Noah Misch 1d812c8b05 pgcrypto: Detect and report too-short crypt() salts. ...

Certain short salts crashed the backend or disclosed a few bytes of
backend memory.  For existing salt-induced error conditions, emit a
message saying as much.  Back-patch to 9.0 (all supported versions).

Josh Kupershmidt

Security: CVE-2015-5288

2015-10-05 10:06:29 -04:00

..

3des.sql

…

blowfish.sql

…

cast5.sql

…

crypt-blowfish.sql

pgcrypto: Detect and report too-short crypt() salts.

2015-10-05 10:06:29 -04:00

crypt-des.sql

pgcrypto: Detect and report too-short crypt() salts.

2015-10-05 10:06:29 -04:00

crypt-md5.sql

…

crypt-xdes.sql

pgcrypto: Detect and report too-short crypt() salts.

2015-10-05 10:06:29 -04:00

des.sql

…

hmac-md5.sql

…

hmac-sha1.sql

…

init.sql

…

md5.sql

…

pgp-armor.sql

Add functions for dealing with PGP armor header lines to pgcrypto.

2014-10-01 16:03:39 +03:00

pgp-compression.sql

…

pgp-decrypt.sql

pgcrypto: Report errant decryption as "Wrong key or corrupt data".

2015-05-18 10:02:31 -04:00

pgp-encrypt-DISABLED.sql

…

pgp-encrypt.sql

…

pgp-info.sql

…

pgp-pubkey-decrypt.sql

Fix buffer overrun after incomplete read in pullf_read_max().

2015-02-02 10:00:45 -05:00

pgp-pubkey-DISABLED.sql

…

pgp-pubkey-encrypt.sql

…

pgp-zlib-DISABLED.sql

…

rijndael.sql

…

sha1.sql

…

sha2.sql

…