freebsd-ports/databases/postgresql94-server/distinfo
Palle Girgensohn 70a06c4f2e Update PostgreSQL to latest versions.
Security Fixes for Regular Expressions, PL/Java

This release closes security hole CVE-2016-0773, an issue with regular
expression (regex) parsing. Prior code allowed users to pass in expressions
which included out-of-range Unicode characters, triggering a backend crash.
This issue is critical for PostgreSQL systems with untrusted users or which
generate regexes based on user input.

The update also fixes CVE-2016-0766, a privilege escalation issue for users of
PL/Java.  Certain custom configuration settings (GUCS) for PL/Java will now be
modifiable only by the database superuser

URL:		http://www.postgresql.org/about/news/1644/
Security:	CVE-2016-0773, CVE-2016-0766
2016-02-13 22:42:04 +00:00

4 lines
338 B
Text

SHA256 (postgresql/postgresql-9.4.6.tar.bz2) = cbce1f4d01a6142c5d8bebe125623c5198ec04f363da7dd3d3b3a4100b4140a6
SIZE (postgresql/postgresql-9.4.6.tar.bz2) = 17734946
SHA256 (postgresql/pg-941-icu-2015-04-18.diff.gz) = 30c1366539fd0833db37a98b32bd22e8da4538e58f8dbc2ad2f63dc54835609b
SIZE (postgresql/pg-941-icu-2015-04-18.diff.gz) = 4279