1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-10-18 19:49:40 +00:00

databases/postgresql??-server: update to latest version

The PostgreSQL Global Development Group has released an update to all
supported versions of PostgreSQL, including 14.3, 13.7, 12.11, 11.16,
and 10.21. This release fixes over 50 bugs reported over the last three
months. This release closes one security vulnerability and fixes over 50
bugs reported over the last three months.

We encourage you to install this update at your earliest possible
convenience.

If you have any GiST indexes on columns using the ltree data type, you
will need to reindex them after upgrading.

For the full list of changes, please review the release notes.

It also fixes a security issue, CVE-2022-1552:

Autovacuum, REINDEX, and others omit "security restricted operation" sandbox.

Versions Affected: 10 - 14. The security team typically does not test
unsupported versions, but this problem is quite old.

Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER,
and pg_amcheck made incomplete efforts to operate safely when a
privileged user is maintaining another user's objects. Those commands
activated relevant protections too late or not at all. An attacker
having permission to create non-temp objects in at least one schema
could execute arbitrary SQL functions under a superuser identity.

While promptly updating PostgreSQL is the best remediation for most
users, a user unable to do that can work around the vulnerability by
disabling autovacuum, not manually running the above commands, and not
restoring from output of the pg_dump command. Performance may degrade
quickly under this workaround. VACUUM is safe, and all commands are fine
when a trusted user owns the target object.

Security:   157ce083-d145-11ec-ab9b-6cc21735f730
Release notes:	https://www.postgresql.org/docs/release/
This commit is contained in:
Palle Girgensohn 2022-05-10 09:27:43 +02:00
parent 4a835475da
commit 6c00f6e30f
15 changed files with 30 additions and 30 deletions

View File

@ -1,7 +1,7 @@
# Created by: Palle Girgensohn <girgen@pingpong.net>
PORTNAME= postgresql
PORTREVISION= 2
PORTREVISION= 0
CATEGORIES= databases
MAINTAINER= pgsql@FreeBSD.org

View File

@ -1,9 +1,9 @@
# Created by: Marc G. Fournier <scrappy@FreeBSD.org>
DISTVERSION?= 10.20
DISTVERSION?= 10.21
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 1
PORTREVISION?= 0
MAINTAINER?= pgsql@FreeBSD.org

View File

@ -1,3 +1,3 @@
TIMESTAMP = 1644361301
SHA256 (postgresql/postgresql-10.20.tar.bz2) = 87de16d59bcfe42fa605c312c59be5e294e8a3e6acb655dd7ad47cbb930a659f
SIZE (postgresql/postgresql-10.20.tar.bz2) = 19371473
TIMESTAMP = 1652167487
SHA256 (postgresql/postgresql-10.21.tar.bz2) = d32198856d52a9a6f5d50642ef86687ac058bd6efca5c9ed57be7808496f45d1
SIZE (postgresql/postgresql-10.21.tar.bz2) = 19409454

View File

@ -1,7 +1,7 @@
# Created by: Palle Girgensohn <girgen@pingpong.net>
PORTNAME= postgresql
PORTREVISION= 2
PORTREVISION= 0
CATEGORIES= databases
MAINTAINER= pgsql@FreeBSD.org

View File

@ -1,9 +1,9 @@
# Created by: Marc G. Fournier <scrappy@FreeBSD.org>
DISTVERSION?= 11.15
DISTVERSION?= 11.16
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 1
PORTREVISION?= 0
MAINTAINER?= pgsql@FreeBSD.org

View File

@ -1,3 +1,3 @@
TIMESTAMP = 1644361287
SHA256 (postgresql/postgresql-11.15.tar.bz2) = c8f58e8ebd4f4567f4f9ba1032eb3e99e0251d87cbe3e564b485590e37a879e3
SIZE (postgresql/postgresql-11.15.tar.bz2) = 20245750
TIMESTAMP = 1652167803
SHA256 (postgresql/postgresql-11.16.tar.bz2) = 2dd9e111f0a5949ee7cacc065cea0fb21092929bae310ce05bf01b4ffc5103a5
SIZE (postgresql/postgresql-11.16.tar.bz2) = 20347100

View File

@ -1,7 +1,7 @@
# Created by: Palle Girgensohn <girgen@pingpong.net>
PORTNAME= postgresql
PORTREVISION= 2
PORTREVISION= 0
CATEGORIES= databases
MAINTAINER= pgsql@FreeBSD.org

View File

@ -1,9 +1,9 @@
# Created by: Marc G. Fournier <scrappy@FreeBSD.org>
DISTVERSION?= 12.10
DISTVERSION?= 12.11
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 1
PORTREVISION?= 0
MAINTAINER?= pgsql@FreeBSD.org

View File

@ -1,3 +1,3 @@
TIMESTAMP = 1644361279
SHA256 (postgresql/postgresql-12.10.tar.bz2) = 83dd192e6034951192b9a86dc19cf3717a8b82120e2f11a0a36723c820d2b257
SIZE (postgresql/postgresql-12.10.tar.bz2) = 20990621
TIMESTAMP = 1652167824
SHA256 (postgresql/postgresql-12.11.tar.bz2) = 1026248a5fd2beeaf43e4c7236ac817e56d58b681a335856465dfbc75b3e8302
SIZE (postgresql/postgresql-12.11.tar.bz2) = 21086745

View File

@ -1,7 +1,7 @@
# Created by: Palle Girgensohn <girgen@pingpong.net>
PORTNAME= postgresql
PORTREVISION= 2
PORTREVISION= 0
CATEGORIES= databases
MAINTAINER= pgsql@FreeBSD.org

View File

@ -1,9 +1,9 @@
# Created by: Marc G. Fournier <scrappy@FreeBSD.org>
DISTVERSION?= 13.6
DISTVERSION?= 13.7
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 1
PORTREVISION?= 0
MAINTAINER?= pgsql@FreeBSD.org

View File

@ -1,3 +1,3 @@
TIMESTAMP = 1644361256
SHA256 (postgresql/postgresql-13.6.tar.bz2) = bafc7fa3d9d4da8fe71b84c63ba8bdfe8092935c30c0aa85c24b2c08508f67fc
SIZE (postgresql/postgresql-13.6.tar.bz2) = 21257213
TIMESTAMP = 1652167845
SHA256 (postgresql/postgresql-13.7.tar.bz2) = 1b905bf4f3d83614a393b3c51fd345910fd261e4f5124a68d9a1fdd3a2a46399
SIZE (postgresql/postgresql-13.7.tar.bz2) = 21364433

View File

@ -1,7 +1,7 @@
# Created by: Palle Girgensohn <girgen@pingpong.net>
PORTNAME= postgresql
PORTREVISION= 2
PORTREVISION= 0
CATEGORIES= databases
MAINTAINER= pgsql@FreeBSD.org

View File

@ -1,10 +1,10 @@
# Created by: Marc G. Fournier <scrappy@FreeBSD.org>
PORTNAME?= postgresql
DISTVERSION?= 14.2
DISTVERSION?= 14.3
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 1
PORTREVISION?= 0
CATEGORIES?= databases
MASTER_SITES= PGSQL/source/v${DISTVERSION}
PKGNAMESUFFIX?= ${PORTVERSION:R}${COMPONENT}

View File

@ -1,3 +1,3 @@
TIMESTAMP = 1644361183
SHA256 (postgresql/postgresql-14.2.tar.bz2) = 2cf78b2e468912f8101d695db5340cf313c2e9f68a612fb71427524e8c9a977a
SIZE (postgresql/postgresql-14.2.tar.bz2) = 21964841
TIMESTAMP = 1652285702
SHA256 (postgresql/postgresql-14.3.tar.bz2) = 279057368bf59a919c05ada8f95c5e04abb43e74b9a2a69c3d46a20e07a9af38
SIZE (postgresql/postgresql-14.3.tar.bz2) = 22092190