PostgreSQL 13.1, 12.5, 11.10, 10.15, 9.6.20 released!

The PostgreSQL Global Development Group has released an update to all supported
versions of our database system, including 13.1, 12.5, 11.10, 10.15 and 9.6.20.
This release closes three security vulnerabilities and fixes over 65 bugs
reported over the last three months.

Due to the nature of CVE-2020-25695, we advise you to update as soon as possible.

Additionally, this is the second-to-last release of PostgreSQL 9.5. If you are
running PostgreSQL 9.5 in a production environment, we suggest that you make
plans to upgrade.

For the full list of changes, please review the release notes.

Security:	CVE-2020-25695: Multiple features escape "security restricted
				operation" sandbox

Security:	CVE-2020-25694: Reconnection can downgrade connection security
				settings

Security:	CVE-2020-25696: psql's \gset allows overwriting specially
				treated variables
This commit is contained in:
Palle Girgensohn 2020-11-12 15:00:39 +00:00
parent 661f7a27d1
commit 1ae27558a8
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=554966
11 changed files with 26 additions and 25 deletions

View file

@ -1,10 +1,10 @@
# Created by: Marc G. Fournier <scrappy@FreeBSD.org>
# $FreeBSD$
DISTVERSION?= 10.14
DISTVERSION?= 10.15
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 1
PORTREVISION?= 0
MAINTAINER?= pgsql@FreeBSD.org

View file

@ -1,3 +1,3 @@
TIMESTAMP = 1597309874
SHA256 (postgresql/postgresql-10.14.tar.bz2) = 381cd8f491d8f77db2f4326974542a50095b5fa7709f24d7c5b760be2518b23b
SIZE (postgresql/postgresql-10.14.tar.bz2) = 19042154
TIMESTAMP = 1605002469
SHA256 (postgresql/postgresql-10.15.tar.bz2) = 5956bce0becffa77883c41594c95a23110b94f10cd66a1157e373c3575921f7e
SIZE (postgresql/postgresql-10.15.tar.bz2) = 19089779

View file

@ -1,10 +1,10 @@
# Created by: Marc G. Fournier <scrappy@FreeBSD.org>
# $FreeBSD$
DISTVERSION?= 11.9
DISTVERSION?= 11.10
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 2
PORTREVISION?= 0
MAINTAINER?= pgsql@FreeBSD.org

View file

@ -1,3 +1,3 @@
TIMESTAMP = 1597309874
SHA256 (postgresql/postgresql-11.9.tar.bz2) = 35618aa72e0372091f923c42389c6febd07513157b4fbb9408371706afbb6635
SIZE (postgresql/postgresql-11.9.tar.bz2) = 19959019
TIMESTAMP = 1605002490
SHA256 (postgresql/postgresql-11.10.tar.bz2) = 13e6d2f80662fe463bc7718cdf0de6a9ec67fc78afcc7a3ae66b9ea19bb97899
SIZE (postgresql/postgresql-11.10.tar.bz2) = 20003842

View file

@ -1,10 +1,10 @@
# Created by: Marc G. Fournier <scrappy@FreeBSD.org>
# $FreeBSD$
DISTVERSION?= 12.4
DISTVERSION?= 12.5
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 2
PORTREVISION?= 0
MAINTAINER?= pgsql@FreeBSD.org

View file

@ -1,3 +1,3 @@
TIMESTAMP = 1597309874
SHA256 (postgresql/postgresql-12.4.tar.bz2) = bee93fbe2c32f59419cb162bcc0145c58da9a8644ee154a30b9a5ce47de606cc
SIZE (postgresql/postgresql-12.4.tar.bz2) = 20669776
TIMESTAMP = 1605002511
SHA256 (postgresql/postgresql-12.5.tar.bz2) = bd0d25341d9578b5473c9506300022de26370879581f5fddd243a886ce79ff95
SIZE (postgresql/postgresql-12.5.tar.bz2) = 20729654

View file

@ -884,6 +884,7 @@ lib/libpgcommon.a
%%NLS%%share/locale/uk/LC_MESSAGES/pg_test_timing-12.mo
%%NLS%%share/locale/uk/LC_MESSAGES/pg_waldump-12.mo
%%NLS%%share/locale/uk/LC_MESSAGES/plpgsql-12.mo
%%NLS%%share/locale/uk/LC_MESSAGES/pg_upgrade-12.mo
%%NLS%%share/locale/uk/LC_MESSAGES/postgres-12.mo
%%NLS%%share/locale/vi/LC_MESSAGES/pg_controldata-12.mo
%%NLS%%share/locale/vi/LC_MESSAGES/pg_test_fsync-12.mo

View file

@ -2,10 +2,10 @@
# $FreeBSD$
PORTNAME?= postgresql
DISTVERSION?= 13.0
DISTVERSION?= 13.1
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 5
PORTREVISION?= 0
CATEGORIES?= databases
MASTER_SITES= PGSQL/source/v${DISTVERSION}
PKGNAMESUFFIX?= ${PORTVERSION:R}${COMPONENT}

View file

@ -1,3 +1,3 @@
TIMESTAMP = 1600763184
SHA256 (postgresql/postgresql-13.0.tar.bz2) = 80e750be8d436b54197636a02636f8fd3263ba6779bf865b04832495ea592296
SIZE (postgresql/postgresql-13.0.tar.bz2) = 20999465
TIMESTAMP = 1605002533
SHA256 (postgresql/postgresql-13.1.tar.bz2) = 12345c83b89aa29808568977f5200d6da00f88a035517f925293355432ffe61f
SIZE (postgresql/postgresql-13.1.tar.bz2) = 21034192

View file

@ -1,10 +1,10 @@
# Created by: Marc G. Fournier <scrappy@FreeBSD.org>
# $FreeBSD$
DISTVERSION?= 9.6.19
DISTVERSION?= 9.6.20
# PORTREVISION must be ?= otherwise, all slave ports get this PORTREVISION and
# not their own. Probably best to keep it at ?=0 when reset here too.
PORTREVISION?= 1
PORTREVISION?= 0
PKGNAMESUFFIX?= ${PORTVERSION:R:S/.//}${COMPONENT}
MAINTAINER?= pgsql@FreeBSD.org

View file

@ -1,5 +1,5 @@
TIMESTAMP = 1597309874
SHA256 (postgresql/postgresql-9.6.19.tar.bz2) = 61f93a94ccddbe0b2d1afaf03f04ba605d8af5b774ff9b830e5adeb50ab55cb0
SIZE (postgresql/postgresql-9.6.19.tar.bz2) = 18880036
TIMESTAMP = 1605002555
SHA256 (postgresql/postgresql-9.6.20.tar.bz2) = 3d08cba409d45ab62d42b24431a0d55e7537bcd1db2d979f5f2eefe34d487bb6
SIZE (postgresql/postgresql-9.6.20.tar.bz2) = 18944478
SHA256 (postgresql/pg-96b4-icu-2016-10-02.diff.gz) = 85f81baa0fc8f692bcf802c8645196d9e3afdef4f760cef712d940b87655486e
SIZE (postgresql/pg-96b4-icu-2016-10-02.diff.gz) = 5998