buildroot/package/postgresql, branch 2018.02

postgresql: security bump to 10.3

2018-03-03T19:15:59+00:00

Helps mitigate CVE-2018-1058 see: https://www.postgresql.org/docs/current/static/release-10-3.html for more bugfixes. Signed-off-by: Adam Duskett Signed-off-by: Peter Korsgaard

postgresql: update license file hash

2018-02-13T21:06:28+00:00

Copyright year update. Fixes: http://autobuild.buildroot.net/results/d79/d7989660584430945644e3a4406ba33cee22863d/ http://autobuild.buildroot.net/results/b51/b5141b64ed838caa1daca1bf4fe322dd2afaf0b5/ http://autobuild.buildroot.net/results/a37/a375d533036a1b95af32b6bda086e93174b8c5f0/ Cc: Peter Seiderer Signed-off-by: Baruch Siach Reviewed-by: Matt Weber Signed-off-by: Thomas Petazzoni

postgresql: security bump to 10.2

2018-02-10T07:57:08+00:00

from https://www.postgresql.org/about/news/1829/ [1] CVE-2018-1052: Fix the processing of partition keys containing multiple expressions [2] CVE-2018-1053: Ensure that all temporary files made with "pg_upgrade" are non-world-readable Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

postgresql: bump to 10.1

2017-11-27T08:44:24+00:00

- Add a hash for the license file. - PostgreSQL 10.0 and above will default to checking for /dev/urandom if an SSL library is not found, which will fail when cross compiling. Since /dev/urandom is guaranteed to be provided on Linux systems, add ac_cv_file__dev_urandom=yes to the configure environment if a SSL library is not selected. Signed-off-by: Adam Duskett [Thomas: minor tweaks to the /dev/urandom comment in the .mk file.] Signed-off-by: Thomas Petazzoni

postgresql: security bump to version 9.6.6

2017-11-11T22:23:55+00:00

Fixes the following security issues: CVE-2017-12172: Start scripts permit database administrator to modify root-owned files. CVE-2017-15098: Memory disclosure in JSON functions. CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges. See the announcement for more details: https://www.postgresql.org/about/news/1801/ While we're at it, also add a hash for the license file. Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni

postgresql: bump to version 9.6.5

2017-09-05T19:17:45+00:00

Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

postgresql: bump version to 9.6.3 (security)

2017-05-11T15:51:37+00:00

Three security vulnerabilities have been closed by this release: CVE-2017-7484: selectivity estimators bypass SELECT privilege checks CVE-2017-7485: libpq ignores PGREQUIRESSL environment variable CVE-2017-7486: pg_user_mappings view discloses foreign server passwords More details: https://www.postgresql.org/about/news/1746/ Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

postgresql: bump version to 9.6.2

2017-03-18T14:53:25+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

postgresql: disable spinlocks on openrisc

2017-02-15T21:34:44+00:00

Just like all non-mainstream architectures, postgresql doesn't provide its internal spinlock implementation on OpenRISC, so disable it. Fixes: http://autobuild.buildroot.net/results/e9de750e34f10c4a2403696936260ad1547d0d15/ Signed-off-by: Thomas Petazzoni

postgresql: fix pgac_cv_snprintf_long_long_int_modifier

2016-11-28T20:37:38+00:00

Supplementary change the pgac_cv_snprintf_long_long_int_modifier from complete format '%lld' to modifier 'll' version only (forgotten in commit 02c43157ab09f6fe4078fd1145fc9d403d66c089 ([1])). Fixes Bug 9451 ([2]). [1] https://git.buildroot.net/buildroot/commit/?id=02c43157ab09f6fe4078fd1145fc9d403d66c089 [2] https://bugs.busybox.net/show_bug.cgi?id=9451 Reported-by: Daniel Signed-off-by: Peter Seiderer Signed-off-by: Thomas Petazzoni