The PostgreSQL Global Development Group has released an update to all supported versions of our database system, including 9.4.5, 9.3.10, 9.2.14, 9.1.19 and 9.0.23. This release fixes two security issues, as well as several bugs found over the last four months. Users vulnerable to the security issues should update their installations immediately; other users should update at the next scheduled downtime. This is also the final update release for major version 9.0.

Security Fixes

Two security issues have been fixed in this release which affect users of specific PostgreSQL features:

CVE-2015-5289: json or jsonb input values constructed from arbitrary user input can crash the PostgreSQL server and cause a denial of service.

CVE-2015-5288: The crypt() function included with the optional pgCrypto extension could be exploited to read a few additional bytes of memory. No working exploit for this issue has been developed.

The PostgreSQL project thanks Josh Kupershmidt and Oskari Saarenmaa for reporting these issues.

This update will also disable SSL renegotiation by default; previously, it was enabled by default. SSL renegotiation will be removed entirely in PostgreSQL versions 9.5 and later.

Other Fixes and Improvements

In addition to the above, many other issues were patched in this release based on bugs reported by our users over the last few months. These fixes include:

• Prevent deeply nested regex, LIKE and SIMILAR matching from crashing the server
• Multiple other fixes with regular expression handling
• Ensure that ALTER TABLE sets all locks for CONSTRAINT modifications
• Fix subtransaction cleanup when a cursor fails, preventing a crash
• Prevent deadlock during WAL insertion when commit_delay is set
• Fix locking during updating of updatable views
• Prevent corruption of relation cache "init file"
• Improve performance of large SPI query results
• Improve LISTEN startup time
• Disable SSL renegotiation by default
• Lower minimum for *_freeze_max_age parameters
• Limit the maximum for wal_buffers to 2GB
• Guard against potential stack overflows in several areas
• Fix handling of DOW and DOY in datetime input
• Allow regular expression queries to be canceled sooner
• Fix assorted planner bugs
• Fix several shutdown issues in the postmaster
• Make anti-wraparound autovacuuming more robust
• Fix minor issues with GIN and SP-GiST indexes.
• Fix several issues with PL/Python, PL/Perl and PL/Tcl
• Improve pg_stat_statements' garbage collection
• Improve collation handling in pgsql_fdw
• Improve libpq's handling of out-of-memory conditions
• Prevent psql crash when there is no current connection
• Multiple fixes to pg_dump, including file and object permissions
• Improve handling of privileges when dumping from old PostgreSQL versions
• Fix issues with support of Alpha, PPC, AIX and Solaris platforms
• Fix startup issue on Windows with Chinese locale
• Fix Windows install.bat script to handle spaces in filenames
• Make the numeric PostgreSQL version number available to extensions

This update also contains tzdata release 2015g, with updates for Cayman Islands, Fiji, Moldova, Morocco, Norfolk Island, North Korea, Turkey, Uruguay, and the new zone America/Fort_Nelson.

Final Update for 9.0

9.0.23 is the final update for major version 9.0, which is now End-Of-Life (EOL) as scheduled. Future security updates will not include version 9.0. As such, users of that version should plan to upgrade to another major version as soon as possible. For more information about the community's support policy and EOL schedule, see the Versioning Policy.

Updating

All PostgreSQL update releases are cumulative. As with other minor releases, users are not required to dump and reload their database or use pg_upgrade in order to apply this update release; you may simply shut down PostgreSQL and update its binaries. Users who have skipped multiple update releases may need to perform additional post-update steps; see the Release Notes for details.

Links

• Download
• Release Notes
• Security Page

The PostgreSQL Global Development Group announces today that the first beta release of PostgreSQL 9.5 is available for download. This release should contain all features and APIs which will be in the final release with few, if any, changes. Users should begin testing their applications against 9.5 Beta 1 in preparation for the final release.

Changes Since Alpha2

Many bugs and issues reported by our users and contributors have been fixed since the release of Alpha2. These include:

• significant adjustments to Row Level Security (RLS) semantics
• deadlock with LWLock improvements
• index corruption issue with BRIN indexes
• couldn't connect using PGSSLMODE=require on Windows
• various problems with commit timestamp tracking
• hash join memory leak
• inconsistent behavior of jsonb_set with array append

In particular, the semantics of Row Level Security have been changed to be consistent with the existing PostgreSQL GRANT-based permissions system. As an example, RLS now applies both the INSERT policies and the SELECT policies when INSERT with RETURNING is used. Users should test the RLS application of RLS policies and re-test any existing RLS configuration to ensure that there are no regressions for their use-cases. For more information, see the documentation on Create Policy and RLS.

If you reported an issue while testing PostgreSQL 9.5, please download Beta1 and test whether that issue has been fixed. If you have not yet tested version 9.5, now is the time for you to help out PostgreSQL development. Known issues which are still open are listed on the Open Items page.

Beta Schedule

This is first beta release of version 9.5, indicating that very few user-visible feature changes are expected before final release. The PostgreSQL Project will release additional betas as required for testing, followed by one or more release candidates, until the final release in late 2015. For more information, and suggestions on how to test the betas, see the Beta Testing page.

Full documentation and release notes of the new version is available online and also installs with PostgreSQL. Also see the What's New page for details on some features.

Links

• Downloads Page
• Beta Testing Information
• 9.5 Beta Release Notes
• What's New in 9.5
• 9.5 Open Items

VMworld Europe ???????? ??? ?? ????????? ??????, ? ?????? ????? …

Read More

 

Working day in and day out with IT Masterminds from …

Read More

Ahead of VMworld Europe, we sat down with Richard Munro, …

Read More

With VMworld Europe 2015 less than a week away, …

Read More

Akademiska Hus har genom att implementera VMwares lösningar utvecklat en …

Read More

A pochi giorni dall’inizio del VMworld 2015 Europe, vi comunichiamo …

Read More

Believe it or not, VMworld isn’t the only major IT …

Read More

Con el VMworld la próxima semana, no pasará mucho tiempo …

Read More

By John Worthington Many people familiar with ITSM have heard the expression ‘adopt & adapt’ as a good practice, but it’s worth noting the order in which these words are placed. You must adopt before you can adapt. This leads to the question, when has a process been ‘adopted’? Incomplete Process[i] If a process doesn’t […]

The post Adopt Before You Adapt Your IT Processes appeared first on VMware Operations Transformation Services.

We’ve partnered with Global Knowledge to conduct one of the industry’s most extensive and comprehensive studies of IT and business professionals, the 2016 IT Skills and Salary Survey. This important research will help us identify IT and business pros’ salary trends, valuable training and certifications, and other fundamental topics. We’ll be asking questions like the […]

The post 2016 IT Skills and Salary Survey + Contest appeared first on VMware Education and Certification Blog.

While most of the talk around cloud-based disaster recovery is on how you protect your workloads, a number of people are starting to look at this from a different angle. How do you connect to those workloads once they have failed over and are running in the cloud? You have literally moved all your applications […]

The post Considerations for Connecting to Your Recovered Workloads appeared first on VMware vCloud Blog.

Learn more about the benefits of winning an award today and submit your nominations by October 31, 2015 at 11:59pm PT*. The criteria for each award relates to growth, sales, net new customers, and marketing. *EMEA partners will have until November 30, 2015 at 11:59pm PT to submit their nominations.

The post The Call for Partner Innovation Award Nominations is Open appeared first on Partner News.