postgresql: add fix for CVE-2014-0067 Security Advisory
authorKang Kai <kai.kang@windriver.com>
Wed, 29 Oct 2014 00:30:57 +0000 (08:30 +0800)
committerPatrick Ohly <patrick.ohly@intel.com>
Fri, 9 Jan 2015 17:19:16 +0000 (09:19 -0800)
commitd0cc783b710cd55417b415f803f3058ad553b1f4
tree6ab5e73a388fee200e6f1191df138fa7a36abe78
parentbe888392f4cb2dde5e38b361d0362350a25b9122
postgresql: add fix for CVE-2014-0067 Security Advisory

The make check command for the test suites in PostgreSQL 9.3.3 and
earlier does not properly invoke initdb to specify the authentication
requirements for a database cluster to be used for the tests, which
allows local users to gain privileges by leveraging access to this
cluster.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0067

(From meta-openembedded rev: 8a118e3db53730626b64f6bf7cd568f77e449a7d)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
meta-openembedded/meta-oe/recipes-support/postgresql/files/0007-Make-pqsignal-available-to-pg_regress-of-ECPG-and-is.patch [new file with mode: 0644]
meta-openembedded/meta-oe/recipes-support/postgresql/postgresql.inc