summaryrefslogtreecommitdiff
path: root/databases/postgresql92-server
diff options
context:
space:
mode:
authorPalle Girgensohn <girgen@FreeBSD.org>2016-03-31 14:46:39 +0000
committerPalle Girgensohn <girgen@FreeBSD.org>2016-03-31 14:46:39 +0000
commit4eb290d68e1808c543ee31a95a691ed9b4eb0b64 (patch)
tree8f862c5864c8f1cbd6984d34776b408105517835 /databases/postgresql92-server
parentAdd vuxml entries for "Security Fixes for RLS, BRIN" (diff)
Update PostgreSQL 9.5 to latest version
Security Fixes for RLS, BRIN ---------------------------- This release closes security hole CVE-2016-2193 (https://access.redhat.com/security/cve/CVE-2016-2193), where a query plan might get reused for more than one ROLE in the same session. This could cause the wrong set of Row Level Security (RLS) policies to be used for the query. The update also fixes CVE-2016-3065 (https://access.redhat.com/security/cve/CVE-2016-3065), a server crash bug triggered by using `pageinspect` with BRIN index pages. Since an attacker might be able to expose a few bytes of server memory, this crash is being treated as a security issue. Abbreviated Keys and Corrupt Indexes ------------------------------------ In this release, the PostgreSQL Project has been forced to disable 9.5's Abbreviated Keys performance feature for many indexes due to reports of index corruption. This may affect any B-tree indexes on TEXT, VARCHAR, and CHAR columns which are not in "C" locale. Indexes in other locales will lose the performance benefits of the feature, and should be REINDEXed in case of existing index corruption. The feature may be re-enabled in future versions if the project finds a solution for the problem. See the release notes, and the wiki page on this issue for more information: http://wiki.postgresql.org/abbreviatedkeys_issue URL: http://www.postgresql.org/about/news/1656/ URL: http://wiki.postgresql.org/abbreviatedkeys_issue Security: CVE-2016-2193 Security: CVE-2016-3065
Notes
Notes: svn path=/head/; revision=412226
Diffstat (limited to 'databases/postgresql92-server')
0 files changed, 0 insertions, 0 deletions