diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2015-10-08 15:59:12 -0300 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2015-10-09 15:24:34 +0200 |
| commit | 4cab124a0b1b7504e50fd02357022cdad1a61865 (patch) | |
| tree | 180d71f044bd9af27c83d1b8e0f768883d9e36ef /package/postgresql/postgresql.hash | |
| parent | 633f2f570a342cbb68a1b9147c7d5d68d429c2fb (diff) | |
| download | buildroot-4cab124a0b1b7504e50fd02357022cdad1a61865.tar.gz buildroot-4cab124a0b1b7504e50fd02357022cdad1a61865.zip | |
postgresql: security bump to version 9.4.5
Fixes:
CVE-2015-5289: json or jsonb input values constructed from arbitrary
user input can crash the PostgreSQL server and cause a denial of
service.
CVE-2015-5288: The crypt() function included with the optional pgCrypto
extension could be exploited to read a few additional bytes of memory.
No working exploit for this issue has been developed.
sparc build fix patch upstream so drop it.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/postgresql/postgresql.hash')
| -rw-r--r-- | package/postgresql/postgresql.hash | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/package/postgresql/postgresql.hash b/package/postgresql/postgresql.hash index 5f415af535..97bb56d92f 100644 --- a/package/postgresql/postgresql.hash +++ b/package/postgresql/postgresql.hash @@ -1,2 +1,2 @@ -# From https://ftp.postgresql.org/pub/source/v9.4.4/postgresql-9.4.4.tar.bz2.sha256 -sha256 538ed99688d6fdbec6fd166d1779cf4588bf2f16c52304e5ef29f904c43b0013 postgresql-9.4.4.tar.bz2 +# From https://ftp.postgresql.org/pub/source/v9.4.5/postgresql-9.4.5.tar.bz2.sha256 +sha256 b87c50c66b6ea42a9712b5f6284794fabad0616e6ae420cf0f10523be6d94a39 postgresql-9.4.5.tar.bz2 |
