Up to [cvs.NetBSD.org] / pkgsrc / databases / postgresql83-server
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.26, Thu Apr 4 21:08:31 2013 UTC (11 years ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2013Q2-base,
pkgsrc-2013Q2,
HEAD
Changes since 1.25: +1 -1
lines
FILE REMOVED
The PostgreSQL Global Development Group has released a security update to all current versions of the PostgreSQL database system, including versions 9.2.4, 9.1.9, 9.0.13, and 8.4.17. This update fixes a high-exposure security vulnerability in versions 9.0 and later. All users of the affected versions are strongly urged to apply the update immediately. A major security issue fixed in this release, CVE-2013-1899, makes it possible for a connection request containing a database name that begins with "-" to be crafted that can damage or destroy files within a server's data directory. Anyone with access to the port the PostgreSQL server listens on can initiate this request. Two lesser security fixes are also included in this release: CVE-2013-1900, wherein random numbers generated by contrib/pgcrypto functions may be easy for another database user to guess, and CVE-2013-1901, which mistakenly allows an unprivileged user to run commands that could interfere with in-progress backups. Finally, this release fixes two security issues with the graphical installers for Linux and Mac OS X: insecure passing of superuser passwords to a script, CVE-2013-1903 and the use of predictable filenames in /tmp CVE-2013-1902.
Revision 1.25 / (download) - annotate - [select for diffs], Sat Feb 9 11:19:09 2013 UTC (11 years, 2 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2013Q1-base,
pkgsrc-2013Q1
Changes since 1.24: +1 -2
lines
Diff to previous 1.24 (colored) to selected 1.1.1.1 (colored)
The PostgreSQL Global Development Group has released a security update to all current versions of the PostgreSQL database system, including versions 9.2.3, 9.1.8, 9.0.12, 8.4.16, and 8.3.23. This update fixes a denial-of-service (DOS) vulnerability. All users should update their PostgreSQL installations as soon as possible. The security issue fixed in this release, CVE-2013-0255, allows a previously authenticated user to crash the server by calling an internal function with invalid arguments. This issue was discovered by independent security researcher Sumit Soni this week and reported via Secunia SVCRP, and we are grateful for their efforts in making PostgreSQL more secure. Today's update also fixes a performance regression which caused a decrease in throughput when using dynamic queries in stored procedures in version 9.2. Applications which use PL/pgSQL's EXECUTE are strongly affected by this regression and should be updated. Additionally, we have fixed intermittent crashes caused by CREATE/DROP INDEX CONCURRENTLY, and multiple minor issues with replication. This release is expected to be the final update for version 8.3, which is now End-of-Life (EOL). Users of version 8.3 should plan to upgrade to a later version of PostgreSQL immediately. For more information, see our Versioning Policy. This update release also contains fixes for many minor issues discovered and patched by the PostgreSQL community in the last two months, including: * Prevent unnecessary table scans during vacuuming * Prevent spurious cached plan error in PL/pgSQL * Allow sub-SELECTs to be subscripted * Prevent DROP OWNED from dropping databases or tablespaces * Make ECPG use translated messages * Allow PL/Python to use multi-table trigger functions (again) in 9.1 and 9.2 * Fix several activity log management issues on Windows * Prevent autovacuum file truncation from being cancelled by deadlock_timeout * Make extensions build with the .exe suffix automatically on Windows * Fix concurrency issues with CREATE/DROP DATABASE * Reject out-of-range values in to_date() conversion function * Revert cost estimation for large indexes back to pre-9.2 behavior * Make pg_basebackup tolerate timeline switches * Cleanup leftover temp table entries during crash recovery * Prevent infinite loop when COPY inserts a large tuple into a table with a large fillfactor * Prevent integer overflow in dynahash creation * Make pg_upgrade work with INVALID indexes * Fix bugs in TYPE privileges * Allow Contrib installchecks to run in their own databases * Many documentation updates * Add new timezone "FET".
Revision 1.24 / (download) - annotate - [select for diffs], Wed Feb 6 23:21:56 2013 UTC (11 years, 2 months ago) by jperkin
Branch: MAIN
Changes since 1.23: +2 -2
lines
Diff to previous 1.23 (colored) to selected 1.1.1.1 (colored)
PKGREVISION bumps for the security/openssl 1.0.1d update.
Revision 1.23 / (download) - annotate - [select for diffs], Sun Dec 16 01:52:03 2012 UTC (11 years, 4 months ago) by obache
Branch: MAIN
CVS Tags: pkgsrc-2012Q4-base,
pkgsrc-2012Q4
Changes since 1.22: +2 -1
lines
Diff to previous 1.22 (colored) to selected 1.1.1.1 (colored)
recursive bump from cyrus-sasl libsasl2 shlib major bump.
Revision 1.22 / (download) - annotate - [select for diffs], Tue Oct 2 21:25:42 2012 UTC (11 years, 6 months ago) by asau
Branch: MAIN
Changes since 1.21: +1 -3
lines
Diff to previous 1.21 (colored) to selected 1.1.1.1 (colored)
Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.
Revision 1.21 / (download) - annotate - [select for diffs], Thu Aug 23 16:56:38 2012 UTC (11 years, 7 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2012Q3-base,
pkgsrc-2012Q3
Changes since 1.20: +1 -2
lines
Diff to previous 1.20 (colored) to selected 1.1.1.1 (colored)
Changes: * CVE-2012-3488: PostgreSQL insecure use of libxslt * CVE-2012-3489: PostgreSQL insecure use of libxml2 * Updates and corrections to time zone data * Multiple documentation updates and corrections * Add limit on max_wal_senders * Fix dependencies generated during ALTER TABLE ADD CONSTRAINT USING INDEX. * Correct behavior of unicode conversions for PL/Python * Fix WITH attached to a nested set operation (UNION/INTERSECT/EXCEPT). * Fix syslogger so that log_truncate_on_rotation works in the first rotation. * Only allow autovacuum to be auto-canceled by a directly blocked process. * Improve fsync request queue operation * Prevent corner-case core dump in rfree(). * Fix Walsender so that it responds correctly to timeouts and deadlocks * Several PL/Perl fixes for encoding-related issues * Make selectivity operators use the correct collation * Prevent unsuitable slaves from being selected for synchronous replication * Make REASSIGN OWNED work on extensions as well * Fix race condition with ENUM comparisons * Make NOTIFY cope with out-of-disk-space * Fix memory leak in ARRAY subselect queries * Reduce data loss at replication failover * Fix behavior of subtransactions with Hot Standby
Revision 1.20 / (download) - annotate - [select for diffs], Thu Jul 12 19:46:51 2012 UTC (11 years, 9 months ago) by marino
Branch: MAIN
Changes since 1.19: +2 -1
lines
Diff to previous 1.19 (colored) to selected 1.1.1.1 (colored)
databases/postgresql83-server: Fix rpath of plpgsql.so Due to updated PKG_DEVELOPER checks, postgresql83-server started failing with the following message: ERROR: lib/postgresql/plpgsql.so: missing libintl.so.8 The plpgsql.so library had no rpath set other than what the base compiler adds by default. On DragonFly, the libintl.so library would likely have been found anyway as /usr/pkg/lib is part of the LD_CONFIG hint file search path, but that isn't a guarantee. The new patch adds ${libdir} to the plpgsql.so rpath so it passes PKG_DEVELOPER checks now.
Revision 1.18.2.1 / (download) - annotate - [select for diffs], Mon Jul 2 23:06:56 2012 UTC (11 years, 9 months ago) by tron
Branch: pkgsrc-2012Q2
Changes since 1.18: +1 -2
lines
Diff to previous 1.18 (colored) next main 1.19 (colored) to selected 1.1.1.1 (colored)
Pullup ticket #3842 - requested by morr databases/postgresql83-adminpack: security update databases/postgresql83-client: security update databases/postgresql83-plperl: security update databases/postgresql83-pltcl: security update databases/postgresql83-server: security update databases/postgresql83-uuid: security update databases/postgresql83: security update Revisions pulled up: - databases/postgresql83-adminpack/Makefile 1.10 - databases/postgresql83-client/Makefile 1.27 - databases/postgresql83-client/PLIST 1.21 - databases/postgresql83-plperl/Makefile 1.16 - databases/postgresql83-plpython/Makefile 1.14 - databases/postgresql83-pltcl/Makefile 1.10 - databases/postgresql83-server/Makefile 1.19 - databases/postgresql83-server/PLIST 1.18 - databases/postgresql83-uuid/Makefile 1.3 - databases/postgresql83/Makefile 1.8 - databases/postgresql83/Makefile.common 1.24 - databases/postgresql83/distinfo 1.22 --- Module Name: pkgsrc Committed By: morr Date: Sun Jul 1 19:19:42 UTC 2012 Modified Files: pkgsrc/databases/postgresql83: Makefile.common distinfo pkgsrc/databases/postgresql83-client: PLIST pkgsrc/databases/postgresql83-plpython: Makefile pkgsrc/databases/postgresql83-server: PLIST Log Message: Security update to version 8.3.19. Changes: * Fix incorrect password transformation in contrib/pgcrypto's DES crypt() function (Solar Designer) * If a password string contained the byte value 0x80, the remainder of the password was ignored, causing the password to be much weaker than it appeared. With this fix, the rest of the string is properly included in the DES hash. Any stored password values that are affected by this bug will thus no longer match, so the stored values may need to be updated. (CVE-2012-2143) * Ignore SECURITY DEFINER and SET attributes for a procedural language's call handler (Tom Lane) * Applying such attributes to a call handler could crash the server. (CVE-2012-2655) * Allow numeric timezone offsets in timestamp input to be up to 16 hours away from UTC (Tom Lane) * Some historical time zones have offsets larger than 15 hours, the previous limit. This could result in dumped data values being rejected during reload. * Fix timestamp conversion to cope when the given time is exactly the last DST transition time for the current timezone (Tom Lane) * This oversight has been there a long time, but was not noticed previously because most DST-using zones are presumed to have an indefinite sequence of future DST transitions. * Fix text to name and char to name casts to perform string truncation correctly in multibyte encodings (Karl Schnaitter) * Fix memory copying bug in to_tsquery() (Heikki Linnakangas) * Fix slow session startup when pg_attribute is very large (Tom Lane) * If pg_attribute exceeds one-fourth of shared_buffers, cache rebuilding code that is sometimes needed during session start would trigger the synchronized-scan logic, causing it to take many times longer than normal. The problem was particularly acute if many new sessions were starting at once. * Ensure sequential scans check for query cancel reasonably often (Merlin Moncure) * A scan encountering many consecutive pages that contain no live tuples would not respond to interrupts meanwhile. * Ensure the Windows implementation of PGSemaphoreLock() clears ImmediateInterruptOK before returning (Tom Lane) * This oversight meant that a query-cancel interrupt received later in the same query could be accepted at an unsafe time, with unpredictable but not good consequences. * Show whole-row variables safely when printing views or rules (Abbas Butt, Tom Lane) * Corner cases involving ambiguous names (that is, the name could be either a table or column name of the query) were printed in an ambiguous way, risking that the view or rule would be interpreted differently after dump and reload. Avoid the ambiguous case by attaching a no-op cast. * Ensure autovacuum worker processes perform stack depth checking properly (Heikki Linnakangas) * Previously, infinite recursion in a function invoked by auto-ANALYZE could crash worker processes. * Fix logging collector to not lose log coherency under high load (Andrew Dunstan) * The collector previously could fail to reassemble large messages if it got too busy. * Fix logging collector to ensure it will restart file rotation after receiving SIGHUP (Tom Lane) * Fix PL/pgSQL's GET DIAGNOSTICS command when the target is the function's first variable (Tom Lane) * Fix several performance problems in pg_dump when the database contains many objects (Jeff Janes, Tom Lane) * pg_dump could get very slow if the database contained many schemas, or if many objects are in dependency loops, or if there are many owned sequences. * Fix contrib/dblink's dblink_exec() to not leak temporary database connections upon error (Tom Lane) * Update time zone data files to tzdata release 2012c for DST law changes in Antarctica, Armenia, Chile, Cuba, Falkland Islands, Gaza, Haiti, Hebron, Morocco, Syria, and Tokelau Islands; also historical corrections for Canada. --- Module Name: pkgsrc Committed By: morr Date: Sun Jul 1 19:21:14 UTC 2012 Modified Files: pkgsrc/databases/postgresql83: Makefile pkgsrc/databases/postgresql83-adminpack: Makefile pkgsrc/databases/postgresql83-client: Makefile pkgsrc/databases/postgresql83-plperl: Makefile pkgsrc/databases/postgresql83-pltcl: Makefile pkgsrc/databases/postgresql83-server: Makefile pkgsrc/databases/postgresql83-uuid: Makefile Log Message: Remove PKGREVISION
Revision 1.19 / (download) - annotate - [select for diffs], Sun Jul 1 19:21:14 2012 UTC (11 years, 9 months ago) by morr
Branch: MAIN
Changes since 1.18: +1 -2
lines
Diff to previous 1.18 (colored) to selected 1.1.1.1 (colored)
Remove PKGREVISION
Revision 1.18 / (download) - annotate - [select for diffs], Thu Jun 14 07:45:38 2012 UTC (11 years, 10 months ago) by sbd
Branch: MAIN
CVS Tags: pkgsrc-2012Q2-base
Branch point for: pkgsrc-2012Q2
Changes since 1.17: +2 -1
lines
Diff to previous 1.17 (colored) to selected 1.1.1.1 (colored)
Recursive PKGREVISION bump for libxml2 buildlink addition.
Revision 1.17 / (download) - annotate - [select for diffs], Fri Apr 22 13:50:39 2011 UTC (13 years ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2012Q1-base,
pkgsrc-2012Q1,
pkgsrc-2011Q4-base,
pkgsrc-2011Q4,
pkgsrc-2011Q3-base,
pkgsrc-2011Q3,
pkgsrc-2011Q2-base,
pkgsrc-2011Q2
Changes since 1.16: +1 -2
lines
Diff to previous 1.16 (colored) to selected 1.1.1.1 (colored)
Changes 8.3.15: * fix build issues on HP-UX and Itanium * update time zone files for recent time zone changes * change SQLSTATE for Hot Standby warnings * prevent bgwriter hang during recovery * prevent recursive composite type creation * disallow dropping tables whose triggers are still pending * allow use of "replication" as a user name * prevent a crash during GEQO planning * improve join plans for tables with missing statistics * fix error with SELECT FOR UPDATE in a subselect * close PL/python array slice memory leak * allow SSL connections for users with no home directory
Revision 1.16 / (download) - annotate - [select for diffs], Fri Apr 22 13:43:14 2011 UTC (13 years ago) by obache
Branch: MAIN
Changes since 1.15: +2 -2
lines
Diff to previous 1.15 (colored) to selected 1.1.1.1 (colored)
recursive bump from gettext-lib shlib bump.
Revision 1.15 / (download) - annotate - [select for diffs], Sat Mar 5 14:24:33 2011 UTC (13 years, 1 month ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2011Q1-base,
pkgsrc-2011Q1
Changes since 1.14: +2 -1
lines
Diff to previous 1.14 (colored) to selected 1.1.1.1 (colored)
Bump PKGREVISION for pgsql.sh fix.
Revision 1.14 / (download) - annotate - [select for diffs], Tue Feb 15 09:06:33 2011 UTC (13 years, 2 months ago) by adam
Branch: MAIN
Changes since 1.13: +1 -5
lines
Diff to previous 1.13 (colored) to selected 1.1.1.1 (colored)
Changes 8.3.14: * Avoid failures when "EXPLAIN" tries to display a simple-form CASE expression. * Fix assignment to an array slice that is before the existing range of subscripts. * Avoid unexpected conversion overflow in planner for very distant date values. * Fix pg_restore's text output for large objects (BLOBs) when standard_conforming_strings is on. * Fix erroneous parsing of tsquery values containing ... & !(subexpression) | ... * Fix buffer overrun in "contrib/intarray"'s input function for the query_int type. * Fix bug in "contrib/seg"'s GiST picksplit algorithm.
Revision 1.13 / (download) - annotate - [select for diffs], Sun Dec 19 09:53:54 2010 UTC (13 years, 4 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2010Q4-base,
pkgsrc-2010Q4
Changes since 1.12: +11 -20
lines
Diff to previous 1.12 (colored) to selected 1.1.1.1 (colored)
Changes 8.3.13: * Force the default wal_sync_method to be fdatasync on Linux * Fix assorted bugs in WAL replay logic for GIN indexes * Fix recovery from base backup when the starting checkpoint WAL record is not in the same WAL segment as its redo point * Fix persistent slowdown of autovacuum workers when multiple workers remain active for a long time * Add support for detecting register-stack overrun on IA64 * Add a check for stack overflow in copyObject() * Fix detection of page splits in temporary GiST indexes * Avoid memory leakage while "ANALYZE"'ing complex index expressions * Ensure an index that uses a whole-row Var still depends on its table * Do not "inline" a SQL function with multiple OUT parameters * Behave correctly if ORDER BY, LIMIT, FOR UPDATE, or WITH is attached to the VALUES part of INSERT ... VALUES * Fix constant-folding of COALESCE() expressions * Fix postmaster crash when connection acceptance (accept() or one of the calls made immediately after it) fails, and the postmaster was compiled with GSSAPI support * Fix missed unlink of temporary files when log_temp_files is active * Add print functionality for InhRelation nodes * Fix incorrect calculation of distance from a point to a horizontal line segment * Fix PL/pgSQL's handling of "simple" expressions to not fail in recursion or error-recovery cases * Fix PL/Python's handling of set-returning functions * Fix bug in "contrib/cube"'s GiST picksplit algorithm * Don't emit "identifier will be truncated" notices in "contrib/dblink" except when creating new connections * Fix potential coredump on missing public key in "contrib/pgcrypto" * Fix memory leak in "contrib/xml2"'s XPath query functions * Update time zone data files to tzdata release 2010o for DST law changes in Fiji and Samoa; also historical corrections for Hong Kong.
Revision 1.12 / (download) - annotate - [select for diffs], Wed Nov 3 14:36:40 2010 UTC (13 years, 5 months ago) by adam
Branch: MAIN
Changes since 1.11: +1 -5
lines
Diff to previous 1.11 (colored) to selected 1.1.1.1 (colored)
Unified PostgreSQL client and server options
Revision 1.10.2.1 / (download) - annotate - [select for diffs], Wed May 12 21:20:06 2010 UTC (13 years, 11 months ago) by tron
Branch: pkgsrc-2010Q1
Changes since 1.10: +1 -6
lines
Diff to previous 1.10 (colored) next main 1.11 (colored) to selected 1.1.1.1 (colored)
Pullup ticket #3113 - requested by spz: databases/postgresql82: security update databases/postgresql82-adminpack: security update databases/postgresql82-client: security update databases/postgresql82-plperl: security update databases/postgresql82-plpython: security update databases/postgresql82-pltcl: security update databases/postgresql82-server: security update databases/postgresql82-tsearch2: security update databases/postgresql83: security update databases/postgresql83-adminpack: security update databases/postgresql83-client: security update databases/postgresql83-plperl: security update databases/postgresql83-plpython: security update databases/postgresql83-pltcl: security update databases/postgresql83-server: security update databases/postgresql84: security update databases/postgresql84-adminpack: security update databases/postgresql84-client: security update databases/postgresql84-plperl: security update databases/postgresql84-plpython: security update databases/postgresql84-pltcl: security update databases/postgresql84-server: security update databases/postgresql82: security update databases/postgresql83: security update databases/postgresql84: security update Revisions pulled up: - databases/postgresql82-adminpack/Makefile 1.8 - databases/postgresql82-client/Makefile 1.13 - databases/postgresql82-client/PLIST 1.18 - databases/postgresql82-plperl/Makefile 1.10 - databases/postgresql82-plpython/Makefile 1.10 - databases/postgresql82-pltcl/Makefile 1.7 - databases/postgresql82-server/Makefile 1.11 - databases/postgresql82-server/PLIST 1.12 - databases/postgresql82-tsearch2/Makefile 1.8 - databases/postgresql82/Makefile.common 1.19-1.20 - databases/postgresql82/distinfo 1.19 - databases/postgresql82/patches/patch-ad delete - databases/postgresql82/patches/patch-ae delete - databases/postgresql83-adminpack/Makefile 1.4 - databases/postgresql83-client/Makefile 1.13-1.14 - databases/postgresql83-client/PLIST 1.12 - databases/postgresql83-plperl/Makefile 1.6 - databases/postgresql83-plpython/Makefile 1.7 - databases/postgresql83-pltcl/Makefile 1.4 - databases/postgresql83-server/Makefile 1.11 - databases/postgresql83-server/PLIST 1.10 - databases/postgresql83/Makefile.common 1.10-1.11 - databases/postgresql83/distinfo 1.11 - databases/postgresql83/patches/patch-ad delete - databases/postgresql83/patches/patch-ae delete - databases/postgresql84-adminpack/Makefile 1.3 - databases/postgresql84-client/Makefile 1.6-1.7 - databases/postgresql84-client/PLIST 1.5 - databases/postgresql84-plperl/Makefile 1.3 - databases/postgresql84-plpython/Makefile 1.4 - databases/postgresql84-pltcl/Makefile 1.3 - databases/postgresql84-server/Makefile 1.7 - databases/postgresql84-server/PLIST 1.4 - databases/postgresql84/Makefile.common 1.4-1.5 - databases/postgresql84/distinfo 1.4 - databases/postgresql84/patches/patch-ad delete - databases/postgresql84/patches/patch-ae delete - databases/postgresql84/patches/patch-ai 1.2 --- Module Name: pkgsrc Committed By: adam Date: Mon Apr 12 09:58:39 UTC 2010 Modified Files: pkgsrc/databases/postgresql84: Makefile.common distinfo pkgsrc/databases/postgresql84-adminpack: Makefile pkgsrc/databases/postgresql84-client: Makefile pkgsrc/databases/postgresql84-plperl: Makefile pkgsrc/databases/postgresql84-plpython: Makefile pkgsrc/databases/postgresql84-pltcl: Makefile pkgsrc/databases/postgresql84-server: Makefile PLIST pkgsrc/databases/postgresql84/patches: patch-ai Removed Files: pkgsrc/databases/postgresql84/patches: patch-ad patch-ae Log Message: Changes 8.4.3: * Add new configuration parameter ssl_renegotiation_limit to control how often we do session key renegotiation for an SSL connection * Fix possible deadlock during backend startup * Fix possible crashes due to not handling errors during relcache reload cleanly * Fix possible crash due to use of dangling pointer to a cached plan * Fix possible crash due to overenthusiastic invalidation of cached plan for "ROLLBACK" * Fix possible crashes when trying to recover from a failure in subtransaction start * Fix server memory leak associated with use of savepoints and a client encoding different from server's encoding * Fix incorrect WAL data emitted during end-of-recovery cleanup of a GIST index page split * Fix bug in WAL redo cleanup method for GIN indexes * Fix incorrect comparison of scan key in GIN index search * Make substring() for bit types treat any negative length as meaning "all the rest of the string" The previous coding treated only -1 that way, and would produce an invalid result value for other negative values, possibly leading to a crash (CVE-2010-0442). * Fix integer-to-bit-string conversions to handle the first fractional byte correctly when the output bit width is wider than the given integer by something other than a multiple of 8 bits * Fix some cases of pathologically slow regular expression matching * Fix bug occurring when trying to inline a SQL function that returns a set of a composite type that contains dropped columns * Fix bug with trying to update a field of an element of a composite-type array column * Avoid failure when "EXPLAIN" has to print a FieldStore or assignment ArrayRef expression These cases can arise now that "EXPLAIN VERBOSE" tries to print plan node target lists. * Avoid an unnecessary coercion failure in some cases where an undecorated literal string appears in a subquery within "UNION"/"INTERSECT"/"EXCEPT" This fixes a regression for some cases that worked before 8.4. * Avoid undesirable rowtype compatibility check failures in some cases where a whole-row Var has a rowtype that contains dropped columns * Fix the STOP WAL LOCATION entry in backup history files to report the next WAL segment's name when the end location is exactly at a segment boundary * Always pass the catalog ID to an option validator function specified in "CREATE FOREIGN DATA WRAPPER" * Fix some more cases of temporary-file leakage * Add support for doing FULL JOIN ON FALSE * Improve constraint exclusion processing of boolean-variable cases, in particular make it possible to exclude a partition that has a "bool_column = false" constraint * Prevent treating an INOUT cast as representing binary compatibility * Include column name in the message when warning about inability to grant or revoke column-level privileges This is more useful than before and helps to prevent confusion when a "REVOKE" generates multiple messages, which formerly appeared to be duplicates. * When reading "pg_hba.conf" and related files, do not treat @something as a file inclusion request if the @ appears inside quote marks; also, never treat @ by itself as a file inclusion request * Prevent infinite loop on some platforms if a directory is named as an inclusion target in "pg_hba.conf" and related files * Fix possible infinite loop if SSL_read or SSL_write fails without setting errno This is reportedly possible with some Windows versions of openssl. * Disallow GSSAPI authentication on local connections, since it requires a hostname to function correctly * Protect ecpg against applications freeing strings unexpectedly * Make ecpg report the proper SQLSTATE if the connection disappears * Fix translation of cell contents in psql \d output * Fix psql's numericlocale option to not format strings it shouldn't in latex and troff output formats * Fix a small per-query memory leak in psql * Make psql return the correct exit status (3) when ON_ERROR_STOP and --single-transaction are both specified and an error occurs during the implied "COMMIT" * Fix pg_dump's output of permissions for foreign servers * Fix possible crash in parallel pg_restore due to out-of-range dependency IDs * Fix plpgsql failure in one case where a composite column is set to NULL * Fix possible failure when calling PL/Perl functions from PL/PerlU or vice versa * Add volatile markings in PL/Python to avoid possible compiler-specific misbehavior * Ensure PL/Tcl initializes the Tcl interpreter fully The only known symptom of this oversight is that the Tcl clock command misbehaves if using Tcl 8.5 or later. * Prevent ExecutorEnd from being run on portals created within a failed transaction or subtransaction This is known to cause issues when using "contrib/auto_explain". * Prevent crash in "contrib/dblink" when too many key columns are specified to a dblink_build_sql_* function * Allow zero-dimensional arrays in "contrib/ltree" operations * Fix assorted crashes in "contrib/xml2" caused by sloppy memory management * Make building of "contrib/xml2" more robust on Windows * Fix race condition in Windows signal handling One known symptom of this bug is that rows in pg_listener could be dropped under heavy load. * Make the configure script report failure if the C compiler does not provide a working 64-bit integer datatype This case has been broken for some time, and no longer seems worth supporting, so just reject it at configure time instead. * Update time zone data files to tzdata release 2010e for DST law changes in Bangladesh, Chile, Fiji, Mexico, Paraguay, Samoa. --- Module Name: pkgsrc Committed By: taca Date: Thu Apr 15 03:25:25 UTC 2010 Modified Files: pkgsrc/databases/postgresql84-client: Makefile PLIST Log Message: Add missing some documentation files to PLIST. Bump PKGREVISION. --- Module Name: pkgsrc Committed By: adam Date: Mon Apr 12 09:53:50 UTC 2010 Modified Files: pkgsrc/databases/postgresql83: Makefile.common distinfo pkgsrc/databases/postgresql83-adminpack: Makefile pkgsrc/databases/postgresql83-client: Makefile pkgsrc/databases/postgresql83-plperl: Makefile pkgsrc/databases/postgresql83-plpython: Makefile pkgsrc/databases/postgresql83-pltcl: Makefile pkgsrc/databases/postgresql83-server: Makefile PLIST Removed Files: pkgsrc/databases/postgresql83/patches: patch-ad patch-ae Log Message: Changes 8.3.10: * Add new configuration parameter ssl_renegotiation_limit to control how often we do session key renegotiation for an SSL connection * Fix possible deadlock during backend startup * Fix possible crashes due to not handling errors during relcache reload cleanly * Fix possible crash due to use of dangling pointer to a cached plan * Fix possible crashes when trying to recover from a failure in subtransaction start * Fix server memory leak associated with use of savepoints and a client encoding different from server's encoding * Fix incorrect WAL data emitted during end-of-recovery cleanup of a GIST index page split * Make substring() for bit types treat any negative length as meaning "all the rest of the string" The previous coding treated only -1 that way, and would produce an invalid result value for other negative values, possibly leading to a crash (CVE-2010-0442). * Fix integer-to-bit-string conversions to handle the first fractional byte correctly when the output bit width is wider than the given integer by something other than a multiple of 8 bits * Fix some cases of pathologically slow regular expression matching * Fix assorted crashes in xml processing caused by sloppy memory management * Fix bug with trying to update a field of an element of a composite-type array column * Fix the STOP WAL LOCATION entry in backup history files to report the next WAL segment's name when the end location is exactly at a segment boundary * Fix some more cases of temporary-file leakage This corrects a problem introduced in the previous minor release. One case that failed is when a plpgsql function returning set is called within another function's exception handler. * Improve constraint exclusion processing of boolean-variable cases, in particular make it possible to exclude a partition that has a "bool_column = false" constraint * When reading "pg_hba.conf" and related files, do not treat @something as a file inclusion request if the @ appears inside quote marks; also, never treat @ by itself as a file inclusion request * Prevent infinite loop on some platforms if a directory is named as an inclusion target in "pg_hba.conf" and related files * Fix possible infinite loop if SSL_read or SSL_write fails without setting errno This is reportedly possible with some Windows versions of openssl. * Disallow GSSAPI authentication on local connections, since it requires a hostname to function correctly * Make ecpg report the proper SQLSTATE if the connection disappears * Fix psql's numericlocale option to not format strings it shouldn't in latex and troff output formats * Make psql return the correct exit status (3) when ON_ERROR_STOP and --single-transaction are both specified and an error occurs during the implied "COMMIT" * Fix plpgsql failure in one case where a composite column is set to NULL * Fix possible failure when calling PL/Perl functions from PL/PerlU or vice versa * Add volatile markings in PL/Python to avoid possible compiler-specific misbehavior * Ensure PL/Tcl initializes the Tcl interpreter fully The only known symptom of this oversight is that the Tcl clock command misbehaves if using Tcl 8.5 or later. * Prevent crash in "contrib/dblink" when too many key columns are specified to a dblink_build_sql_* function * Allow zero-dimensional arrays in "contrib/ltree" operations * Fix assorted crashes in "contrib/xml2" caused by sloppy memory management * Make building of "contrib/xml2" more robust on Windows * Fix race condition in Windows signal handling One known symptom of this bug is that rows in pg_listener could be dropped under heavy load. * Update time zone data files to tzdata release 2010e for DST law changes in Bangladesh, Chile, Fiji, Mexico, Paraguay, Samoa. --- Module Name: pkgsrc Committed By: taca Date: Thu Apr 15 03:25:05 UTC 2010 Modified Files: pkgsrc/databases/postgresql83-client: Makefile PLIST Log Message: Add missing some documentation files to PLIST. Bump PKGREVISION. --- Module Name: pkgsrc Committed By: adam Date: Mon Apr 12 09:48:49 UTC 2010 Modified Files: pkgsrc/databases/postgresql82: Makefile.common distinfo pkgsrc/databases/postgresql82-adminpack: Makefile pkgsrc/databases/postgresql82-client: Makefile PLIST pkgsrc/databases/postgresql82-plperl: Makefile pkgsrc/databases/postgresql82-plpython: Makefile pkgsrc/databases/postgresql82-pltcl: Makefile pkgsrc/databases/postgresql82-server: Makefile PLIST pkgsrc/databases/postgresql82-tsearch2: Makefile Removed Files: pkgsrc/databases/postgresql82/patches: patch-ad patch-ae Log Message: Changes 8.2.16: * Add new configuration parameter ssl_renegotiation_limit to control how often we do session key renegotiation for an SSL connection * Fix possible deadlock during backend startup * Fix possible crashes due to not handling errors during relcache reload cleanly * Fix possible crashes when trying to recover from a failure in subtransaction start * Fix server memory leak associated with use of savepoints and a client encoding different from server's encoding * Fix incorrect WAL data emitted during end-of-recovery cleanup of a GIST index page split * Make substring() for bit types treat any negative length as meaning "all the rest of the string" The previous coding treated only -1 that way, and would produce an invalid result value for other negative values, possibly leading to a crash (CVE-2010-0442). * Fix integer-to-bit-string conversions to handle the first fractional byte correctly when the output bit width is wider than the given integer by something other than a multiple of 8 bits * Fix some cases of pathologically slow regular expression matching * Fix the STOP WAL LOCATION entry in backup history files to report the next WAL segment's name when the end location is exactly at a segment boundary * Fix some more cases of temporary-file leakage * Improve constraint exclusion processing of boolean-variable cases, in particular make it possible to exclude a partition that has a "bool_column = false" constraint * When reading "pg_hba.conf" and related files, do not treat @something as a file inclusion request if the @ appears inside quote marks; also, never treat @ by itself as a file inclusion request * Prevent infinite loop on some platforms if a directory is named as an inclusion target in "pg_hba.conf" and related files * Fix possible infinite loop if SSL_read or SSL_write fails without setting errno This is reportedly possible with some Windows versions of openssl. * Fix psql's numericlocale option to not format strings it shouldn't in latex and troff output formats * Make psql return the correct exit status (3) when ON_ERROR_STOP and --single-transaction are both specified and an error occurs during the implied "COMMIT" * Fix plpgsql failure in one case where a composite column is set to NULL * Fix possible failure when calling PL/Perl functions from PL/PerlU or vice versa * Add volatile markings in PL/Python to avoid possible compiler-specific misbehavior * Ensure PL/Tcl initializes the Tcl interpreter fully The only known symptom of this oversight is that the Tcl clock command misbehaves if using Tcl 8.5 or later. * Prevent crash in "contrib/dblink" when too many key columns are specified to a dblink_build_sql_* function * Fix assorted crashes in "contrib/xml2" caused by sloppy memory management * Make building of "contrib/xml2" more robust on Windows * Fix race condition in Windows signal handling One known symptom of this bug is that rows in pg_listener could be dropped under heavy load. * Update time zone data files to tzdata release 2010e for DST law changes in Bangladesh, Chile, Fiji, Mexico, Paraguay, Samoa. --- Module Name: pkgsrc Committed By: adam Date: Fri Apr 23 16:03:24 UTC 2010 Modified Files: pkgsrc/databases/postgresql82: Makefile.common pkgsrc/databases/postgresql83: Makefile.common pkgsrc/databases/postgresql84: Makefile.common Log Message: Fixed meta package building
Revision 1.11 / (download) - annotate - [select for diffs], Mon Apr 12 09:53:50 2010 UTC (14 years ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2010Q3-base,
pkgsrc-2010Q3,
pkgsrc-2010Q2-base,
pkgsrc-2010Q2
Changes since 1.10: +1 -6
lines
Diff to previous 1.10 (colored) to selected 1.1.1.1 (colored)
Changes 8.3.10: * Add new configuration parameter ssl_renegotiation_limit to control how often we do session key renegotiation for an SSL connection * Fix possible deadlock during backend startup * Fix possible crashes due to not handling errors during relcache reload cleanly * Fix possible crash due to use of dangling pointer to a cached plan * Fix possible crashes when trying to recover from a failure in subtransaction start * Fix server memory leak associated with use of savepoints and a client encoding different from server's encoding * Fix incorrect WAL data emitted during end-of-recovery cleanup of a GIST index page split * Make substring() for bit types treat any negative length as meaning "all the rest of the string" The previous coding treated only -1 that way, and would produce an invalid result value for other negative values, possibly leading to a crash (CVE-2010-0442). * Fix integer-to-bit-string conversions to handle the first fractional byte correctly when the output bit width is wider than the given integer by something other than a multiple of 8 bits * Fix some cases of pathologically slow regular expression matching * Fix assorted crashes in xml processing caused by sloppy memory management * Fix bug with trying to update a field of an element of a composite-type array column * Fix the STOP WAL LOCATION entry in backup history files to report the next WAL segment's name when the end location is exactly at a segment boundary * Fix some more cases of temporary-file leakage This corrects a problem introduced in the previous minor release. One case that failed is when a plpgsql function returning set is called within another function's exception handler. * Improve constraint exclusion processing of boolean-variable cases, in particular make it possible to exclude a partition that has a "bool_column = false" constraint * When reading "pg_hba.conf" and related files, do not treat @something as a file inclusion request if the @ appears inside quote marks; also, never treat @ by itself as a file inclusion request * Prevent infinite loop on some platforms if a directory is named as an inclusion target in "pg_hba.conf" and related files * Fix possible infinite loop if SSL_read or SSL_write fails without setting errno This is reportedly possible with some Windows versions of openssl. * Disallow GSSAPI authentication on local connections, since it requires a hostname to function correctly * Make ecpg report the proper SQLSTATE if the connection disappears * Fix psql's numericlocale option to not format strings it shouldn't in latex and troff output formats * Make psql return the correct exit status (3) when ON_ERROR_STOP and --single-transaction are both specified and an error occurs during the implied "COMMIT" * Fix plpgsql failure in one case where a composite column is set to NULL * Fix possible failure when calling PL/Perl functions from PL/PerlU or vice versa * Add volatile markings in PL/Python to avoid possible compiler-specific misbehavior * Ensure PL/Tcl initializes the Tcl interpreter fully The only known symptom of this oversight is that the Tcl clock command misbehaves if using Tcl 8.5 or later. * Prevent crash in "contrib/dblink" when too many key columns are specified to a dblink_build_sql_* function * Allow zero-dimensional arrays in "contrib/ltree" operations * Fix assorted crashes in "contrib/xml2" caused by sloppy memory management * Make building of "contrib/xml2" more robust on Windows * Fix race condition in Windows signal handling One known symptom of this bug is that rows in pg_listener could be dropped under heavy load. * Update time zone data files to tzdata release 2010e for DST law changes in Bangladesh, Chile, Fiji, Mexico, Paraguay, Samoa.
Revision 1.10 / (download) - annotate - [select for diffs], Fri Jan 22 20:12:11 2010 UTC (14 years, 2 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2010Q1-base
Branch point for: pkgsrc-2010Q1
Changes since 1.9: +3 -3
lines
Diff to previous 1.9 (colored) to selected 1.1.1.1 (colored)
Added support for gssapi and krb5 authentication as options
Revision 1.9 / (download) - annotate - [select for diffs], Thu Jan 21 12:45:28 2010 UTC (14 years, 3 months ago) by adam
Branch: MAIN
Changes since 1.8: +2 -2
lines
Diff to previous 1.8 (colored) to selected 1.1.1.1 (colored)
Changes 8.3.9nb2: * Make pgxs.mk and Makefile.shlib compatible with PostgreSQL 8.4.x * Ready for PostGIS
Revision 1.8 / (download) - annotate - [select for diffs], Sun Jan 17 12:02:11 2010 UTC (14 years, 3 months ago) by wiz
Branch: MAIN
Changes since 1.7: +2 -1
lines
Diff to previous 1.7 (colored) to selected 1.1.1.1 (colored)
Recursive PKGREVISION bump for jpeg update to 8.
Revision 1.7 / (download) - annotate - [select for diffs], Sat Jan 16 09:30:32 2010 UTC (14 years, 3 months ago) by adam
Branch: MAIN
Changes since 1.6: +2 -2
lines
Diff to previous 1.6 (colored) to selected 1.1.1.1 (colored)
Added LDAP authentication as an option
Revision 1.6 / (download) - annotate - [select for diffs], Wed Dec 16 14:23:13 2009 UTC (14 years, 4 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2009Q4-base,
pkgsrc-2009Q4
Changes since 1.5: +1 -2
lines
Diff to previous 1.5 (colored) to selected 1.1.1.1 (colored)
Changes 8.3.9: * Protect against indirect security threats caused by index functions changing session-local state * Reject SSL certificates containing an embedded null byte in the common name (CN) field * Fix possible crash during backend-startup-time cache initialization * Avoid crash on empty thesaurus dictionary * Prevent signals from interrupting VACUUM at unsafe times * Fix possible crash due to integer overflow in hash table size calculation * Fix very rare crash in inet/cidr comparisons * Ensure that shared tuple-level locks held by prepared transactions are not ignored * Fix premature drop of temporary files used for a cursor that is accessed within a subtransaction * Fix memory leak in syslogger process when rotating to a new CSV logfile * Fix Windows permission-downgrade logic * Fix incorrect logic for GiST index page splits, when the split depends on a non-first column of the index * Don't error out if recycling or removing an old WAL file fails at the end of checkpoint * Ensure WAL files aren't repeatedly archived on Windows * Fix PAM password processing to be more robust * Raise the maximum authentication token (Kerberos ticket) size in GSSAPI and SSPI authentication methods * More...
Revision 1.5 / (download) - annotate - [select for diffs], Tue Dec 15 21:33:48 2009 UTC (14 years, 4 months ago) by joerg
Branch: MAIN
Changes since 1.4: +2 -1
lines
Diff to previous 1.4 (colored) to selected 1.1.1.1 (colored)
Recursive bump for libltdl
Revision 1.4 / (download) - annotate - [select for diffs], Sat May 16 07:22:02 2009 UTC (14 years, 11 months ago) by rillig
Branch: MAIN
CVS Tags: pkgsrc-2009Q3-base,
pkgsrc-2009Q3,
pkgsrc-2009Q2-base,
pkgsrc-2009Q2
Changes since 1.3: +4 -4
lines
Diff to previous 1.3 (colored) to selected 1.1.1.1 (colored)
cleanup: replaced _PKG_SILENT and _PKG_DEBUG with RUN.
Revision 1.3 / (download) - annotate - [select for diffs], Sat Feb 7 17:55:42 2009 UTC (15 years, 2 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2009Q1-base,
pkgsrc-2009Q1
Changes since 1.2: +1 -2
lines
Diff to previous 1.2 (colored) to selected 1.1.1.1 (colored)
Changes 8.3.6: * Make "DISCARD ALL" release advisory locks, in addition to everything it already did This was decided to be the most appropriate behavior. This could affect existing applications, however. * Fix whole-index GiST scans to work correctly This error could cause rows to be lost if a table is clustered on a GiST index. * Fix crash of xmlconcat(NULL) * Fix possible crash in ispell dictionary if high-bit-set characters are used as flags This is known to be done by one widely available Norwegian dictionary, and the same condition may exist in others. * Fix misordering of pg_dump output for composite types The most likely problem was for user-defined operator classes to be dumped after indexes or views that needed them. * Improve handling of URLs in headline() function * Improve handling of overlength headlines in headline() function * Prevent possible Assert failure or misconversion if an encoding conversion is created with the wrong conversion function for the specified pair of encodings * Fix possible Assert failure if a statement executed in PL/pgSQL is rewritten into another kind of statement, for example if an "INSERT" is rewritten into an "UPDATE" * Ensure that a snapshot is available to datatype input functions * Make it safer for SPI-using functions to be used within datatype I/O; in particular, to be used in domain check constraints * Avoid unnecessary locking of small tables in "VACUUM" * Fix a problem that sometimes kept "ALTER TABLE ENABLE/DISABLE RULE" from being recognized by active sessions * Fix a problem that made UPDATE RETURNING tableoid return zero instead of the correct OID * Allow functions declared as taking ANYARRAY to work on the pg_statistic columns of that type This used to work, but was unintentionally broken in 8.3. * Fix planner misestimation of selectivity when transitive equality is applied to an outer-join clause This could result in bad plans for queries like ... from a left join b on a.a1 = b.b1 where a.a1 = 42 ... * Improve optimizer's handling of long IN lists This change avoids wasting large amounts of time on such lists when constraint exclusion is enabled. * Prevent synchronous scan during GIN index build Because GIN is optimized for inserting tuples in increasing TID order, choosing to use a synchronous scan could slow the build by a factor of three or more. * Ensure that the contents of a holdable cursor don't depend on the contents of TOAST tables * Fix memory leak when a set-returning function is terminated without reading its whole result * Fix encoding conversion problems in XML functions when the database encoding isn't UTF-8 * Fix "contrib/dblink"'s dblink_get_result(text,bool) function * Fix possible garbage output from "contrib/sslinfo" functions * Fix incorrect behavior of "contrib/tsearch2" compatibility trigger when it's fired more than once in a command * Fix possible mis-signaling in autovacuum * Support running as a service on Windows 7 beta * Fix ecpg's handling of varchar structs * Fix configure script to properly report failure when unable to obtain linkage information for PL/Perl * Make all documentation reference pgsql-bugs and/or pgsql-hackers as appropriate, instead of the now-decommissioned pgsql-ports and pgsql-patches mailing lists * Update time zone data files to tzdata release 2009a (for Kathmandu and historical DST corrections in Switzerland, Cuba)
Revision 1.2 / (download) - annotate - [select for diffs], Tue Nov 11 13:50:50 2008 UTC (15 years, 5 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2008Q4-base,
pkgsrc-2008Q4
Changes since 1.1: +2 -1
lines
Diff to previous 1.1 (colored) to selected 1.1.1.1 (colored)
Change to root before start/stop/initdb to make sure that the cwd can be read by the postgres user. Bump revision.
Revision 1.1.1.1 / (download) - annotate - [selected] (vendor branch), Tue Mar 4 12:43:44 2008 UTC (16 years, 1 month ago) by adam
Branch: TNF
CVS Tags: pkgsrc-base,
pkgsrc-2008Q3-base,
pkgsrc-2008Q3,
pkgsrc-2008Q2-base,
pkgsrc-2008Q2,
pkgsrc-2008Q1-base,
pkgsrc-2008Q1,
cwrapper,
cube-native-xorg-base,
cube-native-xorg
Changes since 1.1: +0 -0
lines
Diff to previous 1.1 (colored)
PostgreSQL 8.3 With significant new functionality and performance enhancements, this release represents a major leap forward for PostgreSQL. This was made possible by a growing community that has dramatically accelerated the pace of development. This release adds the following major features: * Full text search is integrated into the core database system * Support for the SQL/XML standard, including new operators and an XML data type * Enumerated data types (ENUM) * Arrays of composite types * Universally Unique Identifier (UUID) data type * Add control over whether NULLs sort first or last * Updatable cursors * Server configuration parameters can now be set on a per-function basis * User-defined types can now have type modifiers * Automatically re-plan cached queries when table definitions change or statistics are updated * Numerous improvements in logging and statistics collection * Support Security Service Provider Interface (SSPI) for authentication on Windows * Support multiple concurrent autovacuum processes, and other autovacuum improvements * Allow the whole PostgreSQL distribution to be compiled with Microsoft Visual C++
Revision 1.1 / (download) - annotate - [select for diffs], Tue Mar 4 12:43:44 2008 UTC (16 years, 1 month ago) by adam
Branch: MAIN
Diff to selected 1.1.1.1 (colored)
Initial revision