Re: Minor and Security upgrades for PostgreSQL

[Daniel Horecki <morr+lists%morr.pl@localhost>]

Nicolas Thauvin <nico%orgrim.net@localhost> writes:

> On Wed, 27 Jun 2012 13:29:40 +0200
> Nicolas Thauvin <nico%orgrim.net@localhost> wrote:
>
>> Hello,
>> 
>> Earlier this month the PostgreSQL project released 4 bugfix releases,
>> including fixes for 2 security issues :
>> 
>> * Fix incorrect password transformation in contrib/pgcrypto's DES
>>   crypt() function. CVE-2012-2143
>> 
>> * Ignore SECURITY DEFINER and SET attributes for a procedural
>>   language's call handler. CVE-2012-2655
>> 
>> Please find attached 4 patches to upgrade PostgreSQL packages to
>> 8.3.19, 8.4.12, 9.0.8 and 9.1.4.
>
> Anybody interested?
>
> --
> Nicolas

I'll commit it today.

Regards,

-- 
Daniel Horecki
http://morr.pl http://linux.pl http://netbsd.pl http://netbsd.org
HAIL ERIS!
BOFH since 1999.