{"push_id":562675435,"size":5,"distinct_size":5,"ref":"refs/heads/REL9_0_STABLE","head":"0a3ee8a5f845d0b7ad0ad9efa0ff08f221404c4d","before":"5828f7c6682652f43f5365cf0cd5091f3d63d4d5","commits":[{"sha":"611e110aabdf4b5edfed178b34ba662b1549674a","author":{"email":"9ae9c44b775ee9b29f4f502415e02e61a9b1a6a0@momjian.us","name":"Bruce Momjian"},"message":"to_char():  prevent accesses beyond the allocated buffer\n\nPreviously very long field masks for floats could access memory\nbeyond the existing buffer allocated to hold the result.\n\nReported by Andres Freund and Peter Geoghegan.\tBackpatch to all\nsupported versions.\n\nSecurity: CVE-2015-0241","distinct":true,"url":"https://api.github.com/repos/postgres/postgres/commits/611e110aabdf4b5edfed178b34ba662b1549674a"},{"sha":"56b970f2e98853bee7205022df4c5d38bafacdf5","author":{"email":"9ae9c44b775ee9b29f4f502415e02e61a9b1a6a0@momjian.us","name":"Bruce Momjian"},"message":"to_char():  prevent writing beyond the allocated buffer\n\nPreviously very long localized month and weekday strings could\noverflow the allocated buffers, causing a server crash.\n\nReported and patch reviewed by Noah Misch.  Backpatch to all\nsupported versions.\n\nSecurity: CVE-2015-0241","distinct":true,"url":"https://api.github.com/repos/postgres/postgres/commits/56b970f2e98853bee7205022df4c5d38bafacdf5"},{"sha":"9e05c5063eb01ce52618f29fe975696dc4495e6f","author":{"email":"9ae9c44b775ee9b29f4f502415e02e61a9b1a6a0@momjian.us","name":"Bruce Momjian"},"message":"port/snprintf():  fix overflow and do padding\n\nPrevent port/snprintf() from overflowing its local fixed-size\nbuffer and pad to the desired number of digits with zeros, even\nif the precision is beyond the ability of the native sprintf().\nport/snprintf() is only used on systems that lack a native\nsnprintf().\n\nReported by Bruce Momjian. Patch by Tom Lane.\tBackpatch to all\nsupported versions.\n\nSecurity: CVE-2015-0242","distinct":true,"url":"https://api.github.com/repos/postgres/postgres/commits/9e05c5063eb01ce52618f29fe975696dc4495e6f"},{"sha":"ce6f261cd2df5f166ee21d54c4ad13f535193035","author":{"email":"1db01d43e08596f43a65fb393d969b98ee5b4dc6@leadboat.com","name":"Noah Misch"},"message":"Fix buffer overrun after incomplete read in pullf_read_max().\n\nMost callers pass a stack buffer.  The ensuing stack smash can crash the\nserver, and we have not ruled out the viability of attacks that lead to\nprivilege escalation.  Back-patch to 9.0 (all supported versions).\n\nMarko Tiikkaja\n\nSecurity: CVE-2015-0243","distinct":true,"url":"https://api.github.com/repos/postgres/postgres/commits/ce6f261cd2df5f166ee21d54c4ad13f535193035"},{"sha":"0a3ee8a5f845d0b7ad0ad9efa0ff08f221404c4d","author":{"email":"1db01d43e08596f43a65fb393d969b98ee5b4dc6@leadboat.com","name":"Noah Misch"},"message":"Cherry-pick security-relevant fixes from upstream imath library.\n\nThis covers alterations to buffer sizing and zeroing made between imath\n1.3 and imath 1.20.  Valgrind Memcheck identified the buffer overruns\nand reliance on uninitialized data; their exploit potential is unknown.\nBuilds specifying --with-openssl are unaffected, because they use the\nOpenSSL BIGNUM facility instead of imath.  Back-patch to 9.0 (all\nsupported versions).\n\nSecurity: CVE-2015-0243","distinct":true,"url":"https://api.github.com/repos/postgres/postgres/commits/0a3ee8a5f845d0b7ad0ad9efa0ff08f221404c4d"}]}