{"id":114,"date":"2011-09-26T23:58:42","date_gmt":"2011-09-26T23:58:42","guid":{"rendered":"http:\/\/blogs.gentoo.org\/titanofold\/?p=114"},"modified":"2011-09-26T23:58:42","modified_gmt":"2011-09-26T23:58:42","slug":"security-bugs-and-perl-fix-postgresql","status":"publish","type":"post","link":"https:\/\/blogs.gentoo.org\/titanofold\/2011\/09\/26\/security-bugs-and-perl-fix-postgresql\/","title":{"rendered":"Security, Bugs and Perl Fix – PostgreSQL"},"content":{"rendered":"

PostgreSQL released an update for all supported branches today, which includes a minor\/major security fix and a minor\/major enhancement, and you can and should get them now.<\/p>\n

The arches are busy<\/a> (bugs.gentoo.org) testing the packages, and will stabilize them as quick as they can. But<\/em>, if you’re using the Blowfish cipher from pg_crypto, you probably won’t want to wait that long.<\/p>\n

A bug was found<\/a> (www.openwall.com) that encryption code could give wrong results on platforms where char is signed (which is most), leading to encrypted passwords being weaker than they should be.<\/p>\n

If you are running a PostgreSQL server<\/strong> using the Blowfish<\/strong> cipher from pg_crypto<\/strong>, update now<\/em><\/strong>. If you’re not using pg_crypto in any of your databases, you’re safe and can wait for the latest versions to be stabilized, though I’d still recommend to make the move. If you don’t even have a PostgreSQL server on your machine, you’re doubly safe.<\/p>\n

So, the security fix is minor if you don’t use the cipher, but major if you do.<\/p>\n

On to Perl, 5.14 support was finally patched in. If you’ve been waiting for PostgreSQL to get this support going, this is a major enhancment, otherwise it’ll be a dull and dreary minor enhancement. Again, this only affects server owners.<\/p>\n

There have been many other fixes, too. Check the news announcement<\/a> (www.postgresql.org) for more information.<\/p>\n","protected":false},"excerpt":{"rendered":"

PostgreSQL released an update for all supported branches today, which includes a minor\/major security fix and a minor\/major enhancement, and you can and should get them now.<\/p>\n","protected":false},"author":136,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[3,5,4],"tags":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p1tO5a-1Q","_links":{"self":[{"href":"https:\/\/blogs.gentoo.org\/titanofold\/wp-json\/wp\/v2\/posts\/114"}],"collection":[{"href":"https:\/\/blogs.gentoo.org\/titanofold\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.gentoo.org\/titanofold\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.gentoo.org\/titanofold\/wp-json\/wp\/v2\/users\/136"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.gentoo.org\/titanofold\/wp-json\/wp\/v2\/comments?post=114"}],"version-history":[{"count":8,"href":"https:\/\/blogs.gentoo.org\/titanofold\/wp-json\/wp\/v2\/posts\/114\/revisions"}],"predecessor-version":[{"id":122,"href":"https:\/\/blogs.gentoo.org\/titanofold\/wp-json\/wp\/v2\/posts\/114\/revisions\/122"}],"wp:attachment":[{"href":"https:\/\/blogs.gentoo.org\/titanofold\/wp-json\/wp\/v2\/media?parent=114"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.gentoo.org\/titanofold\/wp-json\/wp\/v2\/categories?post=114"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.gentoo.org\/titanofold\/wp-json\/wp\/v2\/tags?post=114"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}