From b97353f2b50add10971e8477ad0b4cede9244578 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Sat, 11 Nov 2017 11:44:56 +0100 Subject: postgresql: security bump to version 9.6.6 Fixes the following security issues: CVE-2017-12172: Start scripts permit database administrator to modify root-owned files. CVE-2017-15098: Memory disclosure in JSON functions. CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges. See the announcement for more details: https://www.postgresql.org/about/news/1801/ While we're at it, also add a hash for the license file. Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni --- package/postgresql/postgresql.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package/postgresql/postgresql.mk') diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk index 7adb957cf0..50ce212c1c 100644 --- a/package/postgresql/postgresql.mk +++ b/package/postgresql/postgresql.mk @@ -4,7 +4,7 @@ # ################################################################################ -POSTGRESQL_VERSION = 9.6.5 +POSTGRESQL_VERSION = 9.6.6 POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2 POSTGRESQL_SITE = http://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION) POSTGRESQL_LICENSE = PostgreSQL -- cgit v1.2.3