_DESTDIR_SUPPORT= user-destdir Index: databases/postgresql84-server/PLIST =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql84-server/PLIST,v retrieving revision 1.11 diff -u -p -r1.11 PLIST --- databases/postgresql84-server/PLIST 15 Dec 2011 17:16:13 -0000 1.11 +++ databases/postgresql84-server/PLIST 27 Jun 2012 09:30:55 -0000 @@ -161,6 +161,7 @@ share/postgresql/timezone/America/Chihua share/postgresql/timezone/America/Coral_Harbour share/postgresql/timezone/America/Cordoba share/postgresql/timezone/America/Costa_Rica +share/postgresql/timezone/America/Creston share/postgresql/timezone/America/Cuiaba share/postgresql/timezone/America/Curacao share/postgresql/timezone/America/Danmarkshavn
Index: databases/postgresql90/Makefile.common =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql90/Makefile.common,v retrieving revision 1.17 diff -u -p -r1.17 Makefile.common --- databases/postgresql90/Makefile.common 11 Mar 2012 10:32:35 -0000 1.17 +++ databases/postgresql90/Makefile.common 27 Jun 2012 09:30:55 -0000 @@ -21,7 +21,7 @@ # <lang>-postgresql client-side interface to PostgreSQL # postgresql-<lang> server-side module for PostgreSQL backend -DISTNAME= postgresql-9.0.7 +DISTNAME= postgresql-9.0.8 CATEGORIES= databases MASTER_SITES= ${MASTER_SITE_PGSQL:=source/v${PKGVERSION_NOREV}/} EXTRACT_SUFX= .tar.bz2 Index: databases/postgresql90/distinfo =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql90/distinfo,v retrieving revision 1.10 diff -u -p -r1.10 distinfo --- databases/postgresql90/distinfo 3 Mar 2012 14:01:11 -0000 1.10 +++ databases/postgresql90/distinfo 27 Jun 2012 09:30:55 -0000 @@ -1,8 +1,8 @@ $NetBSD: distinfo,v 1.10 2012/03/03 14:01:11 adam Exp $ -SHA1 (postgresql-9.0.7.tar.bz2) = c0cf6de3cfa131b36107b3748ae44786ad638e12 -RMD160 (postgresql-9.0.7.tar.bz2) = 80a8c91233462515914aeb5c15cf63b7195da3ef -Size (postgresql-9.0.7.tar.bz2) = 14977437 bytes +SHA1 (postgresql-9.0.8.tar.bz2) = 240d2d45bc87d8cdad8e2b74cf378f5668b604fe +RMD160 (postgresql-9.0.8.tar.bz2) = fab8564774c99300ca8a69298417eec960e70601 +Size (postgresql-9.0.8.tar.bz2) = 14998065 bytes SHA1 (patch-aa) = c7e5aaff1c47d2e33df7692a412ef984c77ffcc0 SHA1 (patch-ab) = 6adfc53e325abe69582f1c7971f56144c697e9c1 SHA1 (patch-ac) = 76ddd3015d93b19cdd6000eaffc4f53cbd4965b5 Index: databases/postgresql90-docs/PLIST =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql90-docs/PLIST,v retrieving revision 1.9 diff -u -p -r1.9 PLIST --- databases/postgresql90-docs/PLIST 3 Mar 2012 14:01:11 -0000 1.9 +++ databases/postgresql90-docs/PLIST 27 Jun 2012 09:30:55 -0000 @@ -903,6 +903,7 @@ ${PG_SUBPREFIX}share/doc/postgresql/html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-3-16.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-3-17.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-3-18.html +${PG_SUBPREFIX}share/doc/postgresql/html/release-8-3-19.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-3-2.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-3-3.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-3-4.html @@ -915,6 +916,7 @@ ${PG_SUBPREFIX}share/doc/postgresql/html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-4-1.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-4-10.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-4-11.html +${PG_SUBPREFIX}share/doc/postgresql/html/release-8-4-12.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-4-2.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-4-3.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-8-4-4.html @@ -931,6 +933,7 @@ ${PG_SUBPREFIX}share/doc/postgresql/html ${PG_SUBPREFIX}share/doc/postgresql/html/release-9-0-5.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-9-0-6.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-9-0-7.html +${PG_SUBPREFIX}share/doc/postgresql/html/release-9-0-8.html ${PG_SUBPREFIX}share/doc/postgresql/html/release-9-0.html ${PG_SUBPREFIX}share/doc/postgresql/html/release.html ${PG_SUBPREFIX}share/doc/postgresql/html/resources.html Index: databases/postgresql90-server/PLIST =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql90-server/PLIST,v retrieving revision 1.9 diff -u -p -r1.9 PLIST --- databases/postgresql90-server/PLIST 3 Mar 2012 14:01:12 -0000 1.9 +++ databases/postgresql90-server/PLIST 27 Jun 2012 09:30:55 -0000 @@ -166,6 +166,7 @@ ${PG_SUBPREFIX}share/postgresql/timezone ${PG_SUBPREFIX}share/postgresql/timezone/America/Coral_Harbour ${PG_SUBPREFIX}share/postgresql/timezone/America/Cordoba ${PG_SUBPREFIX}share/postgresql/timezone/America/Costa_Rica +${PG_SUBPREFIX}share/postgresql/timezone/America/Creston ${PG_SUBPREFIX}share/postgresql/timezone/America/Cuiaba ${PG_SUBPREFIX}share/postgresql/timezone/America/Curacao ${PG_SUBPREFIX}share/postgresql/timezone/America/Danmarkshavn
Index: databases/postgresql91/Makefile.common =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql91/Makefile.common,v retrieving revision 1.6 diff -u -p -r1.6 Makefile.common --- databases/postgresql91/Makefile.common 11 Mar 2012 10:32:35 -0000 1.6 +++ databases/postgresql91/Makefile.common 27 Jun 2012 09:30:55 -0000 @@ -21,7 +21,7 @@ # <lang>-postgresql client-side interface to PostgreSQL # postgresql-<lang> server-side module for PostgreSQL backend -DISTNAME= postgresql-9.1.3 +DISTNAME= postgresql-9.1.4 CATEGORIES= databases MASTER_SITES= ${MASTER_SITE_PGSQL:=source/v${PKGVERSION_NOREV}/} EXTRACT_SUFX= .tar.bz2 Index: databases/postgresql91/distinfo =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql91/distinfo,v retrieving revision 1.5 diff -u -p -r1.5 distinfo --- databases/postgresql91/distinfo 3 Mar 2012 14:01:12 -0000 1.5 +++ databases/postgresql91/distinfo 27 Jun 2012 09:30:55 -0000 @@ -1,8 +1,8 @@ $NetBSD: distinfo,v 1.5 2012/03/03 14:01:12 adam Exp $ -SHA1 (postgresql-9.1.3.tar.bz2) = 1cf3044415df807c08bb8ad8e40e24e8d375cf34 -RMD160 (postgresql-9.1.3.tar.bz2) = 84eb235c090083b78e6a2facf3d7bc534395db8b -Size (postgresql-9.1.3.tar.bz2) = 15582454 bytes +SHA1 (postgresql-9.1.4.tar.bz2) = c75fd5696af02a275a104260eac8b3a4abe35682 +RMD160 (postgresql-9.1.4.tar.bz2) = ff08ad702c7ffc0172b3f66aa4819d4865f0e77b +Size (postgresql-9.1.4.tar.bz2) = 15631894 bytes SHA1 (patch-config_perl.m4) = c7e5aaff1c47d2e33df7692a412ef984c77ffcc0 SHA1 (patch-configure) = dab79533dac06a79a5aa8439d6b15830d8d2fba7 SHA1 (patch-contrib_dblink_Makefile) = 4960ad57d42465fae203870548e4c53f8a32ce04 Index: databases/postgresql91-docs/PLIST =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql91-docs/PLIST,v retrieving revision 1.5 diff -u -p -r1.5 PLIST --- databases/postgresql91-docs/PLIST 3 Mar 2012 14:01:12 -0000 1.5 +++ databases/postgresql91-docs/PLIST 27 Jun 2012 09:30:55 -0000 @@ -949,6 +949,7 @@ share/doc/postgresql/html/release-8-3-15 share/doc/postgresql/html/release-8-3-16.html share/doc/postgresql/html/release-8-3-17.html share/doc/postgresql/html/release-8-3-18.html +share/doc/postgresql/html/release-8-3-19.html share/doc/postgresql/html/release-8-3-2.html share/doc/postgresql/html/release-8-3-3.html share/doc/postgresql/html/release-8-3-4.html @@ -961,6 +962,7 @@ share/doc/postgresql/html/release-8-3.ht share/doc/postgresql/html/release-8-4-1.html share/doc/postgresql/html/release-8-4-10.html share/doc/postgresql/html/release-8-4-11.html +share/doc/postgresql/html/release-8-4-12.html share/doc/postgresql/html/release-8-4-2.html share/doc/postgresql/html/release-8-4-3.html share/doc/postgresql/html/release-8-4-4.html @@ -977,10 +979,12 @@ share/doc/postgresql/html/release-9-0-4. share/doc/postgresql/html/release-9-0-5.html share/doc/postgresql/html/release-9-0-6.html share/doc/postgresql/html/release-9-0-7.html +share/doc/postgresql/html/release-9-0-8.html share/doc/postgresql/html/release-9-0.html share/doc/postgresql/html/release-9-1-1.html share/doc/postgresql/html/release-9-1-2.html share/doc/postgresql/html/release-9-1-3.html +share/doc/postgresql/html/release-9-1-4.html share/doc/postgresql/html/release-9-1.html share/doc/postgresql/html/release.html share/doc/postgresql/html/resources.html Index: databases/postgresql91-plpython/Makefile =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql91-plpython/Makefile,v retrieving revision 1.2 diff -u -p -r1.2 Makefile --- databases/postgresql91-plpython/Makefile 15 Mar 2012 11:53:23 -0000 1.2 +++ databases/postgresql91-plpython/Makefile 27 Jun 2012 09:30:55 -0000 @@ -1,7 +1,6 @@ # $NetBSD: Makefile,v 1.2 2012/03/15 11:53:23 obache Exp $ PKGNAME= ${DISTNAME:C/-/91-plpython-/} -PKGREVISION= 1 COMMENT= PL/Python procedural language for the PostgreSQL backend PKG_DESTDIR_SUPPORT= user-destdir Index: databases/postgresql91-server/PLIST =================================================================== RCS file: /pub/NetBSD-CVS/pkgsrc/databases/postgresql91-server/PLIST,v retrieving revision 1.4 diff -u -p -r1.4 PLIST --- databases/postgresql91-server/PLIST 3 Mar 2012 14:01:13 -0000 1.4 +++ databases/postgresql91-server/PLIST 27 Jun 2012 09:30:55 -0000 @@ -167,6 +167,7 @@ share/postgresql/timezone/America/Chihua share/postgresql/timezone/America/Coral_Harbour share/postgresql/timezone/America/Cordoba share/postgresql/timezone/America/Costa_Rica +share/postgresql/timezone/America/Creston share/postgresql/timezone/America/Cuiaba share/postgresql/timezone/America/Curacao share/postgresql/timezone/America/Danmarkshavn
Attachment:
signature.asc
Description: PGP signature