FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Commit found by message id
Mon, 4 Jun 2012
[ 11:00:52 girgen ] Original commit 
postgresql83-server databases  Deleted Deprecated Expired files touched by this commit  This port version is marked as vulnerable. The most advanced open-source database available anywhere
postgresql84-server databases files touched by this commit  An older version of this port was marked as vulnerable. The most advanced open-source database available anywhere
postgresql90-client databases files touched by this commit  An older version of this port was marked as vulnerable. PostgreSQL database (client)
postgresql90-server databases files touched by this commit  An older version of this port was marked as vulnerable. The most advanced open-source database available anywhere
postgresql91-server databases files touched by this commit  An older version of this port was marked as vulnerable. The most advanced open-source database available anywhere
postgresql92-server databases files touched by this commit  An older version of this port was marked as vulnerable. The most advanced open-source database available anywhere
The PostgreSQL Global Development Group today released security updates for all
active branches of the PostgreSQL database system, including versions 9.1.4,
9.0.8, 8.4.12 and 8.3.19.

Users of the crypt(text, text) function with DES encryption in the optional
pg_crypto module should upgrade their installations immediately, if you have'nt
already updated since the port was patched on May 30.  All other database
administrators are urged to upgrade your version of PostgreSQL at the
next scheduled downtime.

URL:      http://www.postgresql.org/about/news/1398/

Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2143
          Fix incorrect password transformation in contrib/pgcrypto’s DES
crypt() function
          This was fixed in a patch release for the FreeBSD ports on May 30.

Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2655
          Ignore SECURITY DEFINER and SET attributes for a procedural
language’s call handle

Number of ports [& non-ports] in this commit: 6

Showing files for just one port: databases/postgresql84-server

show all files

hide all files


4 files found
ActionRevisionLinksFile
modify 1.251 View diff View revision /ports/head/databases/postgresql84-server/Makefile
modify 1.85 View diff View revision /ports/head/databases/postgresql84-server/distinfo
remove 1.2 View revision /ports/head/databases/postgresql84-server/files/patch-crypt-des.c
modify 1.40 View diff View revision /ports/head/databases/postgresql84-server/pkg-plist-server
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
php53Aug 18
phpmyadminAug 17
chromiumAug 13
serfAug 11
subversionAug 11
subversion17Aug 11
nginxAug 09
nginx-develAug 09
mingw32-opensslAug 06
opensslAug 06
krfbAug 03
gpgmeAug 02
samba4Aug 02
samba41Aug 02
kdelibs4Jul 31

7 vulnerabilities affecting 11 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24476
Broken 230
Deprecated 845
Ignore 573
Forbidden 36
Restricted 261
No CDROM 101
Vulnerable 23
Expired 0
Set to expire 832
Interactive 0
new 24 hours 5
new 48 hours12
new 7 days42
new fortnight160
new month215


Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.