linux/meta-openembedded.git/meta-oe/recipes-support/postgresql/postgresql.inc, branch krogoth-next

meta-oe: use bb.utils.contains() instead of base_contains()

2016-05-02T21:03:03+00:00

base_contains() is a compatibility wrapper and may warn in the future, so replace all instances with bb.utils.contains(). Signed-off-by: Ross Burton Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

postgresql: Security Advisory-postgresql-CVE-2016-0773

2016-03-25T10:26:55+00:00

add CVE-2016-0773 patch for avoiding attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression. Patch comes from: http://git.postgresql.org/gitweb/?p=postgresql.git;a=summary commit 3bb3f42f3749d40b8d4de65871e8d828b18d4a45 Signed-off-by: Zhixiong Chi Signed-off-by: Martin Jansa

postgresql: Security Advisory-postgresql-CVE-2016-0766

2016-03-14T11:15:37+00:00

add CVE-2016-0766 patch for avoiding attackers to gain privileges via unspecified vectors. Patch comes from: http://git.postgresql.org/gitweb/?p=postgresql.git;a=summary commit f4aa3a18a20d51575562520754aa376b3b08b2d0 Signed-off-by: Zhixiong Chi Signed-off-by: Martin Jansa

postgresql: Don't symlink to perl if it's disabled

2015-12-18T11:42:08+00:00

Don't create a symlink to libperl.so if perl isn't in PACKAGECONFIG. Attempting to do so will fail if perl hasn't been built. Signed-off-by: George McCollister Signed-off-by: Martin Jansa

postgresql.inc: fix indentation to use 4 spaces

2015-09-23T13:34:26+00:00

* like rest of meta-oe and other sane layers * never mix tabs and spaces (especially on the same line) Signed-off-by: Martin Jansa

postgresql: set the tclsh as target path

2015-09-23T13:34:25+00:00

The tclsh path in pltcl_listmod is set to sysroot, which causes pltcl_listmod to fails to run on target, so fix the path to /usr/bin/tclsh. $ pltcl_listmod /usr/bin/pltcl_listmod: line 5: /buildarea1/WRLinux70-STD-0825/bitbake_build/tmp/sysroots/x86_64-linux/usr/bin/tclsh: No such file or directory $ Signed-off-by: Yue Tao Signed-off-by: Roy Li Signed-off-by: Martin Jansa

postgresql: Add explict getVar expansion parameter

2015-07-30T19:00:27+00:00

Bitbake is likely to require this parameter in future, add the default value. Patch generated with the command: sed -e 's:$getVar([^,()]*$\s*):\1, False):g' -i `grep -ril getVar *` Signed-off-by: Richard Purdie Signed-off-by: Martin Jansa

postgresql: upgrade to 9.4.2

2015-06-23T10:40:10+00:00

1. remove Backport patches 2. Update the checksume, include CopyRight file, since date in it is changed 3. remove --without-krb5 configure options, since it become useless 4. Update remove.autoconf.version.check.patch 5. skip to check libperl Signed-off-by: Roy Li Signed-off-by: Martin Jansa

postgresql: add fix for CVE-2014-0065 and CVE-2014-0066 Security Advisory

2014-11-07T14:05:45+00:00

Coverity identified a number of places in which it couldn't prove that a string being copied into a fixed-size buffer would fit. We believe that most, perhaps all of these are in fact safe, or are copying data that is coming from a trusted source so that any overrun is not really a security issue. Nonetheless it seems prudent to forestall any risk by using strlcpy() and similar functions. Fixes by Peter Eisentraut and Jozef Mlich based on Coverity reports. In addition, fix a potential null-pointer-dereference crash in contrib/chkpass. The crypt(3) function is defined to return NULL on failure, but chkpass.c didn't check for that before using the result. The main practical case in which this could be an issue is if libc is configured to refuse to execute unapproved hashing algorithms (e.g., "FIPS mode"). This ideally should've been a separate commit, but since it touches code adjacent to one of the buffer overrun changes, I included it in this commit to avoid last-minute merge issues. This issue was reported by Honza Horak. Security: CVE-2014-0065 for buffer overruns, CVE-2014-0066 for crypt() https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0065 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0066 Signed-off-by: Yue Tao Signed-off-by: Kai Kang Signed-off-by: Martin Jansa

postgresql: add fix for CVE-2014-0067 Security Advisory

2014-11-07T14:05:45+00:00

The make check command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0067 Signed-off-by: Yue Tao Signed-off-by: Kai Kang Signed-off-by: Martin Jansa