postgresql: security bump to version 9.4.2
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Tue, 26 May 2015 19:45:57 +0000 (16:45 -0300)
committerPeter Korsgaard <peter@korsgaard.com>
Tue, 26 May 2015 21:53:34 +0000 (23:53 +0200)
Fixes:
CVE-2015-3165 (denial of service)
CVE-2015-3166 (information disclosure)
CVE-2015-3167 (side-channel key exposure)

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/postgresql/postgresql.hash
package/postgresql/postgresql.mk

index ea2be3e5375299ca5566c4a5f6f503e8268408f0..2f8de30fa5b0134735e0a9f6650392697ca43dee 100644 (file)
@@ -1,2 +1,2 @@
-# From https://ftp.postgresql.org/pub/source/v9.4.1/postgresql-9.4.1.tar.bz2.sha256
-sha256 29ddb77c820095b8f52e5455e9c6c6c20cf979b0834ed1986a8857b84888c3a6  postgresql-9.4.1.tar.bz2
+# From https://ftp.postgresql.org/pub/source/v9.4.2/postgresql-9.4.2.tar.bz2.sha256
+sha256 81fda191c165ba1d25d75cd0166ece5abdcb4a7f5eca01b349371e279ebb4d11  postgresql-9.4.2.tar.bz2
index eda547c18023d44d2784d25f210b640c3ec38b61..d4895a0adcfa737823f76b315295097b5e8ace96 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-POSTGRESQL_VERSION = 9.4.1
+POSTGRESQL_VERSION = 9.4.2
 POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2
 POSTGRESQL_SITE = http://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION)
 POSTGRESQL_LICENSE = PostgreSQL