From cd80d3c03185dfd0ef1c214c98da35e61f0737c5 Mon Sep 17 00:00:00 2001 From: Gustavo Zacarias Date: Tue, 16 Feb 2016 13:02:38 -0300 Subject: postgresql: security bump to version 9.4.6 Fixes: CVE-2016-0766 - privilege escalation issue for users of PL/Java. CVE-2016-0773 - issue with regular expression (regex) parsing. Prior code allowed users to pass in expressions which included out-of-range Unicode characters, triggering a backend crash. This issue is critical for PostgreSQL systems with untrusted users or which generate regexes based on user input. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni --- package/postgresql/postgresql.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package/postgresql/postgresql.mk') diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk index a42fe73b31..444c1b1321 100644 --- a/package/postgresql/postgresql.mk +++ b/package/postgresql/postgresql.mk @@ -4,7 +4,7 @@ # ################################################################################ -POSTGRESQL_VERSION = 9.4.5 +POSTGRESQL_VERSION = 9.4.6 POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2 POSTGRESQL_SITE = http://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION) POSTGRESQL_LICENSE = PostgreSQL -- cgit v1.2.3