Update PostgreSQL to 7.3.19, 7.4.17, 8.0.13, 8.1.9 and 8.2.4 respectively:

 The PostgreSQL Global Development Group has released updated versions
 for PostgreSQL 8.2 and all back versions to patch a privilege
 escalation exploit in SECURITY DEFINER functions.  All users of this
 feature are urged to update to the latest minor version and follow
 instructions on securing these functions as soon as possible.  This
 minor release also contains other fixes, so all users should plan to
 deploy it.

 Once you have updated, additional steps are required to secure your
 database against the exploit.  Please read the release notes at
 http://www.postgresql.org/docs/8.2/static/release.html and the
 TechDocs article at http://www.postgresql.org/docs/techdocs.77 on how
 to lock down your security definer functions, if you use them.

 As always, application of a minor release does not require a dump and
 reload of the database.

 The frequency of security fixes recently is a result of increased
 scrutiny of the PostgreSQL code by government agencies and
 security-conscious companies.  Rapid turnaround on security patches
 is key to keeping PostgreSQL the most secure SQL database.  Your work
 and vigilance in applying the latest security updates ensures that
 there will never be a PostgreSQL "worm".

http://www.postgresql.org/docs/8.2/static/release-8-2-4.html
http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-9
http://www.postgresql.org/docs/8.0/static/release.html#RELEASE-8-0-13
http://www.postgresql.org/docs/7.4/static/release.html#RELEASE-7-4-17

http://www.postgresql.org/docs/techdocs.77

Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2138

2 files changed, 28 insertions, 16 deletions

diff --git a/databases/postgresql74-server/Makefile b/databases/postgresql74-server/Makefile
index 4beaa0267529..ee4366d2d432 100644
--- a/databases/postgresql74-server/Makefile
+++ b/databases/postgresql74-server/Makefile
@@ -6,7 +6,7 @@
 #
 
 PORTNAME?=	postgresql
-PORTVERSION?=	7.4.16
+PORTVERSION?=	7.4.17
 PORTREVISION?=	0
 CATEGORIES?=	databases
 MASTER_SITES=	${MASTER_SITE_PGSQL}
@@ -197,11 +197,23 @@ MAN7=		abort.7 alter_aggregate.7 alter_conversion.7 \
 		drop_sequence.7 \
 		drop_table.7 drop_trigger.7 drop_type.7 drop_user.7 \
 		drop_view.7 end.7 execute.7 explain.7 fetch.7 grant.7 insert.7 \
-		listen.7 load.7 lock.7 move.7 notify.7 prepare.7 reindex.7 \
+		listen.7 load.7 lock.7 move.7 notify.7 \
+		pg_conndefaults.7 pg_connect.7 pg_disconnect.7 pg_exec.7 \
+		pg_execute.7 pg_listen.7 pg_lo_close.7 pg_lo_creat.7 \
+		pg_lo_export.7 pg_lo_import.7 pg_lo_lseek.7 pg_lo_open.7 \
+		pg_lo_read.7 pg_lo_tell.7 pg_lo_unlink.7 pg_lo_write.7 \
+		pg_on_connection_loss.7 pg_result.7 pg_select.7 prepare.7 reindex.7 \
 		reset.7 revoke.7 rollback.7 select.7 select_into.7 \
 		set.7 set_constraints.7 set_transaction.7 show.7 \
-		set_session_authorization.7 start_transaction.7 \
-		truncate.7 unlisten.7 update.7 vacuum.7
+		set_session_authorization.7 \
+		spi_connect.7 spi_copytuple.7 spi_copytupledesc.7 \
+		spi_copytupleintoslot.7 spi_cursor_close.7 spi_cursor_fetch.7 \
+		spi_cursor_find.7 spi_cursor_move.7 spi_cursor_open.7 spi_exec.7 \
+		spi_execp.7 spi_finish.7 spi_fname.7 spi_fnumber.7 spi_freeplan.7 \
+		spi_freetuple.7 spi_freetuptable.7 spi_getbinval.7 spi_getrelname.7 \
+		spi_gettype.7 spi_gettypeid.7 spi_getvalue.7 spi_modifytuple.7 \
+		spi_palloc.7 spi_pfree.7 spi_prepare.7 spi_repalloc.7 spi_saveplan.7 \
+		start_transaction.7 truncate.7 unlisten.7 update.7 vacuum.7
 .endif
 
 .if defined(SERVER_ONLY)
diff --git a/databases/postgresql74-server/distinfo b/databases/postgresql74-server/distinfo
index ea3777aa5303..77e763408c89 100644
--- a/databases/postgresql74-server/distinfo
+++ b/databases/postgresql74-server/distinfo
@@ -1,15 +1,15 @@
-MD5 (postgresql/postgresql-base-7.4.16.tar.bz2) = a876404e4186537cba0ba9d2afe5e554
-SHA256 (postgresql/postgresql-base-7.4.16.tar.bz2) = d8e7df2f06f248e66023452fa9cf565640b93ae43433dade7515f54e643f5c21
-SIZE (postgresql/postgresql-base-7.4.16.tar.bz2) = 6586435
-MD5 (postgresql/postgresql-opt-7.4.16.tar.bz2) = 51aa935cac1a13483ff76d8770b51fe3
-SHA256 (postgresql/postgresql-opt-7.4.16.tar.bz2) = 13a3063570c27ecc8ae163c86439b3c0b95d21bd55cac2506b105a486d410469
-SIZE (postgresql/postgresql-opt-7.4.16.tar.bz2) = 333683
-MD5 (postgresql/postgresql-test-7.4.16.tar.bz2) = d4dbef48016d11345868fa9f04e4501f
-SHA256 (postgresql/postgresql-test-7.4.16.tar.bz2) = 851d5de0f66e3a13a57acffc50f15288a2d367160902e08d0bd1a0deb72b0f39
-SIZE (postgresql/postgresql-test-7.4.16.tar.bz2) = 901854
-MD5 (postgresql/postgresql-docs-7.4.16.tar.bz2) = f0465262c56f9d150fb2d4d717c14851
-SHA256 (postgresql/postgresql-docs-7.4.16.tar.bz2) = 7478f43e5071756434526259895f16ffeffa4c8a11dbd9af2df34250a7f463be
-SIZE (postgresql/postgresql-docs-7.4.16.tar.bz2) = 2429657
+MD5 (postgresql/postgresql-base-7.4.17.tar.bz2) = c513ae755abd4fb011378351be9e1ba0
+SHA256 (postgresql/postgresql-base-7.4.17.tar.bz2) = f1b7ff754ccb43d4a3a62a9124b1c8ac215e48e5549e620bfcde59124c6f1bc5
+SIZE (postgresql/postgresql-base-7.4.17.tar.bz2) = 6609512
+MD5 (postgresql/postgresql-opt-7.4.17.tar.bz2) = 43a87be48f3e43c5fce957af000bff60
+SHA256 (postgresql/postgresql-opt-7.4.17.tar.bz2) = 8ff6ca8f726ce39d873d495273c31ceb3d647d75a85a7940b38d38ae7b2eff3e
+SIZE (postgresql/postgresql-opt-7.4.17.tar.bz2) = 333513
+MD5 (postgresql/postgresql-test-7.4.17.tar.bz2) = 493b0b142f0ca6fb52dbdfc5c32e0c5b
+SHA256 (postgresql/postgresql-test-7.4.17.tar.bz2) = 0486999f89b38996c15a91a66638f40718d5fb702ac592f4f2a22e9377b6b6bf
+SIZE (postgresql/postgresql-test-7.4.17.tar.bz2) = 902524
+MD5 (postgresql/postgresql-docs-7.4.17.tar.bz2) = e9a33e70add61f6a1018870c88dbf0ea
+SHA256 (postgresql/postgresql-docs-7.4.17.tar.bz2) = 855b08821fa06cce280d63c1c57a1a51cc02eee1af0a53ba9a550cc3e66c2696
+SIZE (postgresql/postgresql-docs-7.4.17.tar.bz2) = 2434028
 MD5 (postgresql/hier-Pg7.4-0.5.3.tar.gz) = 16d037213b879963724da7809a0a1589
 SHA256 (postgresql/hier-Pg7.4-0.5.3.tar.gz) = 1e56f76560c86227b08faabf78e3a53de4188c6a8f9d1f38b1481427e8fdf74c
 SIZE (postgresql/hier-Pg7.4-0.5.3.tar.gz) = 34662