ea28815591
A major security issue fixed in this release, CVE-2013-1899, makes it possible for a connection request containing a database name that begins with "-" to be crafted that can damage or destroy files within a server's data directory. Anyone with access to the port the PostgreSQL server listens on can initiate this request. Two lesser security fixes are also included in this release: CVE-2013-1900, wherein random numbers generated by contrib/pgcrypto functions may be easy for another database user to guess, and CVE-2013-1901, which mistakenly allows an unprivileged user to run commands that could interfere with in-progress backups. Finally, this release fixes two security issues with the graphical installers for Linux and Mac OS X: insecure passing of superuser passwords to a script, CVE-2013-1903 and the use of predictable filenames in /tmp CVE-2013-1902.
18 lines
1 KiB
Text
18 lines
1 KiB
Text
$NetBSD: distinfo,v 1.25 2013/04/04 21:08:32 adam Exp $
|
|
|
|
SHA1 (postgresql-8.4.17.tar.bz2) = 1c8760ad7048f6e62ac8c822fee653117f5beb57
|
|
RMD160 (postgresql-8.4.17.tar.bz2) = 122acee594551be5e42f208dfde522a0ad1ce17d
|
|
Size (postgresql-8.4.17.tar.bz2) = 14795028 bytes
|
|
SHA1 (patch-aa) = 72437773d67939c8d8c8e9a99caf430590fd726f
|
|
SHA1 (patch-ab) = aa46d88c8a72edaf95880de48474ea484d6d2bf5
|
|
SHA1 (patch-ac) = 0b82797d0b80bdd1e9b5f3de4989fe3848adf6cb
|
|
SHA1 (patch-ad) = fb75df841bbcc25e840ed9c2fed59232d7189200
|
|
SHA1 (patch-af) = a73769cf05223d2ee06249c9e69c85038c2cd936
|
|
SHA1 (patch-ag) = 85dac95e40efc16270885087f868aeb76e1b9214
|
|
SHA1 (patch-ah) = 25102dce1b9b22385353af23500636fb18e3bf64
|
|
SHA1 (patch-ai) = 0d6f536f7593e362ec216eafa73c718ad6bed8fc
|
|
SHA1 (patch-ao) = b098032408fc951865966710554667a249db6320
|
|
SHA1 (patch-ba) = f8de4ee18a433b65a54280d047d18b161d3e9ca8
|
|
SHA1 (patch-bb) = 22859530d2694cf4c347f5e4c02eff0483d536d1
|
|
SHA1 (patch-src_pl_plperl_plperl.h) = 8d448cc8e0e0dbc4d15dad369d3ca7a796874ac2
|
|
SHA1 (patch-src_pl_plpgsql_src_Makefile) = 1592ecb85d6ef1bd691f77b320f639b6fc822e14
|