postgresql: security bump to version 9.4.5
Fixes: CVE-2015-5289: json or jsonb input values constructed from arbitrary user input can crash the PostgreSQL server and cause a denial of service. CVE-2015-5288: The crypt() function included with the optional pgCrypto extension could be exploited to read a few additional bytes of memory. No working exploit for this issue has been developed. sparc build fix patch upstream so drop it. Signed-off-by:Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by:
Vicente Olivert Riera <Vincent.Riera@imgtec.com> Tested-by:
Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by:
Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Loading
Please register or sign in to comment