diff options
author | Palle Girgensohn <girgen@FreeBSD.org> | 2014-02-20 18:11:37 +0000 |
---|---|---|
committer | Palle Girgensohn <girgen@FreeBSD.org> | 2014-02-20 18:11:37 +0000 |
commit | 86dd060cb01f33d6386c41d6897e2c832584796a (patch) | |
tree | 494e68ba4b9de08742ffeb946c76174ec6fe8219 /databases/postgresql93-server/files/patch-src:backend:utils:misc:postgresql.conf.sample | |
parent | The PostgreSQL Global Development Group has released an important (diff) |
The PostgreSQL Global Development Group has released an important
update to all supported versions of the PostgreSQL database system,
which includes minor versions 9.3.3, 9.2.7, 9.1.12, 9.0.16, and
8.4.20. This update contains fixes for multiple security issues, as
well as several fixes for replication and data integrity issues. All
users are urged to update their installations at the earliest
opportunity, especially those using binary replication or running a
high-security application.
This update fixes CVE-2014-0060, in which PostgreSQL did not properly
enforce the WITH ADMIN OPTION permission for ROLE management. Before
this fix, any member of a ROLE was able to grant others access to the
same ROLE regardless if the member was given the WITH ADMIN OPTION
permission. It also fixes multiple privilege escalation issues,
including: CVE-2014-0061, CVE-2014-0062, CVE-2014-0063, CVE-2014-0064,
CVE-2014-0065, and CVE-2014-0066. More information on these issues can
be found on our security page and the security issue detail wiki page.
Security: CVE-2014-0060,CVE-2014-0061,CVE-2014-0062,CVE-2014-0063
CVE-2014-0064,CVE-2014-0065,CVE-2014-0066,CVE-2014-0067
Notes
Notes:
svn path=/head/; revision=345257
Diffstat (limited to 'databases/postgresql93-server/files/patch-src:backend:utils:misc:postgresql.conf.sample')
-rw-r--r-- | databases/postgresql93-server/files/patch-src:backend:utils:misc:postgresql.conf.sample | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/databases/postgresql93-server/files/patch-src:backend:utils:misc:postgresql.conf.sample b/databases/postgresql93-server/files/patch-src:backend:utils:misc:postgresql.conf.sample index 352b1579d68d..6b1bba5f63b5 100644 --- a/databases/postgresql93-server/files/patch-src:backend:utils:misc:postgresql.conf.sample +++ b/databases/postgresql93-server/files/patch-src:backend:utils:misc:postgresql.conf.sample @@ -1,6 +1,6 @@ ---- src/backend/utils/misc/postgresql.conf.sample.orig 2010-10-01 16:25:44.000000000 +0200 -+++ src/backend/utils/misc/postgresql.conf.sample 2010-10-05 07:37:35.626282933 +0200 -@@ -256,6 +256,7 @@ +--- src/backend/utils/misc/postgresql.conf.sample.orig 2014-02-17 20:29:55.000000000 +0100 ++++ src/backend/utils/misc/postgresql.conf.sample 2014-02-20 18:01:37.000000000 +0100 +@@ -295,6 +295,7 @@ # - Where to Log - @@ -8,10 +8,10 @@ #log_destination = 'stderr' # Valid values are combinations of # stderr, csvlog, syslog, and eventlog, # depending on platform. csvlog -@@ -394,6 +396,9 @@ - #track_counts = on +@@ -432,6 +433,9 @@ + #track_io_timing = off #track_functions = none # none, pl, all - #track_activity_query_size = 1024 # (change requires restart) + #track_activity_query_size = 1024 # (change requires restart) + +# On FreeBSD, this is a performance hog, so keep it off if you need speed +update_process_title = off |