FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Commit found by message id
Thu, 20 Feb 2014
[ 18:11:38 girgen ] Original commit   Revision:345257
postgresql84-server databases files touched by this commit  An older version of this port was marked as vulnerable. The most advanced open-source database available anywhere
postgresql90-server databases files touched by this commit  An older version of this port was marked as vulnerable. The most advanced open-source database available anywhere
postgresql91-docs databases files touched by this commit The PostgreSQL documentation set
postgresql91-server databases files touched by this commit  An older version of this port was marked as vulnerable. The most advanced open-source database available anywhere
postgresql92-server databases files touched by this commit  An older version of this port was marked as vulnerable. The most advanced open-source database available anywhere
postgresql93-server databases files touched by this commit The most advanced open-source database available anywhere
The PostgreSQL Global Development Group has released an important
update to all supported versions of the PostgreSQL database system,
which includes minor versions 9.3.3, 9.2.7, 9.1.12, 9.0.16, and
8.4.20. This update contains fixes for multiple security issues, as
well as several fixes for replication and data integrity issues.  All
users are urged to update their installations at the earliest
opportunity, especially those using binary replication or running a
high-security application.

This update fixes CVE-2014-0060, in which PostgreSQL did not properly
enforce the WITH ADMIN OPTION permission for ROLE management. Before
this fix, any member of a ROLE was able to grant others access to the
same ROLE regardless if the member was given the WITH ADMIN OPTION
permission. It also fixes multiple privilege escalation issues,
including: CVE-2014-0061, CVE-2014-0062, CVE-2014-0063, CVE-2014-0064,
CVE-2014-0065, and CVE-2014-0066. More information on these issues can
be found on our security page and the security issue detail wiki page.

Security:	CVE-2014-0060,CVE-2014-0061,CVE-2014-0062,CVE-2014-0063
		CVE-2014-0064,CVE-2014-0065,CVE-2014-0066,CVE-2014-0067

Number of ports [& non-ports] in this commit: 6

Showing files for just one port: databases/postgresql91-server

show all files

hide all files


2 files found
ActionRevisionLinksFile
modify 345257 View diff View revision /ports/head/databases/postgresql91-server/Makefile
modify 345257 View diff View revision /ports/head/databases/postgresql91-server/distinfo
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
asterisk11Sep 18
squidSep 18
squid33Sep 18
dbusSep 17
nginxSep 16
nginx-develSep 16
phpmyadminSep 13
ossec-hids-clientSep 11
ossec-hids-localSep 11
ossec-hids-serverSep 11
chromiumSep 09
trafficserverSep 05
apache22*Sep 03
apache22-event-mpm*Sep 03
apache22-itk-mpm*Sep 03

8 vulnerabilities affecting 19 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24097
Broken 120
Deprecated 91
Ignore 384
Forbidden 17
Restricted 203
No CDROM 94
Vulnerable 21
Expired 2
Set to expire 86
Interactive 0
new 24 hours 2
new 48 hours2
new 7 days33
new fortnight68
new month232


Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.