git.postgresql.org Git - postgres-xl.git/commit

projects / postgres-xl.git / commit

summary | shortlog | log | commit | commitdiff | tree
(parent: 2ca9d54) | patch

author	Noah Misch <noah@leadboat.com>
	Mon, 5 Oct 2015 14:06:29 +0000 (10:06 -0400)
committer	Noah Misch <noah@leadboat.com>
	Mon, 5 Oct 2015 14:06:29 +0000 (10:06 -0400)
commit	1d812c8b059d0b9b1fba4a459c9876de0f6259b6
tree	567ebc7798e9792adb395a26f48c8a57dd1b4001	tree
parent	2ca9d5445c35db8956e4abbf1e653373820e8c0a	commit \| diff

pgcrypto: Detect and report too-short crypt() salts.

Certain short salts crashed the backend or disclosed a few bytes of
backend memory. For existing salt-induced error conditions, emit a
message saying as much. Back-patch to 9.0 (all supported versions).

Josh Kupershmidt

Security: CVE-2015-5288

Official repo for Postgres-XL. Stable branch is XL9_5_STABLE. Current development is PG10 compatible. Controlled by Postgres-X2 Core Team.