[oe-commits] Kang Kai : postgresql: add fix for CVE-2014-0063 Security Advisory

[git at git.openembedded.org]

Module: meta-openembedded.git
Branch: dizzy
Commit: b675ed0eaca83e74ff62d0bf86f7003470999240
URL:    http://git.openembedded.org/?p=meta-openembedded.git&a=commit;h=b675ed0eaca83e74ff62d0bf86f7003470999240

Author: Kang Kai <kai.kang at windriver.com>
Date:   Wed Oct 29 08:30:56 2014 +0800

postgresql: add fix for CVE-2014-0063 Security Advisory

Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x
before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before
9.3.3 allow remote authenticated users to cause a denial of service
(crash) or possibly execute arbitrary code via vectors related to an
incorrect MAXDATELEN constant and datetime values involving (1)
intervals, (2) timestamps, or (3) timezones, a different vulnerability
than CVE-2014-0065.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0063

Signed-off-by: Yue Tao <Yue.Tao at windriver.com>
Signed-off-by: Kai Kang <kai.kang at windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa at gmail.com>
Signed-off-by: Armin Kuster <akuster808 at gmail.com>

---

 ...ix-handling-of-wide-datetime-input-output.patch | 465 +++++++++++++++++++++
 meta-oe/recipes-support/postgresql/postgresql.inc  |   1 +
 2 files changed, 466 insertions(+)

Diff:   http://git.openembedded.org/?p=meta-openembedded.git/?a=commitdiff;h=b675ed0eaca83e74ff62d0bf86f7003470999240