Security update to PostgreSQL 8.2.2.

This update fixes the following problems:

CVE-2007-0555 and CVE-2007-0556.  Both of these issues
allow an authenticated attacker with the permissions to run arbitrary SQL to
launch a denial-of-service attack or possibly read out random chunks of
memory.  Since attacks to require authenticated access, the security hole is
only considered medium risk.  You can read more about the issues on Mitre:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0556
This commit is contained in:
mbalmer 2007-02-06 06:57:27 +00:00
parent 34e7f73b61
commit 422a973b91
3 changed files with 13 additions and 8 deletions

View File

@ -1,10 +1,10 @@
# $OpenBSD: Makefile,v 1.99 2007/01/17 16:47:25 mbalmer Exp $
# $OpenBSD: Makefile,v 1.100 2007/02/06 06:57:27 mbalmer Exp $
COMMENT-main= "PostgreSQL RDBMS (client)"
COMMENT-server= "PostgreSQL RDBMS (server)"
COMMENT-docs= "PostgreSQL RDBMS documentation"
VERSION= 8.2.1
VERSION= 8.2.2
DISTNAME= postgresql-${VERSION}
PKGNAME-main= postgresql-client-${VERSION}
PKGNAME-server= postgresql-server-${VERSION}

View File

@ -1,4 +1,4 @@
MD5 (postgresql-8.2.1.tar.gz) = 32f53249241880af45df94d8b2789ae7
RMD160 (postgresql-8.2.1.tar.gz) = f1c4dbca3ba1e5c650b46f127e0c60713ad16a1e
SHA1 (postgresql-8.2.1.tar.gz) = 28169b3a6bf906aaa367e3ae92e678af19e78442
SIZE (postgresql-8.2.1.tar.gz) = 15496316
MD5 (postgresql-8.2.2.tar.gz) = 72cc3528e45917ec4712252ff273ee70
RMD160 (postgresql-8.2.2.tar.gz) = 383551b90cc2c4e8d231113fe42ed91814ee79a4
SHA1 (postgresql-8.2.2.tar.gz) = 9f1dd94dc818cd3928a9324d6388f8a964cef01f
SIZE (postgresql-8.2.2.tar.gz) = 15513741

View File

@ -1,4 +1,4 @@
@comment $OpenBSD: PLIST-docs,v 1.27 2007/01/17 16:47:25 mbalmer Exp $
@comment $OpenBSD: PLIST-docs,v 1.28 2007/02/06 06:57:27 mbalmer Exp $
@comment lib/libpq.so.5
@man man/man7/drop_owned.7
@man man/man7/reassign_owned.7
@ -460,6 +460,7 @@ share/doc/postgresql/html/release-7-3-14.html
share/doc/postgresql/html/release-7-3-15.html
share/doc/postgresql/html/release-7-3-16.html
share/doc/postgresql/html/release-7-3-17.html
share/doc/postgresql/html/release-7-3-18.html
share/doc/postgresql/html/release-7-3-2.html
share/doc/postgresql/html/release-7-3-3.html
share/doc/postgresql/html/release-7-3-4.html
@ -476,6 +477,7 @@ share/doc/postgresql/html/release-7-4-12.html
share/doc/postgresql/html/release-7-4-13.html
share/doc/postgresql/html/release-7-4-14.html
share/doc/postgresql/html/release-7-4-15.html
share/doc/postgresql/html/release-7-4-16.html
share/doc/postgresql/html/release-7-4-2.html
share/doc/postgresql/html/release-7-4-3.html
share/doc/postgresql/html/release-7-4-4.html
@ -487,6 +489,7 @@ share/doc/postgresql/html/release-7-4-9.html
share/doc/postgresql/html/release-7-4.html
share/doc/postgresql/html/release-8-0-1.html
share/doc/postgresql/html/release-8-0-10.html
share/doc/postgresql/html/release-8-0-11.html
share/doc/postgresql/html/release-8-0-2.html
share/doc/postgresql/html/release-8-0-3.html
share/doc/postgresql/html/release-8-0-4.html
@ -502,8 +505,10 @@ share/doc/postgresql/html/release-8-1-3.html
share/doc/postgresql/html/release-8-1-4.html
share/doc/postgresql/html/release-8-1-5.html
share/doc/postgresql/html/release-8-1-6.html
share/doc/postgresql/html/release-8-1-7.html
share/doc/postgresql/html/release-8-1.html
share/doc/postgresql/html/release-8-2-1.html
share/doc/postgresql/html/release-8-2-2.html
share/doc/postgresql/html/release-8-2.html
share/doc/postgresql/html/release.html
share/doc/postgresql/html/resources.html
@ -770,7 +775,7 @@ share/doc/postgresql/html/wal-intro.html
share/doc/postgresql/html/wal-reliability.html
share/doc/postgresql/html/wal.html
share/doc/postgresql/html/warm-standby.html
share/doc/postgresql/html/x71094.html
share/doc/postgresql/html/x71114.html
share/doc/postgresql/html/xaggr.html
share/doc/postgresql/html/xfunc-c.html
share/doc/postgresql/html/xfunc-internal.html