From 4cab124a0b1b7504e50fd02357022cdad1a61865 Mon Sep 17 00:00:00 2001 From: Gustavo Zacarias Date: Thu, 8 Oct 2015 15:59:12 -0300 Subject: postgresql: security bump to version 9.4.5 Fixes: CVE-2015-5289: json or jsonb input values constructed from arbitrary user input can crash the PostgreSQL server and cause a denial of service. CVE-2015-5288: The crypt() function included with the optional pgCrypto extension could be exploited to read a few additional bytes of memory. No working exploit for this issue has been developed. sparc build fix patch upstream so drop it. Signed-off-by: Gustavo Zacarias Reviewed-by: Vicente Olivert Riera Tested-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni --- package/postgresql/postgresql.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package/postgresql/postgresql.mk') diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk index e710e928d9..a42fe73b31 100644 --- a/package/postgresql/postgresql.mk +++ b/package/postgresql/postgresql.mk @@ -4,7 +4,7 @@ # ################################################################################ -POSTGRESQL_VERSION = 9.4.4 +POSTGRESQL_VERSION = 9.4.5 POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2 POSTGRESQL_SITE = http://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION) POSTGRESQL_LICENSE = PostgreSQL -- cgit v1.2.3