svn commit: r461251 - in head/databases: postgresql10-server postgresql10-server/files postgresql92-client postgresql92-contrib postgresql92-server postgresql92-server/files postgresql93-server pos...

Antoine Brodin antoine at freebsd.org
Thu Feb 8 19:50:16 UTC 2018


On Thu, Feb 8, 2018 at 6:38 PM, Palle Girgensohn <girgen at freebsd.org> wrote:
> Author: girgen
> Date: Thu Feb  8 17:38:36 2018
> New Revision: 461251
> URL: https://svnweb.freebsd.org/changeset/ports/461251
>
> Log:
>   Update to latest versions of PostgreSQL
>
>   2018-02-08 Security Update Release
>   ==================================
>
>   The PostgreSQL Global Development Group has released an update to all supported
>   versions of our database system, including 10.2, 9.6.7, 9.5.11, 9.4.16, 9.3.21.
>   This release fixes two security issues. This release also fixes issues with
>   VACUUM, GIN indexes, and hash indexes that could lead to data corruption, as
>   well as fixes for using parallel queries and logical replication.
>
>   All users using the affected versions of PostgreSQL should update as soon as
>   possible. Please see the notes on "Updating" below for any post-update steps
>   that may be required.
>
>   Please note that PostgreSQL changed its versioning scheme with the release of
>   version 10.0, so updating to version 10.2 from 10.0 or 10.1 is considered a
>   minor update.
>
>   Security Issues
>   ---------------
>
>   Two security vulnerabilities have been fixed by this release:
>
>   * CVE-2018-1052: Fix the processing of partition keys containing multiple
>   expressions
>   * CVE-2018-1053: Ensure that all temporary files made with "pg_upgrade" are
>   non-world-readable
>
>   Local fixes to the FreeBSD ports
>   --------------------------------
>
>   Inform users about data checksums [1].
>   Make sure /usr/bin/su is used regardless of PATH settings [2].
>   Enable DTRACE by default [3].
>
>   PR:           214671 [1], 223157 [2], 215028 [3]
>   Security:     c602c791-0cf4-11e8-a2ec-6cc21735f730

Hi,

I see some failures on the build cluster due to a segmentation fault in dtrace.
Could the DTRACE option be reverted and more tested?

Cheers,

Antoine


More information about the svn-ports-all mailing list