buildroot/package/postgresql/postgresql.hash

# From https://ftp.postgresql.org/pub/source/v12.5/postgresql-12.5.tar.bz2.md5
md5  f19e48090bbd59ea81826b5fd99e7e97  postgresql-12.5.tar.bz2
# From https://ftp.postgresql.org/pub/source/v12.5/postgresql-12.5.tar.bz2.sha256
sha256  bd0d25341d9578b5473c9506300022de26370879581f5fddd243a886ce79ff95  postgresql-12.5.tar.bz2

# License file, Locally calculated
sha256  739e5d454d81d31a482469338b7c856f1f5c6b4cdda1551cea6f0f6d18eef62c  COPYRIGHT
package/postgresql: security bump to version 12.5 Fix the following CVEs: - CVE-2020-25695: Multiple features escape "security restricted operation" sandbox - CVE-2020-25694: Reconnection can downgrade connection security settings - CVE-2020-25696: psql's \gset allows overwriting specially treated variables https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-11-15 18:51:03 +08:00			`# From https://ftp.postgresql.org/pub/source/v12.5/postgresql-12.5.tar.bz2.md5`
			`md5 f19e48090bbd59ea81826b5fd99e7e97 postgresql-12.5.tar.bz2`
			`# From https://ftp.postgresql.org/pub/source/v12.5/postgresql-12.5.tar.bz2.sha256`
			`sha256 bd0d25341d9578b5473c9506300022de26370879581f5fddd243a886ce79ff95 postgresql-12.5.tar.bz2`
postgresql: bump to 10.1 - Add a hash for the license file. - PostgreSQL 10.0 and above will default to checking for /dev/urandom if an SSL library is not found, which will fail when cross compiling. Since /dev/urandom is guaranteed to be provided on Linux systems, add ac_cv_file__dev_urandom=yes to the configure environment if a SSL library is not selected. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> [Thomas: minor tweaks to the /dev/urandom comment in the .mk file.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-11-26 01:12:14 +08:00
postgresql: security bump to version 9.6.6 Fixes the following security issues: CVE-2017-12172: Start scripts permit database administrator to modify root-owned files. CVE-2017-15098: Memory disclosure in JSON functions. CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges. See the announcement for more details: https://www.postgresql.org/about/news/1801/ While we're at it, also add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-11-11 18:44:56 +08:00			`# License file, Locally calculated`
package/postgresql: bump version to 12.3 Changelog: https://www.postgresql.org/about/news/2038/ Fixes CVE-2020-10733 which is only relevant for Windows. Reformatted hashes. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-05-15 00:14:36 +08:00			`sha256 739e5d454d81d31a482469338b7c856f1f5c6b4cdda1551cea6f0f6d18eef62c COPYRIGHT`