| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
supported versions of our database system, including 12.4, 11.9, 10.14,
9.6.19, and 9.5.23.
This release closes two security vulnerabilities and fixes over 50 bugs
reported over the last three months.
Please plan to update at your earliest convenience.
Security Issues
---------------
* CVE-2020-14349: Uncontrolled search path element in logical replication.
Versions Affected: 10 - 12.
The PostgreSQL `search_path` setting determines schemas searched for
tables, functions, operators, etc. The CVE-2018-1058 fix caused most
PostgreSQL-provided client applications to sanitize `search_path`, but
logical replication continued to leave `search_path` unchanged. Users of
a replication publisher or subscriber database can create objects in the
`public` schema and harness them to execute arbitrary SQL functions
under the identity running replication, often a superuser. Installations
having adopted a documented secure schema usage pattern are not vulnerable.
The PostgreSQL project thanks Noah Misch for reporting this problem.
* CVE-2020-14350: Uncontrolled search path element in `CREATE EXTENSION`.
Versions Affected: 9.5 - 12. The security team typically does not test
unsupported versions, but this problem is quite old.
When a superuser runs certain `CREATE EXTENSION` statements, users may
be able to execute arbitrary SQL functions under the identity of that
superuser. The attacker must have permission to create objects in the
new extension's schema or a schema of a prerequisite extension. Not all
extensions are vulnerable.
In addition to correcting the extensions provided with PostgreSQL, the
PostgreSQL Global Development Group is issuing guidance for third-party
extension authors to secure their own work.
The PostgreSQL project thanks Andres Freund for reporting this problem.
Security: CVE-2020-14349, CVE-2020-14350
Notes:
svn path=/head/; revision=544810
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Please refer to the 20200811 UPDATING entry when upgrading
dependent (*-emacs26-*) ports.
Port changes:
- depend on math/gmp
- match upstream by turning CAIRO, HARFBUZZ, and JSON options and on and
turning MAGICK off by default
- remove OPENMP check for graphics/ImageMagick as the openmp is now
included in base
- update EMACS_VER in Mk/Uses/emacs.mk
- bump USES=emacs ports or remove BROKEN for net-im/jabber.el and
deskutils/howm, which now build
Submitted by: HIROSE Yuuji <yuuji@gentei.org> (canna patch)
Reviewed by: ashish
Differential Revision: https://reviews.freebsd.org/D23966
Notes:
svn path=/head/; revision=544763
|
|
|
|
|
|
|
|
|
|
|
|
| |
The -E flag tells find(1) to interpret regular expressions which were
passed as arguments to -regex and -iregex as extended regular expressions.
It has no effect on other otherwise. Let's not invoke find(1) with -E if
not necessary.
Approved by: portmgr (blanket approval)
Notes:
svn path=/head/; revision=544746
|
|
|
|
| |
Notes:
svn path=/head/; revision=544743
|
|
|
|
|
|
|
|
|
| |
PR: 248237
Approved by: fernape@
Sponsored by: A-Team Systems, LLC
Notes:
svn path=/head/; revision=544734
|
|
|
|
|
|
|
| |
Changes: https://mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.24.2
Notes:
svn path=/head/; revision=544692
|
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://puppet.com/docs/puppetdb/latest/release_notes.html#puppetdb-6113
With hat: puppet
Notes:
svn path=/head/; revision=544662
|
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://puppet.com/docs/puppetdb/5.2/release_notes.html#puppetdb-5218
With hat: puppet
Notes:
svn path=/head/; revision=544661
|
|
|
|
| |
Notes:
svn path=/head/; revision=544607
|
|
|
|
| |
Notes:
svn path=/head/; revision=544543
|
|
|
|
| |
Notes:
svn path=/head/; revision=544518
|
|
|
|
|
|
|
| |
Changes: https://github.com/zdennis/activerecord-import/blob/master/CHANGELOG.md
Notes:
svn path=/head/; revision=544433
|
|
|
|
|
|
|
| |
Changes: https://github.com/dbcli/mycli/blob/master/changelog.md
Notes:
svn path=/head/; revision=544402
|
|
|
|
|
|
|
| |
Changes: https://github.com/TileDB-Inc/TileDB/releases
Notes:
svn path=/head/; revision=544386
|
|
|
|
|
|
|
| |
Changes: https://github.com/okbob/plpgsql_check/releases
Notes:
svn path=/head/; revision=544385
|
|
|
|
|
|
|
|
|
| |
- Add TEST framework
Relnotes: https://dev.mysql.com/doc/relnotes/connector-python/en/news-8-0-21.html
Notes:
svn path=/head/; revision=544365
|
|
|
|
|
|
|
| |
Relnotes: https://mroonga.org/docs/news.html#release-10-05
Notes:
svn path=/head/; revision=544357
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- switch to GH_TUPLES (as the author advises: https://github.com/ClickHouse/ClickHouse/issues/10243)
- TESTS options: add lang/expect as run deps due to some tests use an expect
- update official site URL
- pass maintainership to submitter
Changelog:
https://github.com/ClickHouse/ClickHouse/blob/v20.5.4.40-stable/CHANGELOG.md
(it doesn't includes changes for 20.5.4.40 in particular, but still helpful for 19->20 changes)
PR: 248467
Submitted by: olevole@olevole.ru
Reviewed by: fernape (general port review)
Approved by: proler@gmail.com (previous maintainer)
Notes:
svn path=/head/; revision=544323
|
|
|
|
| |
Notes:
svn path=/head/; revision=544313
|
|
|
|
|
|
|
|
| |
The authors said that GitHub contained RC mislabeled as 1.0.0.
Now it's a real release.
Notes:
svn path=/head/; revision=544266
|
|
|
|
|
|
|
| |
ChangeLog: https://github.com/citusdata/citus/blob/v9.4.0/CHANGELOG.md
Notes:
svn path=/head/; revision=544207
|
|
|
|
|
|
|
|
| |
> WARN: Makefile: [137]: whitespace before end of line.
> FATAL: Makefile: [209]: use a tab (not space) after a variable name
Notes:
svn path=/head/; revision=544190
|
|
|
|
|
|
|
| |
Release notes: https://github.com/flightaware/casstcl/releases/tag/v2.14.0
Notes:
svn path=/head/; revision=544147
|
|
|
|
|
|
|
|
| |
PR: 248370
Submitted by: Ronald Klop <ronald-lists@klop.ws> (maintainer)
Notes:
svn path=/head/; revision=544130
|
|
|
|
|
|
|
| |
Requested by: Yasuhiro KIMURA <yasu@utahime.org>
Notes:
svn path=/head/; revision=544088
|
|
|
|
|
|
|
| |
Release notes: https://github.com/dalibo/pg_stat_kcache/blob/REL2_0_3/CHANGELOG.md
Notes:
svn path=/head/; revision=544055
|
|
|
|
|
|
|
|
|
|
| |
PR: 248040
Submitted by: mikael
Approved by: michelle@sorbs.net (maintainer timeout)
Relnotes: https://metacpan.org/changes/distribution/DBIx-SearchBuilder
Notes:
svn path=/head/; revision=544050
|
|
|
|
|
|
|
| |
Release notes: https://github.com/darold/pgbadger/blob/v11.3/ChangeLog
Notes:
svn path=/head/; revision=544037
|
|
|
|
|
|
|
| |
Release notes: https://pqxx.org/development/libpqxx/
Notes:
svn path=/head/; revision=544035
|
|
|
|
|
|
|
|
| |
PR: 248186
Submitted by: Naram Qashat <cyberbotx cyberbotx com>
Notes:
svn path=/head/; revision=543994
|
|
|
|
|
|
|
|
| |
PR: 247764
Submitted by: Rainer Hurling <rhurlin@gwdg.de> (maintainer)
Notes:
svn path=/head/; revision=543967
|
|
|
|
|
|
|
| |
Sponsored by: Netzkommune GmbH
Notes:
svn path=/head/; revision=543946
|
|
|
|
|
|
|
| |
Sponsored by: Netzkommune GmbH
Notes:
svn path=/head/; revision=543935
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
option work after r542047 [1]
- Also add back options descriptions [1]
- While here make STAT3 and STAT4 options descriptions start with
uppercase letter [1]
- Since in r542047 OPTIONS_GROUP_RL was changed to OPTIONS_RADIO_RL
also bug 239228 can be closed [2]
PR: 248323 [1], 239228 [2]
Submitted by: myself [1], Dennis Clarke <dclarke@blastwave.org> [2]
Approved by: maintainer [1]
Notes:
svn path=/head/; revision=543921
|
|
|
|
| |
Notes:
svn path=/head/; revision=543884
|
|
|
|
|
|
|
|
| |
Changes: https://github.com/fmtlib/fmt/releases/tag/7.0.2
ABI: https://abi-laboratory.pro/tracker/timeline/fmt
Notes:
svn path=/head/; revision=543873
|
|
|
|
|
|
|
|
|
|
| |
core dumped
Reported by: fallout
Sponsored by: Netzkommune GmbH
Notes:
svn path=/head/; revision=543856
|
|
|
|
|
|
|
|
|
|
|
| |
Changelog:
- https://github.com/pgpointcloud/pointcloud/blob/v1.2.1/NEWS
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D25846
Notes:
svn path=/head/; revision=543823
|
|
|
|
|
|
|
|
|
|
|
| |
Changelog:
- https://docs.pgrouting.org/3.0/en/release_notes.html#changelog-3-0-2
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D25845
Notes:
svn path=/head/; revision=543822
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Update to 3.12.0
- Remove patches fixed upstream
- Patch .desktop location
Changelog:
- https://github.com/sqlitebrowser/sqlitebrowser/releases/tag/v3.12.0
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D25844
Notes:
svn path=/head/; revision=543821
|
|
|
|
|
|
|
|
|
|
| |
Changelog:
- https://postgis.net/2020/05/31/postgis-2.3.11/
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D25850
Notes:
svn path=/head/; revision=543818
|
|
|
|
|
|
|
| |
Changes: https://github.com/dbcli/mycli/blob/master/changelog.md
Notes:
svn path=/head/; revision=543747
|
|
|
|
|
|
|
| |
Changes: https://github.com/okbob/plpgsql_check/releases
Notes:
svn path=/head/; revision=543739
|
|
|
|
|
|
|
|
|
| |
Use C11 compiler:
/usr/local/include/mysql/my_global.h:212: error: redefinition of typedef 'my_socket'
/usr/local/include/mysql/mysql.h:64: error: previous declaration of 'my_socket' was here
Notes:
svn path=/head/; revision=543719
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Since Qt5.15 update, pgmodeler 0.9.2 crashes. A new release is coming, we can as well fix this crash and prepare for this release.
- Update to 0.9.3-beta
- Reorder and alphabetize USES
Changelog:
https://github.com/pgmodeler/pgmodeler/blob/develop/CHANGELOG.md
Reported by: tcberner
Approved by: tcberner (mentor)
Differential Revision: D25877
Notes:
svn path=/head/; revision=543712
|
|
|
|
|
|
|
| |
2020-07-27 databases/sqliteodbc-sqlite2: SQLite2 has stopped development in 2005, please move to SQLite3
Notes:
svn path=/head/; revision=543544
|
|
|
|
|
|
|
|
|
| |
- Update WWW
Approved by: portmgr blanket
Notes:
svn path=/head/; revision=543514
|
|
|
|
|
|
|
|
|
|
|
| |
- Update to version 4.0-beta1
- fix build on aarch64
PR: 248228 248004
Submitted by: Angelo Polo (maintainer), Ronald Klop (aarch64 fix)
Notes:
svn path=/head/; revision=543475
|
|
|
|
|
|
|
|
|
| |
- Update WWW
Approved by: portmgr blanket
Notes:
svn path=/head/; revision=543462
|
|
|
|
|
|
|
| |
Reported by: pkg-fallout
Notes:
svn path=/head/; revision=543437
|