cvs commit: ports/databases/postgresql81-server Makefile distinfo
Palle Girgensohn
girgen at FreeBSD.org
Mon Feb 5 15:41:36 UTC 2007
girgen 2007-02-05 15:41:36 UTC
FreeBSD ports repository
Modified files:
databases/postgresql81-server Makefile distinfo
Log:
Update PostgreSQL with, amongst other things, two security fixes:
A vulnerability allows suppressing the normal checks that a SQL
function returns the data type it's declared to do. These errors can
easily be exploited to cause a backend crash, and in principle might
be used to read database content that the user should not be able to
access. [CVE-2007-0555]
A vulnerability involving changing the data type of a table column
can easily be exploited to cause a backend crash, and in principle
might be used to read database content that the user should not be
able to access. [CVE-2007-0556]
The release includes a set of other fixes as well. Please see the
release information at
http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-7
Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0555
Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0556
Revision Changes Path
1.162 +13 -2 ports/databases/postgresql81-server/Makefile
1.53 +12 -12 ports/databases/postgresql81-server/distinfo
More information about the cvs-all
mailing list