[Buildroot] [PATCH 1/1] postgresql: security bump to 10.5

[Buildroot] [PATCH 1/1] postgresql: security bump to 10.5

[Adam Duskett]

Fixes CVE-2018-10915 & CVE-2018-10925

Changelog: https://www.postgresql.org/docs/10/static/release-10-5.html
Signed-off-by: Adam Duskett <aduskett@gmail.com>
---
 package/postgresql/postgresql.hash | 4 ++--
 package/postgresql/postgresql.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/postgresql/postgresql.hash b/package/postgresql/postgresql.hash
index 533c398d59..a9cc93c76c 100644
--- a/package/postgresql/postgresql.hash
+++ b/package/postgresql/postgresql.hash
@@ -1,5 +1,5 @@
-# From https://ftp.postgresql.org/pub/source/v10.3/postgresql-10.3.tar.bz2.sha256
-sha256	6ea268780ee35e88c65cdb0af7955ad90b7d0ef34573867f223f14e43467931a	postgresql-10.3.tar.bz2
+# From https://ftp.postgresql.org/pub/source/v10.5/postgresql-10.5.tar.bz2.sha256
+sha256	6c8e616c91a45142b85c0aeb1f29ebba4a361309e86469e0fb4617b6a73c4011	postgresql-10.5.tar.bz2
 
 # License file, Locally calculated
 sha256	24cfc70cf16b3a23242c49ffce39510683bdd48cbedb8a46fe03976ee5f5c21e	COPYRIGHT
diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk
index 0940873686..540e1540ca 100644
--- a/package/postgresql/postgresql.mk
+++ b/package/postgresql/postgresql.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-POSTGRESQL_VERSION = 10.3
+POSTGRESQL_VERSION = 10.5
 POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2
 POSTGRESQL_SITE = http://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION)
 POSTGRESQL_LICENSE = PostgreSQL
-- 
2.17.1

[Buildroot] [PATCH 1/1] postgresql: security bump to 10.5

[Adam Duskett]

All;

I didn't realize that 2018.02 also has 10.3, I assumed (my mistake)
that 2018.02 had the v9 series and
I had planned on making a separate patch for that as well.

I would recommend that this patch should be applied to master, next,
and 2018.02.x

Thanks!
Adam

On Tue, Aug 28, 2018 at 12:31 PM Adam Duskett <aduskett@gmail.com> wrote:
>
> Fixes CVE-2018-10915 & CVE-2018-10925
>
> Changelog: https://www.postgresql.org/docs/10/static/release-10-5.html
> Signed-off-by: Adam Duskett <aduskett@gmail.com>
> ---
>  package/postgresql/postgresql.hash | 4 ++--
>  package/postgresql/postgresql.mk   | 2 +-
>  2 files changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/package/postgresql/postgresql.hash b/package/postgresql/postgresql.hash
> index 533c398d59..a9cc93c76c 100644
> --- a/package/postgresql/postgresql.hash
> +++ b/package/postgresql/postgresql.hash
> @@ -1,5 +1,5 @@
> -# From https://ftp.postgresql.org/pub/source/v10.3/postgresql-10.3.tar.bz2.sha256
> -sha256 6ea268780ee35e88c65cdb0af7955ad90b7d0ef34573867f223f14e43467931a        postgresql-10.3.tar.bz2
> +# From https://ftp.postgresql.org/pub/source/v10.5/postgresql-10.5.tar.bz2.sha256
> +sha256 6c8e616c91a45142b85c0aeb1f29ebba4a361309e86469e0fb4617b6a73c4011        postgresql-10.5.tar.bz2
>
>  # License file, Locally calculated
>  sha256 24cfc70cf16b3a23242c49ffce39510683bdd48cbedb8a46fe03976ee5f5c21e        COPYRIGHT
> diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk
> index 0940873686..540e1540ca 100644
> --- a/package/postgresql/postgresql.mk
> +++ b/package/postgresql/postgresql.mk
> @@ -4,7 +4,7 @@
>  #
>  ################################################################################
>
> -POSTGRESQL_VERSION = 10.3
> +POSTGRESQL_VERSION = 10.5
>  POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2
>  POSTGRESQL_SITE = http://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION)
>  POSTGRESQL_LICENSE = PostgreSQL
> --
> 2.17.1
>

[Buildroot] [PATCH 1/1] postgresql: security bump to 10.5

[Thomas Petazzoni]

Hello,

On Tue, 28 Aug 2018 12:31:27 -0400, Adam Duskett wrote:
> Fixes CVE-2018-10915 & CVE-2018-10925
> 
> Changelog: https://www.postgresql.org/docs/10/static/release-10-5.html
> Signed-off-by: Adam Duskett <aduskett@gmail.com>

There should be one empty line before your SoB line, so I fixed that
up, and applied to master. Thanks!

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

[Buildroot] [PATCH 1/1] postgresql: security bump to 10.5

[Thomas Petazzoni]

Hello Adam,

On Tue, 28 Aug 2018 12:36:08 -0400, Adam Duskett wrote:

> I would recommend that this patch should be applied to master, next,
> and 2018.02.x

In fact, it goes just to master.

next will be merged back into master as soon as 2018.08 is released. We
don't apply changes to both master and next, unless it is needed to
resolve conflicts. master takes all the bug/build/security fixes, next
takes all the rest of the development.

The patch will be applied on 2018.02.x and 2018.05.x by Peter as part
of his process of reviewing all commits that were made in master, and
deciding which ones are relevant for our stable branches.

Best regards,

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

[Buildroot] [PATCH 1/1] postgresql: security bump to 10.5

[Peter Korsgaard]

>>>>> "Adam" == Adam Duskett <aduskett@gmail.com> writes:

 > Fixes CVE-2018-10915 & CVE-2018-10925
 > Changelog: https://www.postgresql.org/docs/10/static/release-10-5.html
 > Signed-off-by: Adam Duskett <aduskett@gmail.com>

Committed to 2018.02.x and 2018.05.x, thanks.

-- 
Bye, Peter Korsgaard