1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-27 05:10:36 +00:00

PostgreSQL 13.1, 12.5, 11.10, 10.15, 9.6.20 and 9.5.24 released!

The PostgreSQL Global Development Group has released an update to all supported
versions of our database system, including 13.1, 12.5, 11.10, 10.15, 9.6.20 and
9.5.24.  This release closes three security vulnerabilities and fixes over 65
bugs reported over the last three months.

Due to the nature of CVE-2020-25695, we advise you to update as soon as possible.

Additionally, this is the second-to-last release of PostgreSQL 9.5. If you are
running PostgreSQL 9.5 in a production environment, we suggest that you make
plans to upgrade.

For the full list of changes, please review the release notes.

Security:	CVE-2020-25695: Multiple features escape "security restricted
				operation" sandbox

Security:	CVE-2020-25694: Reconnection can downgrade connection security
				settings

Security:	CVE-2020-25696: psql's \gset allows overwriting specially
				treated variables
This commit is contained in:
Palle Girgensohn 2020-11-13 19:27:04 +00:00
parent ab3fd0e886
commit 4ffca4aa7f
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=555043
5 changed files with 291 additions and 4 deletions

View File

@ -1,7 +1,7 @@
# Created by: Marc G. Fournier <scrappy@FreeBSD.org>
# $FreeBSD$
DISTVERSION?= 9.5.23
DISTVERSION?= 9.5.24
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 0

View File

@ -1,5 +1,5 @@
TIMESTAMP = 1597309874
SHA256 (postgresql/postgresql-9.5.23.tar.bz2) = e314fa7e3355c4b8a35e94eeb8e58a6cf46adf49a2f9afa0c15cbc39980c8366
SIZE (postgresql/postgresql-9.5.23.tar.bz2) = 17682366
TIMESTAMP = 1605002554
SHA256 (postgresql/postgresql-9.5.24.tar.bz2) = 065cfd3db9f5aca84e794e73e71a797c984b2e728e760f4f4226a9162a99c22a
SIZE (postgresql/postgresql-9.5.24.tar.bz2) = 17881872
SHA256 (postgresql/pg-954-icu-2016-08-10.diff.gz) = 5fa083ec38087d6a0961642208f012e902221270708b919b92e9eedaa755e365
SIZE (postgresql/pg-954-icu-2016-08-10.diff.gz) = 5952

View File

@ -0,0 +1,278 @@
Regressed by https://github.com/unicode-org/icu/commit/c3fe7e09d844
dbcommands.c:770:1: error: conflicting types for 'dropdb'
dropdb(const char *dbname, bool missing_ok)
^
../../../src/include/commands/dbcommands.h:23:13: note: previous declaration is here
extern void dropdb(const char *dbname, bool missing_ok);
^
dbcommands.c:1367:1: error: conflicting types for 'AlterDatabase'
AlterDatabase(AlterDatabaseStmt *stmt, bool isTopLevel)
^
../../../src/include/commands/dbcommands.h:25:12: note: previous declaration is here
extern Oid AlterDatabase(AlterDatabaseStmt *stmt, bool isTopLevel);
^
dbcommands.c:1977:1: error: conflicting types for 'get_database_oid'
get_database_oid(const char *dbname, bool missing_ok)
^
../../../src/include/commands/dbcommands.h:29:12: note: previous declaration is here
extern Oid get_database_oid(const char *dbname, bool missingok);
^
indxpath.c:2917:1: error: conflicting types for 'relation_has_unique_index_for'
relation_has_unique_index_for(PlannerInfo *root, RelOptInfo *rel,
^
../../../../src/include/optimizer/paths.h:66:13: note: previous declaration is here
extern bool relation_has_unique_index_for(PlannerInfo *root, RelOptInfo *rel,
^
indxpath.c:3091:1: error: conflicting types for 'match_index_to_operand'
match_index_to_operand(Node *operand,
^
../../../../src/include/optimizer/paths.h:69:13: note: previous declaration is here
extern bool match_index_to_operand(Node *operand, int indexcol,
^
indxpath.c:3735:1: error: conflicting types for 'adjust_rowcompare_for_index'
adjust_rowcompare_for_index(RowCompareExpr *clause,
^
../../../../src/include/optimizer/paths.h:75:14: note: previous declaration is here
extern Expr *adjust_rowcompare_for_index(RowCompareExpr *clause,
^
regis.c:31:1: error: conflicting types for 'RS_isRegis'
RS_isRegis(const char *str)
^
../../../src/include/tsearch/dicts/regis.h:41:7: note: previous declaration is here
bool RS_isRegis(const char *str);
^
regis.c:85:1: error: conflicting types for 'RS_compile'
RS_compile(Regis *r, bool issuffix, const char *str)
^
../../../src/include/tsearch/dicts/regis.h:43:7: note: previous declaration is here
void RS_compile(Regis *r, bool issuffix, const char *str);
^
regis.c:218:1: error: conflicting types for 'RS_execute'
RS_execute(Regis *r, char *str)
^
../../../src/include/tsearch/dicts/regis.h:47:7: note: previous declaration is here
bool RS_execute(Regis *r, char *str);
^
varlena.c:1845:1: error: conflicting types for 'varstr_sortsupport'
varstr_sortsupport(SortSupport ssup, Oid collid, bool bpchar)
^
../../../../src/include/utils/builtins.h:849:13: note: previous declaration is here
extern void varstr_sortsupport(SortSupport ssup, Oid collid, bool bpchar);
^
varlena.c:3264:1: error: conflicting types for 'SplitIdentifierString'
SplitIdentifierString(char *rawstring, char separator,
^
../../../../src/include/utils/builtins.h:859:13: note: previous declaration is here
extern bool SplitIdentifierString(char *rawstring, char separator,
^
varlena.c:3389:1: error: conflicting types for 'SplitDirectoriesString'
SplitDirectoriesString(char *rawstring, char separator,
^
../../../../src/include/utils/builtins.h:861:13: note: previous declaration is here
extern bool SplitDirectoriesString(char *rawstring, char separator,
^
varlena.c:3510:1: error: conflicting types for 'SplitGUCList'
SplitGUCList(char *rawstring, char separator,
^
../../../../src/include/utils/builtins.h:863:13: note: previous declaration is here
extern bool SplitGUCList(char *rawstring, char separator,
^
varlena.c:4022:1: error: conflicting types for 'replace_text_regexp'
replace_text_regexp(text *src_text, void *regexp,
^
../../../../src/include/utils/builtins.h:866:14: note: previous declaration is here
extern text *replace_text_regexp(text *src_text, void *regexp,
^
In file included from varlena.c:5586:
./levenshtein.c:73:1: error: conflicting types for 'varstr_levenshtein'
varstr_levenshtein(const char *source, int slen,
^
../../../../src/include/utils/builtins.h:850:12: note: previous declaration is here
extern int varstr_levenshtein(const char *source, int slen,
^
In file included from varlena.c:5588:
./levenshtein.c:68:1: error: conflicting types for 'varstr_levenshtein_less_equal'
varstr_levenshtein_less_equal(const char *source, int slen,
^
../../../../src/include/utils/builtins.h:854:12: note: previous declaration is here
extern int varstr_levenshtein_less_equal(const char *source, int slen,
^
guc.c:408:7: error: redefinition of 'log_duration' with a different type: 'bool' vs 'bool' (aka 'char')
bool log_duration = false;
^
../../../../src/include/utils/guc.h:233:13: note: previous declaration is here
extern bool log_duration;
^
guc.c:409:7: error: redefinition of 'Debug_print_plan' with a different type: 'bool' vs 'bool' (aka 'char')
bool Debug_print_plan = false;
^
../../../../src/include/utils/guc.h:234:13: note: previous declaration is here
extern bool Debug_print_plan;
^
guc.c:410:7: error: redefinition of 'Debug_print_parse' with a different type: 'bool' vs 'bool' (aka 'char')
bool Debug_print_parse = false;
^
../../../../src/include/utils/guc.h:235:13: note: previous declaration is here
extern bool Debug_print_parse;
^
guc.c:411:7: error: redefinition of 'Debug_print_rewritten' with a different type: 'bool' vs 'bool' (aka 'char')
bool Debug_print_rewritten = false;
^
../../../../src/include/utils/guc.h:236:13: note: previous declaration is here
extern bool Debug_print_rewritten;
^
guc.c:412:7: error: redefinition of 'Debug_pretty_print' with a different type: 'bool' vs 'bool' (aka 'char')
bool Debug_pretty_print = true;
^
../../../../src/include/utils/guc.h:237:13: note: previous declaration is here
extern bool Debug_pretty_print;
^
guc.c:414:7: error: redefinition of 'log_parser_stats' with a different type: 'bool' vs 'bool' (aka 'char')
bool log_parser_stats = false;
^
../../../../src/include/utils/guc.h:239:13: note: previous declaration is here
extern bool log_parser_stats;
^
guc.c:415:7: error: redefinition of 'log_planner_stats' with a different type: 'bool' vs 'bool' (aka 'char')
bool log_planner_stats = false;
^
../../../../src/include/utils/guc.h:240:13: note: previous declaration is here
extern bool log_planner_stats;
^
guc.c:416:7: error: redefinition of 'log_executor_stats' with a different type: 'bool' vs 'bool' (aka 'char')
bool log_executor_stats = false;
^
../../../../src/include/utils/guc.h:241:13: note: previous declaration is here
extern bool log_executor_stats;
^
guc.c:417:7: error: redefinition of 'log_statement_stats' with a different type: 'bool' vs 'bool' (aka 'char')
bool log_statement_stats = false; /* this is sort of all three
^
../../../../src/include/utils/guc.h:242:13: note: previous declaration is here
extern bool log_statement_stats;
^
guc.c:419:7: error: redefinition of 'log_btree_build_stats' with a different type: 'bool' vs 'bool' (aka 'char')
bool log_btree_build_stats = false;
^
../../../../src/include/utils/guc.h:243:13: note: previous declaration is here
extern bool log_btree_build_stats;
^
guc.c:423:7: error: redefinition of 'check_function_bodies' with a different type: 'bool' vs 'bool' (aka 'char')
bool check_function_bodies = true;
^
../../../../src/include/utils/guc.h:245:25: note: previous declaration is here
extern PGDLLIMPORT bool check_function_bodies;
^
guc.c:424:7: error: redefinition of 'default_with_oids' with a different type: 'bool' vs 'bool' (aka 'char')
bool default_with_oids = false;
^
../../../../src/include/utils/guc.h:246:13: note: previous declaration is here
extern bool default_with_oids;
^
guc.c:425:7: error: redefinition of 'SQL_inheritance' with a different type: 'bool' vs 'bool' (aka 'char')
bool SQL_inheritance = true;
^
../../../../src/include/utils/guc.h:247:13: note: previous declaration is here
extern bool SQL_inheritance;
^
guc.c:428:7: error: redefinition of 'session_auth_is_superuser' with a different type: 'bool' vs 'bool' (aka 'char')
bool session_auth_is_superuser;
^
../../../../src/include/utils/guc.h:248:13: note: previous declaration is here
extern bool session_auth_is_superuser;
^
guc.c:4599:1: error: conflicting types for 'SelectConfigFiles'
SelectConfigFiles(const char *userDoption, const char *progname)
^
../../../../src/include/utils/guc.h:355:13: note: previous declaration is here
extern bool SelectConfigFiles(const char *userDoption, const char *progname);
^
guc.c:4989:1: error: conflicting types for 'AtEOXact_GUC'
AtEOXact_GUC(bool isCommit, int nestLevel)
^
../../../../src/include/utils/guc.h:359:13: note: previous declaration is here
extern void AtEOXact_GUC(bool isCommit, int nestLevel);
^
guc.c:5407:1: error: conflicting types for 'parse_int'
parse_int(const char *value, int *result, int flags, const char **hintmsg)
^
../../../../src/include/utils/guc.h:362:13: note: previous declaration is here
extern bool parse_int(const char *value, int *result, int flags,
^
guc.c:5493:1: error: conflicting types for 'parse_real'
parse_real(const char *value, double *result)
^
../../../../src/include/utils/guc.h:364:13: note: previous declaration is here
extern bool parse_real(const char *value, double *result);
^
guc.c:5554:1: error: conflicting types for 'config_enum_lookup_by_name'
config_enum_lookup_by_name(struct config_enum * record, const char *value,
^
../../../../src/include/utils/guc_tables.h:264:13: note: previous declaration is here
extern bool config_enum_lookup_by_name(struct config_enum * record,
^
fatal error: too many errors emitted, stopping now [-ferror-limit=]
--- src/backend/commands/dbcommands.c.orig 2020-08-10 21:21:12 UTC
+++ src/backend/commands/dbcommands.c
@@ -19,6 +19,7 @@
*/
#include "postgres.h"
+#include <stdbool.h>
#include <fcntl.h>
#include <locale.h>
#include <unistd.h>
--- src/backend/optimizer/path/indxpath.c.orig 2020-08-10 21:21:12 UTC
+++ src/backend/optimizer/path/indxpath.c
@@ -15,6 +15,7 @@
*/
#include "postgres.h"
+#include <stdbool.h>
#include <math.h>
#include "access/stratnum.h"
--- src/backend/tsearch/regis.c.orig 2020-08-10 21:21:12 UTC
+++ src/backend/tsearch/regis.c
@@ -14,6 +14,8 @@
#include "postgres.h"
+#include <stdbool.h>
+
#include "tsearch/dicts/regis.h"
#include "tsearch/ts_locale.h"
--- src/backend/utils/adt/levenshtein.c.orig 2020-08-10 21:21:12 UTC
+++ src/backend/utils/adt/levenshtein.c
@@ -23,6 +23,8 @@
*
*-------------------------------------------------------------------------
*/
+#include <stdbool.h>
+
#define MAX_LEVENSHTEIN_STRLEN 255
/*
--- src/backend/utils/adt/varlena.c.orig 2020-08-10 21:21:12 UTC
+++ src/backend/utils/adt/varlena.c
@@ -14,6 +14,7 @@
*/
#include "postgres.h"
+#include <stdbool.h>
#include <ctype.h>
#include <limits.h>
--- src/backend/utils/misc/guc.c.orig 2020-08-10 21:21:12 UTC
+++ src/backend/utils/misc/guc.c
@@ -16,6 +16,7 @@
*/
#include "postgres.h"
+#include <stdbool.h>
#include <ctype.h>
#include <float.h>
#include <math.h>

View File

@ -993,8 +993,13 @@ man/man7/WITH.7.gz
%%NLS%%share/locale/ru/LC_MESSAGES/pg_dump-9.5.mo
%%NLS%%share/locale/ru/LC_MESSAGES/pgscripts-9.5.mo
%%NLS%%share/locale/ru/LC_MESSAGES/psql-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/ecpg-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/ecpglib6-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/libpq5-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/pg_config-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/pg_dump-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/pgscripts-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/psql-9.5.mo
%%NLS%%share/locale/ta/LC_MESSAGES/pg_config-9.5.mo
%%NLS%%share/locale/tr/LC_MESSAGES/ecpg-9.5.mo
%%NLS%%share/locale/tr/LC_MESSAGES/ecpglib6-9.5.mo

View File

@ -139,9 +139,13 @@ lib/libpgcommon.a
%%NLS%%share/locale/ru/LC_MESSAGES/plpgsql-9.5.mo
%%NLS%%share/locale/ru/LC_MESSAGES/postgres-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/initdb-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/pg_basebackup-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/pg_controldata-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/pg_ctl-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/pg_resetxlog-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/pg_rewind-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/plpgsql-9.5.mo
%%NLS%%share/locale/sv/LC_MESSAGES/postgres-9.5.mo
%%NLS%%share/locale/zh_CN/LC_MESSAGES/initdb-9.5.mo
%%NLS%%share/locale/zh_CN/LC_MESSAGES/pg_basebackup-9.5.mo
%%NLS%%share/locale/zh_CN/LC_MESSAGES/pg_controldata-9.5.mo