Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
Commit | Credits | Log message |
9.2.24_1 10 Feb 2018 22:03:15 |
rene |
Remove expired ports:
2018-01-01 devel/p5-Parse-Pidl: yes
2018-02-08 devel/rubygem-piston: No longer maintained upstream
2017-04-05 databases/postgresql92-server: PostgreSQL 9.2 support has reached
End-of-line. Please upgrade to a later version. |
9.2.24_1 08 Feb 2018 17:38:36 |
girgen |
Update to latest versions of PostgreSQL
2018-02-08 Security Update Release
==================================
The PostgreSQL Global Development Group has released an update to all supported
versions of our database system, including 10.2, 9.6.7, 9.5.11, 9.4.16, 9.3.21.
This release fixes two security issues. This release also fixes issues with
VACUUM, GIN indexes, and hash indexes that could lead to data corruption, as
well as fixes for using parallel queries and logical replication.
All users using the affected versions of PostgreSQL should update as soon as
possible. Please see the notes on "Updating" below for any post-update steps
that may be required.
(Only the first 15 lines of the commit message are shown above ) |
9.2.24 30 Jan 2018 13:45:50 |
mat |
Fix ICU depend for postgresql10-server.
PR: 225049
Submitted by: mat
Approved by: maintainer timeout
Sponsored by: Absolight |
9.2.24 11 Jan 2018 18:31:41 |
tijl |
Convert to USES=autoreconf. |
9.2.24 18 Dec 2017 14:46:23 |
emaste |
databases/postgresql92-server: set LLD_UNSAFE
postgresql*-client ports fail to build with lld as /usr/bin/ld with
errors like
/usr/bin/ld: error: can't create dynamic relocation R_X86_64_PC32 against
symbol: __mb_sb_limit in readonly segment
>>> defined in /lib/libc.so.7
>>> referenced by pgstrcasecmp.c
>>> pgstrcasecmp.o:(pg_strcasecmp) in archive
../../src/port/libpgport.a
Although this appears to affect only -client ports, just set LLD_UNSAFE
for all of the postgresql*-* ports for simplicity.
Approved by: portmgr (blanket for LLD_UNSAFE) |
9.2.24 09 Nov 2017 16:11:21 |
girgen |
Update to latest versions of PostgreSQL
The PostgreSQL Global Development Group has released an update to all supported
versions of our database system, including 10.1, 9.6.6, 9.5.10, 9.4.15, 9.3.20,
and 9.2.24. This release fixes three security issues. This release also fixes
issues found in BRIN indexing, logical replication and other bugs reported over
the past three months.
Please note that the CVE-2017-12172 does not affect the FreeBSD port unless you
decided to not use the contrib/startscript instead of the startscript
distributed with the FreeBSD port/package.
Security: CVE-2017-12172, CVE-2017-15099, CVE-2017-15098
URL: https://www.postgresql.org/about/news/1801/ |
9.2.23_2 09 Nov 2017 02:31:48 |
jbeich |
devel/icu: update to 60.1
Changes: http://site.icu-project.org/download/60
ABI: https://abi-laboratory.pro/tracker/timeline/icu4c/
PR: 223373
Exp-run by: antoine |
9.2.23_1 15 Oct 2017 17:53:04 |
bapt |
Recommand psycopg2 over PyGreSQL
Submitted by: Christoph Moench-Tegeder <cmt@burggraben.net> |
9.2.23_1 25 Sep 2017 00:02:36 |
jbeich |
devel/icu: update to 59.1
- Temporarily keep C++98 working in consumers for Clang's default -std=
Changes: http://site.icu-project.org/download/59
PR: 218788
Submitted by: takefu@airport.fm, dcarmich@dcarmichael.net (early version)
Exp-run by: antoine |
9.2.23 05 Sep 2017 09:27:11 |
girgen |
The PostgreSQL Global Development Group has released an update to all
supported versions of our database system, including 9.6.5, 9.5.9,
9.4.14, 9.3.19, and 9.2.23.
This release includes fixes that prevent a crash in pg_restore when
using parallel mode. It also patches over a few other bugs reported
since the last releases in August.
Additionally, in 9.4.14 only, there is a fix to an issue with walsenders
preventing primary-server shutdown unless immediate shutdown mode is used.
Users should plan to update at the next convenient downtime.
Bug Fixes and Improvements
(Only the first 15 lines of the commit message are shown above ) |
9.2.22_1 10 Aug 2017 14:21:21 |
girgen |
The PostgreSQL Global Development Group has released an update to all
supported versions of our database system, including 9.6.4, 9.5.8,
9.4.13, 9.3.18, and 9.2.22. This release fixes three security issues.
It also patches over 50 other bugs reported over the last three months.
Users who are affected by the below security issues should update as
soon as possible. Users affected by CVE-2017-7547
(https://access.redhat.com/security/cve/CVE-2017-7547) will need to
perform additional steps after upgrading to resolve the issue. Other
users should plan to update at the next convenient downtime.
URL: https://www.postgresql.org/about/news/1772/
Security: CVE-2017-7546, CVE-2017-7547, CVE-2017-7548 |
9.2.21_1 17 Jul 2017 11:15:50 |
amdmi3 |
- Include pg_regress to all postgresql*-client ports, to allow running
regression tests for postgresql extensions
PR: 217874
Approved by: maintainer timeout (pgsql, 4 months) |
9.2.21_1 27 Jun 2017 13:46:53 |
sunpoet |
Update devel/readline to 7.0 patch 3
- Bump PORTREVISION for shlib change
Changes: https://cnswww.cns.cwru.edu/php/chet/readline/CHANGES
https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00107.html
https://lists.gnu.org/archive/html/bug-readline/2017-01/msg00002.html
Differential Revision: https://reviews.freebsd.org/D11172
PR: 219947
Exp-run by: antoine |
9.2.21 28 May 2017 23:16:50 |
sunpoet |
Fix OPTIONS_DEFAULT: remove NLS which is added by framework
Approved by: portmgr (blanket) |
9.2.21 11 May 2017 14:28:22 |
girgen |
PostgreSQL security updates
The PostgreSQL Global Development Group has released an update to all supported
versions of our database system, including 9.6.3, 9.5.7, 9.4.12, 9.3.17, and
9.2.21. This release fixes three security issues. It also patches a number of
other bugs reported over the last three months. Users who use the PGREQUIRESSL
environment variable to control connections, and users who rely on security
isolation between database users when using foreign servers, should update as
soon as possible. Other users should plan to update at the next convenient
downtime.
URL: https://www.postgresql.org/about/news/1746/
Security: CVE-2017-7484, CVE-2017-7485, CVE-2017-7486
Also modify rcorder and let sshd start before PostgreSQL, so any problems
during startup can be reviewed promplty from an ssh login. |
9.2.20 09 Feb 2017 15:22:44 |
girgen |
PostgreSQL 9.6.2, 9.5.6, 9.4.11, 9.3.16 and 9.2.20 released!
The PostgreSQL Global Development Group has released an update to all supported
versions of our database system, including 9.6.2, 9.5.6, 9.4.11, 9.3.16, and
9.2.20. This release includes fixes that prevent data corruption issues in
index builds and in certain write-ahead-log replay situations, which are
detailed below. It also patches over 75 other bugs reported over the last three
months.
Users should plan to apply this update at the next scheduled downtime.
Build corruption with CREATE INDEX CONCURRENTLY
There existed a race condition if CREATE INDEX CONCURRENTLY was called on a
column that had not been indexed before, then rows that were updated by
transactions running at the same time as the CREATE INDEX CONCURRENTLY command
could have been indexed incorrectly.
If you suspect this may have happened, the most reliable solution is to rebuild
affected indexes after installing this update.
This issue is present in the 9.2, 9.3, 9.4, 9.5, and 9.6 series of PostgreSQL.
URL https://www.postgresql.org/about/news/1733/ |
9.2.19_1 07 Jan 2017 21:42:28 |
sunpoet |
Add more PLIST_SUB to Mk/Uses/python.mk
- Add PYTHON_PYOEXTENSION and PYTHON_SUFFIX
- Add PYTHON2 and PYTHON3
- Respect PYTHON_VERSION
- Rename PYOEXTENSION to PYTHON_PYOEXTENSION
This change would help:
- Build databases/postgresql*-plpython with Python 3
(It has PLIST issue since bsd.python.mk to Uses/python.mk transition)
- Simplify Makefile
PR: 205807
Differential Revision: https://reviews.FreeBSD.org/D4758
Exp-run by: antoine |
9.2.19_1 29 Nov 2016 18:46:22 |
mat |
Mark some ports as not openssl-devel ready.
Sponsored by: Absolight |
9.2.19_1 19 Nov 2016 18:21:20 |
jbeich |
devel/icu: update to 58.1
Changes: http://site.icu-project.org/download/58
PR: 214384
Exp-run by: antoine
Approved by: office (bapt) |
9.2.19 28 Oct 2016 17:55:30 |
danfe |
Do not redefine DEBUG_DESC when its meaning more or less matches the default
option description. Those ports where it meant something more specific were
left untouched. |
9.2.19 27 Oct 2016 14:04:56 |
girgen |
Update PostgreSQL to latest versions.
The PostgreSQL Global Development Group has released an update to all supported
versions of our database system, including 9.6.1, 9.5.5, 9.4.10, 9.3.15,
9.2.19, and 9.1.24.
This release fixes two issues that can cause data corruption, which are
described in more detail below. It also patches a number of other bugs reported
over the last three months. The project urges users to apply this update at the
next possible downtime. |
9.2.18_1 24 Sep 2016 11:06:57 |
tijl |
- Update devel/icu to 57.1.
- Clean up the Makefile.
- Follow some upstream recommendations (--with-data-packaging=archive,
--disable-renaming, -DICU_NO_USER_DATA_OVERRIDE).
- Patch makefiles to install static libraries with INSTALL_DATA so they
aren't stripped.
- Patch config/mh-bsd-gcc to sync with config/mh-linux-gcc.
- Fix endianness detection in ICU. The code wanted to use BYTE_ORDER
defined in machine/endian.h, but this isn't visible because ICU is
compiled with _XOPEN_SOURCE. Patch the code to use _BYTE_ORDER instead.
- Compile ICU with C++11 compiler to enable move constructors.
- Patch ICU to fix a problem with atomics in the case of a C++11 compiler
without C++11 header <atomic> (like Clang on FreeBSD 9).
- Bump all ports that depend on it due to library version change.
- Add USES=compiler:c++0x to some ports that pick up -std=c++0x from ICU
pkgconfig files.
- Add USES=compiler:c++11-lib to graphics/libcdr01 because it also needs
a C++11 runtime library now. Add this to all ports that depend on it
so their executables load the right libstdc++.so on FreeBSD 9.
PR: 205120
Exp-run by: antoine
Approved by: portmgr (antoine) |
9.2.18 07 Sep 2016 01:57:44 |
girgen |
Fix plist problem for postgresql-9.6 [1]
Fix spelling while here [2]
Pointed out by: matthew [1], bcr [2]
Pointy hat to: girgen |
9.2.18 05 Sep 2016 11:59:33 |
girgen |
Fix broken package name for PostgreSQL 9.6 RC1
Fix bad pkg-plist for postgresql 9.6 server |
9.2.18 05 Sep 2016 11:15:29 |
girgen |
Add PostgreSQL-9.6 RC1
Please read the entry from 20160905 in UPDATING:
daemon user has changed to `postgres'
ICU is default on |
9.2.18 11 Aug 2016 18:35:31 |
ohauer |
- fix sizes
- s/USE_OPENSSL/USES=ssl/
assumed OK for commit ~1h after first notify about wrong sizes in distinfo |
9.2.18 11 Aug 2016 16:39:40 |
girgen |
The PostgreSQL Global Development Group has released an update to all supported
versions of our database system, including 9.5.4, 9.4.9, 9.3.14, 9.2.18 and
9.1.23. This release fixes two security issues. It also patches a number of
other bugs reported over the last three months. Users who rely on security
isolation between database users should update as soon as possible. Other users
should plan to update at the next convenient downtime.
If you are using the ICU patch, please consult UPDATING.
Improve periodic cleanup, suggested by claudius (at) ambtec.de. [1]
PR: 210941 [1]
Security: CVE-2016-5423, CVE-2016-5424 |
9.2.17_2 09 Jul 2016 13:16:52 |
cmt |
do not strip binaries when building with DTRACE
stripping would destroy some probes and might result in instable
behaviour when trying to access those probes.
PR: 204314
Approved by: rene (mentor), maintainer-timeout |
9.2.17_2 06 Jul 2016 22:10:14 |
mat |
Bump PORTREVISION for the icu revert.
This time not bumping lang/php70, but devel/php70-intl which is the one
really depending on icu.
PR: 205120
With hat: portmgr
Sponsored by: Absolight |
9.2.17_1 06 Jul 2016 07:34:13 |
gahr |
devel/icu: bump PORTREVISION on dependent ports |
9.2.17 17 Jun 2016 23:28:05 |
mat |
Rename all files containing a : in their filename.
While there, run make makepatch on affected ports, and rename patches
accordingly.
Sponsored by: Absolight |
9.2.17 19 May 2016 11:09:14 |
amdmi3 |
- Fix trailing whitespace in pkg-messages
Approved by: portmgr blanket |
9.2.17 12 May 2016 22:36:10 |
girgen |
Update PostgreSQL to latest versions
URL: http://www.postgresql.org/docs/9.5/static/release-9-5-3.html |
9.2.16 01 Apr 2016 14:00:57 |
mat |
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.
With hat: portmgr
Sponsored by: Absolight |
9.2.16 31 Mar 2016 14:49:02 |
girgen |
Update PostgreSQL 9.1, 9.2 9.3 and 9.4 to latest versions.
URL: http://www.postgresql.org/about/news/1656/ |
9.2.15 13 Feb 2016 22:42:04 |
girgen |
Update PostgreSQL to latest versions.
Security Fixes for Regular Expressions, PL/Java
This release closes security hole CVE-2016-0773, an issue with regular
expression (regex) parsing. Prior code allowed users to pass in expressions
which included out-of-range Unicode characters, triggering a backend crash.
This issue is critical for PostgreSQL systems with untrusted users or which
generate regexes based on user input.
The update also fixes CVE-2016-0766, a privilege escalation issue for users of
PL/Java. Certain custom configuration settings (GUCS) for PL/Java will now be
modifiable only by the database superuser
URL: http://www.postgresql.org/about/news/1644/
Security: CVE-2016-0773, CVE-2016-0766 |
9.2.14 13 Jan 2016 10:36:22 |
girgen |
Some binaries where moved from contrib to base in 9.5, like pgbench and
pg_upgrade. Other where added in 9.5, but the port failed to install them.
Make sure they are properly installed by the correct port (-client or -server)
[1]
Remove unused and hence confusing OSSP_UUID parameters from Makefile [2]
Add options to allow user to be set for the backup script in periodic.
Add this option only to 9.5 for now. It will be updated to other servers at
next regular patch release. [3]
The path to perl in hard coded into pgxs/src/Makefile.global which is
then installed. Hence, we must depend on perl when that file is installed.
Noticed by: Paul Guyot [1]
PR: 192387 [2]
PR: 172110 [3]
PR: 206046 [4] |
9.2.14 15 Oct 2015 14:55:14 |
mat |
Drop 8 support.
With hat: portmgr
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D3694 |
9.2.14 08 Oct 2015 21:25:01 |
girgen |
Update PostgreSQL port to latest version.
Two security issues have been fixed in this release which affect users
of specific PostgreSQL features:
CVE-2015-5289: json or jsonb input values constructed from arbitrary
user input can crash the PostgreSQL server and cause a denial of
service.
CVE-2015-5288: The crypt( function included with the optional pgCrypto
extension could be exploited to read a few additional bytes of memory.
No working exploit for this issue has been developed.
This update will also disable SSL renegotiation by default;
previously, it was enabled by default. SSL renegotiation will be
removed entirely in PostgreSQL versions 9.5 and later.
URL: http://www.postgresql.org/about/news/1615/
Security: CVE-2015-5288 CVE-2015-5289 |
9.2.13_2 06 Oct 2015 08:47:43 |
girgen |
Fix broken XML support.
PR: ports/202649 |
9.2.13_1 24 Jul 2015 06:05:23 |
bapt |
Really fix ldap option |
9.2.13_1 22 Jul 2015 23:20:03 |
bapt |
Fix ldap option |
9.2.13_1 22 Jul 2015 23:10:40 |
bapt |
Only defined options marked as server only for the servers
Remove (server) from the description |
9.2.13_1 22 Jul 2015 22:56:56 |
bapt |
UNIQUENAME is not used anymore for long to save options |
9.2.13_1 22 Jul 2015 22:45:36 |
bapt |
Simplify a bit the Makefiles
Use OPTIONS_SUB to automatically PLIST_SUB
Use OPTIONS helpers |
9.2.13_1 22 Jul 2015 21:46:28 |
bapt |
Cleanup plist and avoid useless @exec |
9.2.13 12 Jun 2015 13:00:50 |
girgen |
Update PostgreSQL to latest versions.
Earlier update releases attempted to fix an issue in PostgreSQL 9.3 and 9.4
with "multixact wraparound", but failed to account for issues doing multixact
cleanup during crash recovery. This could cause servers to be unable to restart
after a crash. As such, all users of 9.3 and 9.4 should apply this update as
soon as possible.
URL: http://www.postgresql.org/about/news/1592/ |
9.2.12 05 Jun 2015 14:57:29 |
girgen |
Update PostgreSQL to latest versions.
The update is mostly to fix the file persmission problem described
in the URL below. You might want to wait until next upgrade, depending
on you local configuration.
URL: http://www.postgresql.org/about/news/1590/ |
9.2.11 22 May 2015 23:22:20 |
girgen |
Update PostgreSQL ports to latest version.
Data Corruption Fix
For users of PostgreSQL versions 9.3 or 9.4, this release fixes a problem where
the database will fail to protect against "multixact wraparound", resulting in
data corruption or loss. Users with a high transaction rate (1 million or more
per hour) in a database with many foreign keys are especially vulnerable. We
strongly urge all users of 9.4 and 9.3 to update their installations in the
next few days.
Users of versions 9.2 and earlier are not affected by this issue.
Security: fc38cd83-00b3-11e5-8ebd-0026551a22dc |
9.2.10_1 14 May 2015 10:15:09 |
mat |
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight |
9.2.10_1 19 Apr 2015 11:12:22 |
girgen |
Commit the missing part of last commit: Chase upcoming update of ICU to 5.5. |
9.2.10_1 18 Apr 2015 12:37:23 |
girgen |
Chase upcoming update of ICU to 5.5. |
9.2.10 05 Apr 2015 09:00:59 |
girgen |
remove redundant cpe markers on the slave ports |
9.2.10 25 Mar 2015 09:33:53 |
marino |
databases category: Remove $PTHREAD_LIBS
Note: virtuoso did not pass check-plist from before, so it was fixed.
approved by: PTHREAD blanket |
9.2.10 20 Mar 2015 08:58:15 |
robak |
databases/postgresql92-server: add CPE information
- Maintainer's timeout (pgsql@FreeBSD.org)
PR: 197487
Submitted by: Shun <shun.fbsd.pr@dropcut.net> |
9.2.10 07 Feb 2015 17:05:08 |
girgen |
Revert the change from readline to libedit, and instead make libedit optional.
PR: ports/197362 |
9.2.10 05 Feb 2015 22:54:35 |
girgen |
Update PostgreSQL-9.x to latests versions.
This update fixes multiple security issues reported in PostgreSQL over the past
few months. All of these issues require prior authentication, and some require
additional conditions, and as such are not considered generally urgent.
However, users should examine the list of security holes patched below in case
they are particularly vulnerable.
Security: CVE-2015-0241,CVE-2015-0242,CVE-2015-0243,
CVE-2015-0244,CVE-2014-8161 |
9.2.9_1 12 Nov 2014 09:53:42 |
girgen |
Revert r247147.
We need -pthread in LDFLAGS for threaded extensions like plv8js to work.
PR: 175783
Submitted by: Li-Wen Hsu <lwhsu@FreeBSD.org> |
9.2.9 10 Sep 2014 13:34:54 |
bapt |
Turn OPTIONS_SINGLE KRB5 into an OPTIONS_RADIO like it is supposed to be
PR: 193451
Submitted by: dmitry2004@yandex.ru |
9.2.9 25 Aug 2014 17:53:27 |
crees |
Convert pgsql ports to use USES+=pgsql
Reviewed by: bapt |
9.2.9 02 Aug 2014 07:01:54 |
mva |
- Unbreak builds after the lang/python27 update (r363790)
Exp-run: 192242, 192244 |
9.2.9 30 Jul 2014 18:21:47 |
crees |
Update to the latest snapshots.
uuid-ossp patch has been outdated with irrelevant changes (for us),
so massage back in.
In head of postgresql, this is handled properly, so eventually the ossp patches
can go. |
9.2.8_2 24 Jul 2014 18:34:16 |
tijl |
net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD
databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip
databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample (Only the first 15 lines of the commit message are shown above ) |
9.2.8_1 24 Jun 2014 22:34:28 |
bapt |
Properly call MAKE_CMD |
9.2.8_1 09 Jun 2014 21:57:43 |
girgen |
Prepare for upcoming ICU-5.3 upgrade. |
9.2.8_1 16 Apr 2014 18:28:50 |
zeising |
The FreeBSD x11@ and graphics team proudly presents
a zeising, kwm production, with help from dumbbell, bdrewery:
NEW XORG ON FREEBSD 9-STABLE AND 10-STABLE
This update switches over to use the new xorg stack by default on FreeBSD 9
and 10 stable, on osversions where vt(9) is available.
It is still possible to use the old stack by specifying WITHOUT_NEW_XORG in
/etc/make.conf .
FreeBSD 8-STABLE and released versions of FreeBSD still use
the old version.
A package repository with binary packages for new xorg will
be available soon.
This patch also contains updates of libxcb and related ports, pixman, as well (Only the first 15 lines of the commit message are shown above ) |
9.2.8 21 Mar 2014 08:15:26 |
girgen |
Fix mistake with ossp-uuid: don't use --with-ossp-uuid, since it will need
the ossp library present, and then we never use it. |
9.2.8 20 Mar 2014 23:09:05 |
girgen |
Fixed bad filesize in distinfo |
9.2.8 20 Mar 2014 13:43:16 |
girgen |
The PostgreSQL Global Development Group has released an update to all supported
version of the database system, including versions 9.3.4, 9.2.8, 9.1.13,
9.0.17, and 8.4.21. This minor release fixes a data corruption issue with
replication and crash recovery in version 9.3, as well as several other minor
issues in all versions. All users of version 9.3 are urged to update their
installations at the next possible downtime. Users of older versions should
update at their convenience.
The data corruption issue in PostgreSQL 9.3 affects binary replication
standbys, servers being recovered from point-in-time-recovery backup, and
standalone servers which recover from a system crash. The bug causes
unrecoverable index corruption during recovery due to incorrect replay of row
locking operations. This can then cause query results to be inconsistent
depending on whether or not an index is used, and eventually lead to primary
key violations and similar issues. For this reason, users are encouraged to (Only the first 15 lines of the commit message are shown above ) |
9.2.7 26 Feb 2014 17:24:36 |
antoine |
Stage support
Reviewed by: postgresql@
Tested by: miwi and me |
9.2.7 20 Feb 2014 18:11:38 |
girgen |
The PostgreSQL Global Development Group has released an important
update to all supported versions of the PostgreSQL database system,
which includes minor versions 9.3.3, 9.2.7, 9.1.12, 9.0.16, and
8.4.20. This update contains fixes for multiple security issues, as
well as several fixes for replication and data integrity issues. All
users are urged to update their installations at the earliest
opportunity, especially those using binary replication or running a
high-security application.
This update fixes CVE-2014-0060, in which PostgreSQL did not properly
enforce the WITH ADMIN OPTION permission for ROLE management. Before
this fix, any member of a ROLE was able to grant others access to the
same ROLE regardless if the member was given the WITH ADMIN OPTION
permission. It also fixes multiple privilege escalation issues,
including: CVE-2014-0061, CVE-2014-0062, CVE-2014-0063, CVE-2014-0064,
CVE-2014-0065, and CVE-2014-0066. More information on these issues can
be found on our security page and the security issue detail wiki page.
Security: CVE-2014-0060,CVE-2014-0061,CVE-2014-0062,CVE-2014-0063
CVE-2014-0064,CVE-2014-0065,CVE-2014-0066,CVE-2014-0067 |
9.2.6_1 10 Feb 2014 23:46:46 |
girgen |
fix messed up file sizes for icu patch |
9.2.6_1 10 Feb 2014 16:32:41 |
girgen |
Chase ICU update |
9.2.6_1 07 Feb 2014 11:44:09 |
bapt |
Chase boost and icu bump
While here convert some LIB_DEPENDS |
9.2.6 11 Dec 2013 18:08:53 |
bapt |
In preparation for making libtool generate libraries with a sane name, fix all
LIB_DEPENDS in databases |
9.2.6 05 Dec 2013 15:59:53 |
girgen |
The PostgreSQL Global Development Group has released a critical update
to all supported versions of the PostgreSQL database system, which
includes minor versions 9.3.2, 9.2.6, 9.1.11, 9.0.15, and 8.4.19. This
update fixes three serious data-loss bugs affecting replication and
database maintenance. All users are urged to update their
installations at the earliest opportunity.
URL: http://www.postgresql.org/about/news/1492/ |
9.2.5 28 Oct 2013 18:52:22 |
sunpoet |
- Fix PLIST for python3
Submitted by: sunpoet (myself)
Approved by: crees (pgsql) |
9.2.5 15 Oct 2013 17:17:06 |
sunpoet |
- Remove DISTV: only used in PKGNAMESUFFIX and complained by portlint
- Convert to new LIB_DEPENDS format for postgresql*-contrib
Submitted by: sunpoet (myself)
Reviewed by: crees (pgsql)
Approved by: jgh (pgsql) |
9.2.5 12 Oct 2013 00:59:50 |
girgen |
Update PostgreSQL ports to 9.3.1, 9.2.5, 9.1.10, 9.0.14, and 8.4.18.
Note that users of the hstore extension on version 9.3 must take an additional,
post upgrade step of running "ALTER EXTENSION hstore UPDATE" in each database
after update.
URL: http://www.postgresql.org/about/news/1487/ |
9.2.4 10 Oct 2013 00:09:35 |
jgh |
- Fix pkg name collision
Reviewed by: pgsql@
With hat: pgsql@ |
9.2.4 07 Oct 2013 20:03:38 |
jgh |
- revert r329725
Reported by: qat@
With hat: pgsql@ |
9.2.4 07 Oct 2013 19:04:04 |
jgh |
- Fix pkg name collision
Reviewed by: crees@
With hat: pgsql@ |
9.2.4 20 Sep 2013 16:13:49 |
bapt |
Add NO_STAGE all over the place in preparation for the staging support (cat:
databases) |
9.2.4 07 Jul 2013 00:15:47 |
jgh |
- convert from USE_GMAKE to USES=gmake
- trim historical headers
With hat: pgsql@ |
9.2.4 12 May 2013 21:09:39 |
girgen |
Update postgresql93-client to properly depend on pkgconfig
Reported by: Ports-QAT |
9.2.4 06 May 2013 18:37:00 |
crees |
Don't build client with ldap-- this is unnecessary and causes build breakage
for package building because of lack of LDAP installation.
PR: ports/177381
Tested by: Chris Dukes <chris.dukes.aix@gmail.com> |
9.2.4 28 Apr 2013 18:15:06 |
crees |
databases/postgresql-server ports: Unbreak NLS
Submitted by: bapt |
9.2.4 28 Apr 2013 14:00:03 |
crees |
databases/postgresql{84,91,92}-server: Readd bsd.port.pre.mk; it is required for
checking existence of files in FILESDIR |
9.2.4 26 Apr 2013 15:10:57 |
bapt |
Convert USE_GETTEXT -> USES=gettext
While here:
- Trim headers
- Remove some useless pre.mk/post.mk
- Convert to optionsng |
9.2.4 04 Apr 2013 13:21:23 |
girgen |
The PostgreSQL Global Development Group has released a security
update to all current versions of the PostgreSQL database system,
including versions 9.2.4, 9.1.9, 9.0.13, and 8.4.17. This update
fixes a high-exposure security vulnerability in versions 9.0 and
later. All users of the affected versions are strongly urged to apply
the update *immediately*.
A major security issue (for versions 9.x only) fixed in this release,
[CVE-2013-1899](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899),
makes it possible for a connection request containing a database name
that begins with "-" to be crafted that can damage or destroy files
within a server's data directory. Anyone with access to the port the
PostgreSQL server listens on can initiate this request. This issue was
discovered by Mitsumasa Kondo and Kyotaro Horiguchi of NTT Open Source
Software Center. (Only the first 15 lines of the commit message are shown above ) |
9.2.3 08 Feb 2013 07:54:10 |
girgen |
PostgreSQL 9.2.3, 9.1.8, 9.0.12, 8.4.16 and 8.3.23 released
This update fixes a denial-of-service (DOS) vulnerability. All users
should update their PostgreSQL installations as soon as possible.
The security issue fixed in this release, CVE-2013-0255, allows a
previously authenticated user to crash the server by calling
an internal function with invalid arguments.
URL: http://www.postgresql.org/about/news/1446/
Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0255 |
9.2.2_1 22 Jan 2013 18:32:00 |
crees |
Remove versioned PKGNAMESUFFIX from -plpython ports; the versions differ anyway
Submitted by: sunpoet |
9.2.2_1 22 Jan 2013 17:59:42 |
crees |
Fix package build for -plpython
Although the plpython work was done by rm, this problem was actually my fault
Noticed by: sunpoet |
9.2.2_1 20 Jan 2013 10:17:45 |
rm |
- add pkg-plist changes, forgotten in r310678
- fix portname in MOVED
- remove trailing whitespace in MOVED, while here |
9.2.2_1 27 Dec 2012 21:11:42 |
jgh |
- remove broken configurable non-default user/group for postgresql-server
- while here fix formatting of new header
With hat: pgsql@ |
9.2.2_1 19 Dec 2012 16:13:30 |
girgen |
Chase ICU update properly and bump PORTREVISION |
9.2.2 19 Dec 2012 16:03:59 |
girgen |
Chase ICU update to 50 |
9.2.2 10 Dec 2012 16:44:10 |
girgen |
Feature safe: yes
PR: 174336
fix typo |
9.2.2 06 Dec 2012 16:40:36 |
girgen |
The PostgreSQL Global Development Group has released an update to all current
versions of the PostgreSQL database system, including versions 9.2.2, 9.1.7,
9.0.11, 8.4.15, and 8.3.22. Users of PostgreSQL Hot Standby replication
should update at the next possible opportunity. Other users should update
at their next maintenance window.
Deprecate the 8.3.22 version, since it is near end-of-life.
URL: http://www.postgresql.org/about/news/1430/
Feature safe: yes |
9.2.1 16 Oct 2012 17:28:22 |
jgh |
- adopt optionsNG
with hat pgsql@
Feature safe: yes |