[Slackbuilds-users] Postgresql Version 10.3 is available.

[Konrad J Hambrick]

Adis --

There is an update for postgresql to version 10.3 this morning.

The update builds and runs fine on Slackware64 14.2 + Multilib.

All I had to change in the postgresql.SlackBuild was:

   VERSION=${VERSION:-10.3}

And for consistency, I updated the postgresql.info file as follows:

   DOWNLOAD="https://ftp.postgresql.org/pub/source/v10.
3/postgresql-10.3.tar.bz2"
   MD5SUM="506498796a314c549388cafb3d5c717a"

The MD5SUM Value came directly from the published
~/source/v10.3/postgresql-10.3.tar.bz2.md5 file

Version 10.3 addresses CVE-2018-1058: Uncontrolled search path element in
pg_dump and other client
applications

Please visit https://wiki.postgresql.org/wiki/A_Guide_to_CVE-2018-1058:
_Protect_Your_Search_Path
for a full explanation of the CVE-2018-1058.

Thanks for the postgresql.SlackBuild Adis !

-- kjh

Note that the same CVE is addressed in postgresql version 9.6.8 which I
still run on my Production Box.

It also builds, installs and runs fine 'over there'
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.slackbuilds.org/pipermail/slackbuilds-users/attachments/20180301/213189ac/attachment.html>