kumquat-buildroot/package/postgresql/postgresql.hash

# From https://ftp.postgresql.org/pub/source/v12.4/postgresql-12.4.tar.bz2.md5
md5  80ebbf0e55193b123760e5f8e48c6cff  postgresql-12.4.tar.bz2
# From https://ftp.postgresql.org/pub/source/v12.4/postgresql-12.4.tar.bz2.sha256
sha256  bee93fbe2c32f59419cb162bcc0145c58da9a8644ee154a30b9a5ce47de606cc  postgresql-12.4.tar.bz2

# License file, Locally calculated
sha256  739e5d454d81d31a482469338b7c856f1f5c6b4cdda1551cea6f0f6d18eef62c  COPYRIGHT
package/postgresql: security bump to version 12.4 - Fix CVE-2020-14349: It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication. - Fix CVE-2020-14350: It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23. https://www.postgresql.org/docs/12/release-12-4.html Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-08-29 13:24:08 +02:00			`# From https://ftp.postgresql.org/pub/source/v12.4/postgresql-12.4.tar.bz2.md5`
			`md5 80ebbf0e55193b123760e5f8e48c6cff postgresql-12.4.tar.bz2`
			`# From https://ftp.postgresql.org/pub/source/v12.4/postgresql-12.4.tar.bz2.sha256`
			`sha256 bee93fbe2c32f59419cb162bcc0145c58da9a8644ee154a30b9a5ce47de606cc postgresql-12.4.tar.bz2`
postgresql: bump to 10.1 - Add a hash for the license file. - PostgreSQL 10.0 and above will default to checking for /dev/urandom if an SSL library is not found, which will fail when cross compiling. Since /dev/urandom is guaranteed to be provided on Linux systems, add ac_cv_file__dev_urandom=yes to the configure environment if a SSL library is not selected. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> [Thomas: minor tweaks to the /dev/urandom comment in the .mk file.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-11-25 18:12:14 +01:00
postgresql: security bump to version 9.6.6 Fixes the following security issues: CVE-2017-12172: Start scripts permit database administrator to modify root-owned files. CVE-2017-15098: Memory disclosure in JSON functions. CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges. See the announcement for more details: https://www.postgresql.org/about/news/1801/ While we're at it, also add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-11-11 11:44:56 +01:00			`# License file, Locally calculated`
package/postgresql: bump version to 12.3 Changelog: https://www.postgresql.org/about/news/2038/ Fixes CVE-2020-10733 which is only relevant for Windows. Reformatted hashes. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-05-14 18:14:36 +02:00			`sha256 739e5d454d81d31a482469338b7c856f1f5c6b4cdda1551cea6f0f6d18eef62c COPYRIGHT`