[Buildroot] [PATCH] postgresql: security bump to version 9.6.6

[Buildroot] [PATCH] postgresql: security bump to version 9.6.6

[Peter Korsgaard]

Fixes the following security issues:

CVE-2017-12172: Start scripts permit database administrator to modify
root-owned files.

CVE-2017-15098: Memory disclosure in JSON functions.

CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT
privileges.

See the announcement for more details:
https://www.postgresql.org/about/news/1801/

While we're at it, also add a hash for the license file.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/postgresql/postgresql.hash | 6 ++++--
 package/postgresql/postgresql.mk   | 2 +-
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/package/postgresql/postgresql.hash b/package/postgresql/postgresql.hash
index 62ce9a7407..e62838911e 100644
--- a/package/postgresql/postgresql.hash
+++ b/package/postgresql/postgresql.hash
@@ -1,2 +1,4 @@
-# From https://ftp.postgresql.org/pub/source/v9.6.5/postgresql-9.6.5.tar.bz2.sha256
-sha256 06da12a7e3dddeb803962af8309fa06da9d6989f49e22865335f0a14bad0744c  postgresql-9.6.5.tar.bz2
+# From https://ftp.postgresql.org/pub/source/v9.6.6/postgresql-9.6.6.tar.bz2.sha256
+sha256 399cdffcb872f785ba67e25d275463d74521566318cfef8fe219050d063c8154  postgresql-9.6.6.tar.bz2
+# License file, Locally calculated
+sha256 7dc8de32741ad1b03e21710771b55a1b9d460671d47f28a8840f917e38c66676  COPYRIGHT
diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk
index 7adb957cf0..50ce212c1c 100644
--- a/package/postgresql/postgresql.mk
+++ b/package/postgresql/postgresql.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-POSTGRESQL_VERSION = 9.6.5
+POSTGRESQL_VERSION = 9.6.6
 POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2
 POSTGRESQL_SITE = http://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION)
 POSTGRESQL_LICENSE = PostgreSQL
-- 
2.11.0

[Buildroot] [PATCH] postgresql: security bump to version 9.6.6

[Thomas Petazzoni]

Hello,

On Sat, 11 Nov 2017 11:44:56 +0100, Peter Korsgaard wrote:
> Fixes the following security issues:
> 
> CVE-2017-12172: Start scripts permit database administrator to modify
> root-owned files.
> 
> CVE-2017-15098: Memory disclosure in JSON functions.
> 
> CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT
> privileges.
> 
> See the announcement for more details:
> https://www.postgresql.org/about/news/1801/
> 
> While we're at it, also add a hash for the license file.
> 
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
> ---
>  package/postgresql/postgresql.hash | 6 ++++--
>  package/postgresql/postgresql.mk   | 2 +-
>  2 files changed, 5 insertions(+), 3 deletions(-)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com

[Buildroot] [PATCH] postgresql: security bump to version 9.6.6

[Peter Korsgaard]

>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:

 > Fixes the following security issues:
 > CVE-2017-12172: Start scripts permit database administrator to modify
 > root-owned files.

 > CVE-2017-15098: Memory disclosure in JSON functions.

 > CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT
 > privileges.

 > See the announcement for more details:
 > https://www.postgresql.org/about/news/1801/

 > While we're at it, also add a hash for the license file.

 > Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

Committed to 2017.02.x and 2017.02.x, thanks.

-- 
Bye, Peter Korsgaard