Files
buildroot/package
Peter Korsgaard 2568bf88eb package/postgresql: security bump to version 11.3
Fixes the following security issues:

CVE-2019-10129: Memory disclosure in partition routing

Prior to this release, a user running PostgreSQL 11 can read arbitrary bytes
of server memory by executing a purpose-crafted INSERT statement to a
partitioned table.

CVE-2019-10130: Selectivity estimators bypass row security policies

PostgreSQL maintains statistics for tables by sampling data available in
columns; this data is consulted during the query planning process.  Prior to
this release, a user able to execute SQL queries with permissions to read a
given column could craft a leaky operator that could read whatever data had
been sampled from that column.  If this happened to include values from rows
that the user is forbidden to see by a row security policy, the user could
effectively bypass the policy.  This is fixed by only allowing a
non-leakproof operator to use this data if there are no relevant row
security policies for the table.

For more details, see the release notes:
https://www.postgresql.org/about/news/1939/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5ea93e24cb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-05-26 11:08:53 +02:00
..
2019-04-29 10:33:15 +02:00
2019-02-04 16:58:17 +01:00
2019-03-19 20:20:09 +01:00
2019-03-27 22:58:42 +01:00
2019-02-26 13:09:27 +01:00
2019-05-01 22:10:31 +02:00
2019-02-06 16:31:06 +01:00
2019-02-05 17:14:01 +01:00
2019-03-25 20:11:02 +01:00
2019-02-12 20:08:45 +01:00
2019-04-26 14:39:39 +02:00
2019-04-26 14:38:10 +02:00
2019-03-27 23:00:28 +01:00
2019-04-26 14:45:44 +02:00
2019-03-25 20:11:02 +01:00
2019-02-06 14:18:01 +01:00
2019-04-24 21:52:51 +02:00
2019-04-26 14:46:24 +02:00
2019-02-05 13:17:44 +01:00
2019-04-24 22:25:16 +02:00
2019-05-10 12:15:02 +02:00
2019-02-04 18:05:01 +01:00
2019-04-26 14:51:32 +02:00
2019-02-06 15:41:12 +01:00
2019-02-06 15:43:47 +01:00
2019-02-06 15:44:24 +01:00
2019-02-06 12:56:26 +01:00
2019-02-22 22:23:34 +01:00
2019-04-26 14:48:42 +02:00
2019-02-24 21:23:41 +01:00
2019-02-04 16:35:51 +01:00
2019-03-25 17:26:52 +01:00
2019-04-24 20:46:22 +02:00
2019-02-28 23:40:30 +01:00
2019-02-12 20:13:40 +01:00
2019-02-06 12:56:26 +01:00