cvs commit: ports/databases/postgresql82-server Makefile distinfo

Palle Girgensohn girgen at FreeBSD.org
Mon Feb 5 15:41:42 UTC 2007


girgen      2007-02-05 15:41:41 UTC

  FreeBSD ports repository

  Modified files:
    databases/postgresql82-server Makefile distinfo 
  Log:
  Update PostgreSQL with, amongst other things, two security fixes:
  
    A vulnerability allows suppressing the normal checks that a SQL
    function returns the data type it's declared to do. These errors can
    easily be exploited to cause a backend crash, and in principle might
    be used to read database content that the user should not be able to
    access. [CVE-2007-0555]
  
    A vulnerability involving changing the data type of a table column
    can easily be exploited to cause a backend crash, and in principle
    might be used to read database content that the user should not be
    able to access. [CVE-2007-0556]
  
  The release includes a set of other fixes as well. Please see the
  release information at
  http://www.postgresql.org/docs/8.2/static/release-8-2-2.html
  
  Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0555
  Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0556
  
  Revision  Changes    Path
  1.164     +1 -1      ports/databases/postgresql82-server/Makefile
  1.53      +12 -12    ports/databases/postgresql82-server/distinfo


More information about the cvs-ports mailing list