[debbugs-tracker] bug#35698: closed ([PATCH] gnu: postgresql: Replace with 10.8 [security fixes].)

[GNU bug Tracking System]

Your message dated Sat, 25 May 2019 12:57:29 +0200
with message-id <address@hidden>
and subject line Re: [bug#35698] [PATCH] gnu: postgresql: Replace with 10.8 
[security fixes].
has caused the debbugs.gnu.org bug report #35698,
regarding [PATCH] gnu: postgresql: Replace with 10.8 [security fixes].
to be marked as done.

(If you believe you have received this mail in error, please contact
address@hidden)


-- 
35698: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=35698
GNU Bug Tracking System
Contact address@hidden with problems
> --- Begin Message ---
>
>
>
> Subject: 
>
> [PATCH] gnu: postgresql: Replace with 10.8 [security fixes].
>
>
>
>
> Date: 
>
> Sun, 12 May 2019 14:25:50 +0200
>
>
>
>
> This fixes CVE-2019-10129 and CVE-2019-10130.
>
> * gnu/packages/databases.scm (postgresql)[replacement]: New field.
> (postgresql-10.8): New variable.
> ---
>  gnu/packages/databases.scm | 17 +++++++++++++++++
>  1 file changed, 17 insertions(+)
>
> diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm
> index b632f05db4..295395f035 100644
> --- a/gnu/packages/databases.scm
> +++ b/gnu/packages/databases.scm
> @@ -800,6 +800,7 @@ as a drop-in replacement of MySQL.")
>    (package
>      (name "postgresql")
>      (version "10.7")
> +    (replacement postgresql-10.8)
>      (source (origin
>                (method url-fetch)
>                (uri (string-append "https://ftp.postgresql.org/pub/source/v";
> @@ -842,6 +843,22 @@ TIMESTAMP.  It also supports storage of binary large 
> objects, including
>  pictures, sounds, or video.")
>      (license (license:x11-style "file://COPYRIGHT"))))
>  
> +;; This release fixes CVE-2019-10129 and CVE-2019-10130.  See
> +;; <https://www.postgresql.org/about/news/1939/> for details.
> +;; TODO: Remove this in the next rebuild cycle.
> +(define-public postgresql-10.8
> +  (package
> +    (inherit postgresql)
> +    (version "10.8")
> +    (source (origin
> +              (method url-fetch)
> +              (uri (string-append "https://ftp.postgresql.org/pub/source/v";
> +                                  version "/postgresql-" version ".tar.bz2"))
> +              (sha256
> +               (base32
> +                "0pfdmy4w95b49w9rkn8dwvzmi2brpqfvbxd04y0k0s0xvymc565i"))
> +              (patches (search-patches 
> "postgresql-disable-resolve_symlinks.patch"))))))
> +
>  (define-public postgresql-9.6
>    (package
>      (inherit postgresql)
> -- 
> 2.21.0
>
>
>
>
> --- End Message ---

--- Begin Message --- Subject: Re: [bug#35698] [PATCH] gnu: postgresql: Replace with 10.8 [security fixes]. Date: Sat, 25 May 2019 12:57:29 +0200 User-agent: Notmuch/0.28.4 (https://notmuchmail.org) Emacs/26.2 (x86_64-pc-linux-gnu)

Marius Bakke <address@hidden> writes:

> This fixes CVE-2019-10129 and CVE-2019-10130.
>
> * gnu/packages/databases.scm (postgresql)[replacement]: New field.
> (postgresql-10.8): New variable.

I almost forgot this patch.

Pushed in a52c807a393ae0a9b59918a4f451c9e59ff7ec0e.

signature.asc
Description: PGP signature

--- End Message ---