summaryrefslogtreecommitdiff
path: root/databases/postgresql83-server (unfollow)
Commit message (Collapse)AuthorFilesLines
2013-06-04Remove postgresql83-*; it expired at the beginning of March.Chris Rees28-2157/+0
While here, fix flo's typo... Notes: svn path=/head/; revision=319888
2013-04-04The PostgreSQL Global Development Group has released a securityPalle Girgensohn2-1/+26
update to all current versions of the PostgreSQL database system, including versions 9.2.4, 9.1.9, 9.0.13, and 8.4.17. This update fixes a high-exposure security vulnerability in versions 9.0 and later. All users of the affected versions are strongly urged to apply the update *immediately*. A major security issue (for versions 9.x only) fixed in this release, [CVE-2013-1899](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899), makes it possible for a connection request containing a database name that begins with "-" to be crafted that can damage or destroy files within a server's data directory. Anyone with access to the port the PostgreSQL server listens on can initiate this request. This issue was discovered by Mitsumasa Kondo and Kyotaro Horiguchi of NTT Open Source Software Center. Two lesser security fixes are also included in this release: [CVE-2013-1900](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900), wherein random numbers generated by contrib/pgcrypto functions may be easy for another database user to guess (all versions), and [CVE-2013-1901](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901), which mistakenly allows an unprivileged user to run commands that could interfere with in-progress backups (for versions 9.x only). Approved by: portmgr (bdrewery) URL: http://www.postgresql.org/about/news/1456/ Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899 Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900 Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901 Notes: svn path=/head/; revision=315718
2013-02-08PostgreSQL 9.2.3, 9.1.8, 9.0.12, 8.4.16 and 8.3.23 releasedPalle Girgensohn4-3/+5
This update fixes a denial-of-service (DOS) vulnerability. All users should update their PostgreSQL installations as soon as possible. The security issue fixed in this release, CVE-2013-0255, allows a previously authenticated user to crash the server by calling an internal function with invalid arguments. URL: http://www.postgresql.org/about/news/1446/ Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0255 Notes: svn path=/head/; revision=311915
2012-12-19Chase ICU update to 50Palle Girgensohn1-3/+7
Notes: svn path=/head/; revision=309246
2012-12-06The PostgreSQL Global Development Group has released an update to all currentPalle Girgensohn2-3/+6
versions of the PostgreSQL database system, including versions 9.2.2, 9.1.7, 9.0.11, 8.4.15, and 8.3.22. Users of PostgreSQL Hot Standby replication should update at the next possible opportunity. Other users should update at their next maintenance window. Deprecate the 8.3.22 version, since it is near end-of-life. URL: http://www.postgresql.org/about/news/1430/ Feature safe: yes Notes: svn path=/head/; revision=308391
2012-09-24Update PostgreSQL to 9.2.1, 9.1.6, 9.0.10, 8.4.14 and 8.3.21 respectively.Palle Girgensohn2-3/+3
This update fixes critical issues for major versions 9.1 and 9.2, and users running those versions should apply it as soon as possible. URL: http://www.postgresql.org/about/news/1416/ Notes: svn path=/head/; revision=304804
2012-08-19Use pre-build instead of pre-everything for backupwarning-- stop making peopleChris Rees1-0/+3
wait before fetching etc Suggested by: ohauer Discussed with: girgen While here, fix package for postgresql92-server Notes: svn path=/head/; revision=302762
2012-08-17The PostgreSQL Global Development Group today released security updates for ↵Jason Helfman2-3/+3
all active branches of the PostgreSQL database system, including versions 9.1.5, 9.0.9, 8.4.13 and 8.3.20. This update patches security holes associated with libxml2 and libxslt, similar to those affecting other open source projects. All users are urged to update their installations at the first available opportunity. This security release fixes a vulnerability in the built-in XML functionality, and a vulnerability in the XSLT functionality supplied by the optional XML2 extension. Both vulnerabilities allow reading of arbitrary files by any authenticated database user, and the XSLT vulnerability allows writing files as well. The fixes cause limited backwards compatibility issues. These issues correspond to the following two vulnerabilities: CVE-2012-3488: PostgreSQL insecure use of libxslt CVE-2012-3489: PostgreSQL insecure use of libxml2 This release also contains several fixes to version 9.1, and a smaller number of fixes to older versions, including: Updates and corrections to time zone data Multiple documentation updates and corrections Add limit on max_wal_senders Fix dependencies generated during ALTER TABLE ADD CONSTRAINT USING INDEX. Correct behavior of unicode conversions for PL/Python Fix WITH attached to a nested set operation (UNION/INTERSECT/EXCEPT). Fix syslogger so that log_truncate_on_rotation works in the first rotation. Only allow autovacuum to be auto-canceled by a directly blocked process. Improve fsync request queue operation Prevent corner-case core dump in rfree(). Fix Walsender so that it responds correctly to timeouts and deadlocks Several PL/Perl fixes for encoding-related issues Make selectivity operators use the correct collation Prevent unsuitable slaves from being selected for synchronous replication Make REASSIGN OWNED work on extensions as well Fix race condition with ENUM comparisons Make NOTIFY cope with out-of-disk-space Fix memory leak in ARRAY subselect queries Reduce data loss at replication failover Fix behavior of subtransactions with Hot Standby Notes: svn path=/head/; revision=302694
2012-06-04The PostgreSQL Global Development Group today released security updates for allPalle Girgensohn4-16/+5
active branches of the PostgreSQL database system, including versions 9.1.4, 9.0.8, 8.4.12 and 8.3.19. Users of the crypt(text, text) function with DES encryption in the optional pg_crypto module should upgrade their installations immediately, if you have'nt already updated since the port was patched on May 30. All other database administrators are urged to upgrade your version of PostgreSQL at the next scheduled downtime. URL: http://www.postgresql.org/about/news/1398/ Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2143 Fix incorrect password transformation in contrib/pgcrypto’s DES crypt() function This was fixed in a patch release for the FreeBSD ports on May 30. Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2655 Ignore SECURITY DEFINER and SET attributes for a procedural language’s call handle Notes: svn path=/head/; revision=298347
2012-05-30- Address postgresql*-servers for crypt vulnerability (CVE-2012-2143)Jason Helfman2-1/+13
http://www.postgresql.org/about/news/1397/ With hat: pgsql Notes: svn path=/head/; revision=297840
2012-03-05Various tidiness patches:Chris Rees1-1/+1
- Compact -plperl ports - Portlint for 90-plperl - Update version numbers in pkg-install-server - s/spaces/tabs/ - Use ${} instead of $() - s/YES/yes/ - Tidy IGNORE values Submitted by: sunpoet Notes: svn path=/head/; revision=292772
2012-03-04Over to new team, pgsql@FreeBSD.orgChris Rees1-1/+1
Notes: svn path=/head/; revision=292678
2012-02-27The PostgreSQL Global Development Group today released security updates for allPalle Girgensohn3-14/+3
active branches of the PostgreSQL object-relational database system, including versions 9.1.3, 9.0.7, 8.4.11 and 8.3.18. Users of pg_dump, users of SSL certificates for validation or users of triggers using SECURITY DEFINER should upgrade their installations immediately. All other database administrators are urged to upgrade your version of PostgreSQL at the next scheduled downtime. More details on the security fixes here: URL: http://www.postgresql.org/about/news/1377/ Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0866 Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0867 Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0868 Notes: svn path=/head/; revision=292310
2012-02-19Remove p5- from postgresql*-plperl 's mention in pkg-message-clientChris Rees1-1/+1
Notes: svn path=/head/; revision=291849
2012-02-17Update to 8.3.17 and 8.2.23.Chris Rees3-4/+5
Please note that 8.2 is still deprecated, and any users are still strongly encouraged to move to 8.4 as soon as possible. Notes: svn path=/head/; revision=291569
2012-01-25- To preserve my sanity, slave 82 and 83 to 84, and 90 to 91, resulting inChris Rees1-323/+22
three fewer Makefiles to maintain - Switch patch master site - Various cleanups Notes: svn path=/head/; revision=289804
2012-01-23Unbreak ICU 4.8 supportChris Rees1-2/+2
PR: ports/163820 Submitted by: Mike Fisher <mfisher@csh.rit.edu> Notes: svn path=/head/; revision=289671
2012-01-22- Add profile support for PostgreSQL serversJason Helfman3-7/+59
- re-assign LOCALBASE to PREFIX - add PG_GROUP to SUB_PLIST for packaging fix - fix permissions for package installations PR: ports/162776 Submitted by: jgh, Phil Phillips < pphillips at experts-exchange.com > Reviewed by: rene (mentor) Approved by: crees (maintainer, mentor) Notes: svn path=/head/; revision=289587
2012-01-19fix typo %%PG_GROUP%% in pkg-plist-serverJason Helfman2-2/+2
Spotted by: decke Approved by: crees, rene (mentors,implicit) Notes: svn path=/head/; revision=289481
2012-01-19- Reset ports due to maintainer timeouts and lack of response to emailsThomas Abthorpe1-1/+1
With hat: portmgr Notes: svn path=/head/; revision=289435
2012-01-18Fix plist to create directory with proper ownerships so PostgreSQL databaseJason Helfman2-1/+4
may start. PR: ports/164273 (critical) Submitted by: Alexander Yerenkow <yerenkow at gmail.com> Approved by: maintainer-timeout: girgen (1 day), portmgr (linimon) Notes: svn path=/head/; revision=289424
2012-01-14In the rc.d scripts, change assignments to rcvar to use theDoug Barton1-1/+1
literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar(). In cases where I had to hand-edit unusual instances also modify formatting slightly to be more uniform (and in some cases, correct). This includes adding some $FreeBSD$ tags, and most importantly moving rcvar= to right after name= so it's clear that one is derived from the other. Notes: svn path=/head/; revision=289156
2011-12-05The PostgreSQL Global Development Group today released updates for allPalle Girgensohn1-1/+0
active branches of the PostgreSQL object-relational database system, including versions 9.1.2, 9.0.6, 8.4.10, 8.3.17 and 8.2.23. This release contains 52 fixes to version 9.1, and a smaller number of fixes to older versions, including: - Fix bugs in information_schema.referential_constraints view** - Correct collations for citext columns and indexes** - Prevent possible crash when joining to a scalar function - Prevent transitory data corruption of GIN indexes after a crash - Prevent data corruption on TOAST columns when copying data - Fix failures during hot standby startup - Correct another "variable not found in subplan target list" bug - Fix bug with sorting on aggregate expressions in windowing functions - Multiple bug fixes for pg_upgrade - Change Foreign Key creation order to better support self-referential keys** - Multiple bug fixes to CREATE EXTENSION - Ensure that function return type and data returned from PL/perl agree - Ensure that PL/perl strings are always UTF-8 - Assorted bug fixes for various Extensions - Updates to the time zone database, particularly to CST6 Changes marked with ** above require additional, post-update steps in order to fix all described issues. URL: http://www.postgresql.org/docs/current/static/release.html Also, fix a pthread problem in the FreeBSD port. [1] PR: 160580 [1] Feature safe: yes Notes: svn path=/head/; revision=286930
2011-10-21Make SSL available as an optionMartin Matuska1-12/+12
PR: ports/161329 Approved by: maintainer (timeout) Notes: svn path=/head/; revision=284077
2011-10-20- Fix packaging issue (missed %%PG_USER%% in pkg-plist-server)Chris Rees2-0/+2
- Remove extra bsd.port.pre.mk include from postgresql82-server PR: ports/161816 ports/161824 ports/161821 Submitted by: Jason Helfman (jhelfman@e-e.com) Approved by: portmgr (pav) Notes: svn path=/head/; revision=284016
2011-10-19This time remember to bump PORTREVISIONChris Rees1-0/+1
Notes: svn path=/head/; revision=283933
2011-10-19Fix SUB_LIST issue by deconditionalising it.Chris Rees1-3/+4
Temporary fix, but will stop the flurry of incoming PRs related. PR: ports/161779 ports/161774 ports/161791 ports/161771 ports/161769 Submitted by: Many people, original fix suggested by Jason Helfman (jhelfman@e-e.com) Approved by: portmgr (pav) Notes: svn path=/head/; revision=283932
2011-10-18The PostgreSQL Global Development Group today released minor version updatesPalle Girgensohn6-98/+55
for all active branches of the PostgreSQL object-relational database system, including versions 9.1.1, 9.0.5, 8.4.9, 8.3.16 and 8.2.22. All users are strongly urged to update their installations at the next scheduled downtime. URL: http://www.postgresql.org/about/news.1355 Cleanup ports. Better handling of the knob PG_USER. Also add uuid to 9.0 and 9.1 contrib ports. Notes: svn path=/head/; revision=283757
2011-10-02- Unbreak postgresql-plpython: allow build with threaded pythonSunpoet Po-Chuan Hsieh1-0/+11
- Pass maintainership to submitter PR: ports/159843 Submitted by: Ruslan Mahmatkhanov <cvs-src@yandex.ru> Notes: svn path=/head/; revision=282829
2011-09-23- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)Dmitry Marakasov1-1/+1
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead PR: 157936 Submitted by: myself Exp-runs by: pav Approved by: pav Notes: svn path=/head/; revision=282282
2011-08-15Revert previous commit -- appears to cause rc problems as I missed some subsChris Rees2-2/+43
http://www.mail-archive.com/freebsd-ports@freebsd.org/msg35324.html PR: ports/157558 ports/157559 ports/157666 ports/157669 Submitted by: rihad@mail.ru Approved by: maintainer (girgen; implicit -- this reverts a commit I did after maintainer timeout) Notes: svn path=/head/; revision=279751
2011-08-14- Fix databases/p5-postgresql-plperl build with Perl 5.14Sunpoet Po-Chuan Hsieh1-0/+28
This patch is for PostgreSQL 8.2, 8.3, 8.4 and 9.0. PostgreSQL 9.1 has it already. PR: ports/158727 Submitted by: sunpoet (myself) Approved by: girgen (maintainer timeout, 5 weeks) Notes: svn path=/head/; revision=279659
2011-08-12- Use USERS and GROUPSChris Rees2-43/+2
PR: ports/157588 Submitted by: me Approved by: maintainer timeout (girgen, 9 weeks) Notes: svn path=/head/; revision=279536
2011-04-18Update PostgreSQL to 9.0.4, 8.4.8, 8.3.15 and 8.2.21.Palle Girgensohn4-6/+9
This update contains a critical fix to the pg_upgrade utility which prevents significant downtime issues. Do not use pg_upgrade without installing this update first. The issue with pg_upgrade and the fix are detailed on the PostgreSQL wiki: http://wiki.postgresql.org/wiki/20110408pg_upgrade_fix Users who have already used pg_upgrade should run the database repair script given on that page on their databases as soon as possible. See the release notes for each version at http://www.postgresql.org/docs/current/static/release.html for a full list of changes with details. Allow the username of the postgresql user to configurable for 8.4 and 9.0. Largely inspired by the work of Jason Helfman [153668, 153136]. Change PGUSER knob to PG_USER not to clash with PGUSER environment. PR: 153668, 153136, 155493, 155137 Notes: svn path=/head/; revision=272900
2011-02-01Update to versions 9.0.3, 8.4.7, 8.3.14 and 8.2.20.Palle Girgensohn2-3/+3
This update includes a security fix which prevents a buffer overrun in the contrib module intarray's input function for the query_int type. This bug is a security risk since the function's return address could be overwritten by malicious code. All supported versions of PostgreSQL are impacted. However, the affected contrib module is optional. Only users who have installed the intarray module in their database are affected. See the CVE Advisory at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4015 This release includes 63 bugfixes, including: - Avoid unexpected conversion overflow in planner for distant date values - Fix assignment to an array slice that is before the existing range of subscripts - Fix pg_restore to do the right thing when escaping large objects - Avoid failures when EXPLAIN tries to display a simple-form CASE expression - Improved build support for Windows version - Fix bug in contrib/seg's GiST picksplit algorithm which caused performance degredation The 9.0.3 update also contains several fixes for issues with features introduced or changed in version 9.0: - Ensure all the received WAL is fsync'd to disk before exiting walreceiver - Improve performance of walreceiver by avoiding excess fsync activity - Make ALTER TABLE revalidate uniqueness and exclusion constraints when needed - Fix EvalPlanQual for UPDATE of an inheritance tree when the tables are not all alike PR: ports/154436 Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4015 Feature safe: yes Approved by: portmgr Notes: svn path=/head/; revision=268521
2011-01-30Fix @dirrmtry since it already filter stderr and return true.Andrej Zverev1-6/+6
PR: ports/153895 Submitted by: az@ Approved by: maintainer (timeout) Feature safe: yes Notes: svn path=/head/; revision=268414
2010-12-31- Update to 8.3.13Martin Matuska3-7/+53
- unify ICU handling PR: ports/153245 Approved by: maintainer (timeout) Notes: svn path=/head/; revision=267206
2010-12-16- Prepare for devel/icu4 deletionBaptiste Daroussin1-1/+2
- fix py-icu with icu4.6 - fix portsgresql*server with icu 4.6 - remove now useless icu patch from webkit Notes: svn path=/head/; revision=266446
2010-12-09- Fix build if WITH_ICU or WITH_ICU4 defined (bsd.autotools.mk update)Martin Matuska1-1/+1
Approved by: portmgr (pav) Notes: svn path=/head/; revision=265929
2010-12-04Sync to new bsd.autotools.mkAde Lovett1-1/+1
Notes: svn path=/head/; revision=265663
2010-11-22- Use dirrmtry on share/postgresql/tsearch_data for postgresql{83|84|90}-serverSunpoet Po-Chuan Hsieh2-2/+2
- Bump PORTREVISION PR: ports/151882 Submitted by: sunpoet (myself) Approved by: girgen (maintainer timeout, 20 days) Notes: svn path=/head/; revision=264939
2010-11-21- Fix optional dependency on security/heimdalRene Ladan1-1/+2
- Bump PORTREVISION PR: ports/152029 Submitted by: Joerg Pulz [Joerg.Pulz frm2.tum.de] Approved by: Ryan Steinmetz <rpsfa@rit.edu> (maintainer of net/freeradius*) girgen (maintainer of databases/postgresql*-server, 14 day timeout) Notes: svn path=/head/; revision=264890
2010-10-16Punt autoconf267->autoconf268Ade Lovett1-1/+1
Notes: svn path=/head/; revision=263089
2010-10-07Update all PostgreSQL ports to latest versions.Palle Girgensohn3-13/+22
Also, try to break the previous 1:1 relation between FreeBSD system and PostgreSQL versions installed. Use different PREFIX:es to install different versions on the same system. PR: ports/132402, ports/145002, ports/146657 Notes: svn path=/head/; revision=262548
2010-09-15Autotools update. Read ports/UPDATING 20100915 for details.Ade Lovett1-2/+2
Approved by: portmgr (for Mk/bsd.port.mk part) Tested by: Multiple -exp runs Notes: svn path=/head/; revision=261230
2010-06-13BROKEN should not be quoted.Erwin Lansing1-1/+1
No functional change. Notes: svn path=/head/; revision=256468
2010-05-31Bounce PORTREVISION for gettext-related ports. Have fun, ya'll.Ade Lovett1-0/+1
Notes: svn path=/head/; revision=255371
2010-05-20Update all PostgreSQL ports to latest version.Palle Girgensohn5-17/+40
Remove postgresql-contrib in favour for postgresqlNN-contrib. This way we will get packages built, which is nice. Security: CVE-2010-1169 Security: CVE-2010-1170 The PostgreSQL Project today released minor versions updating all active branches of the PostgreSQL object-relational database system, including versions 8.4.4, 8.3.11, 8.2.17, 8.1.21, 8.0.25, and 7.4.29. This release fixes moderate-risk security issues with PL/perl and PL/tcl, as well as a data corruption issue with standby databases. Users of any of these three features should update their PostgreSQL installations immediately. The PL/perl security fix closes a security hole in PL/perl procedures which could allow privilege escalation on the host system, caused by a flaw in Safe.pm; see CVE-2010-1169 and CVE-2010-1447 for details. A second patch prevents PL/tcl's pltcl_modules table from being subverted in order to run arbitrary Tcl scripts; see CVE-2010-1170. These issues only affect users who have enabled either of these two stored procedure languages. Also corrected is use of the command ALTER TABLE SET TABLESPACE, which previously could cause data corruption on Warm Standby database slaves. This issue affects only version 8.4. There are also 21 other bug fixes in this release, some of which apply only to version 8.4, and a few of which are specifically for Windows. While these are generally fixes for minor issues, among the changes are: * Fix for a combinational crash condition * Prevent normal users from resetting some GUCs in their own role definitions * Correctly apply constraint exclusion in UPDATE and DELETE queries * Minor fixes for WAL archiving * Update timezone data for 12 zones See the release notes for a full list of changes with details. Releasenotes at http://www.postgresql.org/docs/current/static/release.html Notes: svn path=/head/; revision=254659
2010-03-27Begin the process of deprecating sysutils/rc_subr byDoug Barton1-1/+1
s#. %%RC_SUBR%%#. /etc/rc.subr# Notes: svn path=/head/; revision=251553
2010-01-04PTHREAD_[CFLAGS|LDFLAGS] are already set in CONFIGURE_ENV.Alex Dupre1-3/+0
Approved by: portmgr and maintainer timeout (1 month) Notes: svn path=/head/; revision=247147
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-31 10:33:19 +0000