diff options
| author | Peter Korsgaard <peter@korsgaard.com> | 2017-11-11 11:44:56 +0100 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2017-11-11 23:23:55 +0100 |
| commit | b97353f2b50add10971e8477ad0b4cede9244578 (patch) | |
| tree | 4f951a4f288e06fd587446146e5da72a366886ed /package/postgresql | |
| parent | 0a0042f6d7a526d4addce81286ca77c0a8ca656f (diff) | |
| download | buildroot-b97353f2b50add10971e8477ad0b4cede9244578.tar.gz buildroot-b97353f2b50add10971e8477ad0b4cede9244578.zip | |
postgresql: security bump to version 9.6.6
Fixes the following security issues:
CVE-2017-12172: Start scripts permit database administrator to modify
root-owned files.
CVE-2017-15098: Memory disclosure in JSON functions.
CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT
privileges.
See the announcement for more details:
https://www.postgresql.org/about/news/1801/
While we're at it, also add a hash for the license file.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/postgresql')
| -rw-r--r-- | package/postgresql/postgresql.hash | 6 | ||||
| -rw-r--r-- | package/postgresql/postgresql.mk | 2 |
2 files changed, 5 insertions, 3 deletions
diff --git a/package/postgresql/postgresql.hash b/package/postgresql/postgresql.hash index 62ce9a7407..e62838911e 100644 --- a/package/postgresql/postgresql.hash +++ b/package/postgresql/postgresql.hash @@ -1,2 +1,4 @@ -# From https://ftp.postgresql.org/pub/source/v9.6.5/postgresql-9.6.5.tar.bz2.sha256 -sha256 06da12a7e3dddeb803962af8309fa06da9d6989f49e22865335f0a14bad0744c postgresql-9.6.5.tar.bz2 +# From https://ftp.postgresql.org/pub/source/v9.6.6/postgresql-9.6.6.tar.bz2.sha256 +sha256 399cdffcb872f785ba67e25d275463d74521566318cfef8fe219050d063c8154 postgresql-9.6.6.tar.bz2 +# License file, Locally calculated +sha256 7dc8de32741ad1b03e21710771b55a1b9d460671d47f28a8840f917e38c66676 COPYRIGHT diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk index 7adb957cf0..50ce212c1c 100644 --- a/package/postgresql/postgresql.mk +++ b/package/postgresql/postgresql.mk @@ -4,7 +4,7 @@ # ################################################################################ -POSTGRESQL_VERSION = 9.6.5 +POSTGRESQL_VERSION = 9.6.6 POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2 POSTGRESQL_SITE = http://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION) POSTGRESQL_LICENSE = PostgreSQL |
