Updates for new releases out today

Including security updates

diff --git a/templates/index.html b/templates/index.html
index 43ed144dad1d77a2d43910520e7d5651b4880553..1d71daa717dd70184223452cbb41641a52566c93 100644 (file)
--- a/templates/index.html
+++ b/templates/index.html
@@ -14,13 +14,13 @@
                 <p>
 The PostgreSQL Global Development Group announces updates for all active
 branches of the PostgreSQL object-relational database system, including
-versions 9.1.4, 9.0.8, 8.4.12 and 8.3.19. These releases fix a number
+versions 9.1.5, 9.0.9, 8.4.13 and 8.3.20. These releases fix a number
 of bugs, including multiple <a href="/support/security/">security</a>
 related bugs.
                </p>
                <div id="txtFrontFeatureLink">
                   <br/>
-                  <img src="/media/img/layout/blt_blu_arrow.png" width="6" height="6" alt="" /><a href="/about/news/1398/" title="Release Announcement">Release Announcement</a><br />
+                  <img src="/media/img/layout/blt_blu_arrow.png" width="6" height="6" alt="" /><a href="/about/news/1407/" title="Release Announcement">Release Announcement</a><br />
                   <img src="/media/img/layout/blt_blu_arrow.png" width="6" height="6" alt="" /><a href="/download" title="Download">Download</a><br />
                 </div>
               </div>

diff --git a/templates/pages/support/security.html b/templates/pages/support/security.html
index d053784f86ab732d9b2ebcfda9a7da0c93bfbbc9..e1041f49565140a7beed8d18ab8ff234d280524e 100644 (file)
--- a/templates/pages/support/security.html
+++ b/templates/pages/support/security.html
@@ -61,6 +61,24 @@ to determine if the bug affects specific installations or not.
    <th class="colLast">Description</th>
   </tr>
 
+  <tr valign="top">
+   <td class="colFirst"><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3489">CVE-2012-3489</a></td>
+   <td class="colMid">9.1, 9.0, 8.4, 8.3</td>
+   <td class="colMid">9.1.5, 9.0.9, 8.4.13, 8.3.20</td>
+   <td class="colMid">core server</td>
+   <td class="colMid">C</td>
+   <td class="colLast">xml_parse() DTD validation can be used to read arbitrary files</td>
+  </tr>
+
+  <tr valign="top">
+   <td class="colFirst"><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3488">CVE-2012-3488</a></td>
+   <td class="colMid">9.1, 9.0, 8.4, 8.3</td>
+   <td class="colMid">9.1.5, 9.0.9, 8.4.13, 8.3.20</td>
+   <td class="colMid">contrib module</td>
+   <td class="colMid">C</td>
+   <td class="colLast">contrib/xml2's xslt_process() can be used to read and write arbitrary files</td>
+  </tr>
+
   <tr valign="top">
    <td class="colFirst"><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2143">CVE-2012-2143</a></td>
    <td class="colMid">9.1, 9.0, 8.4, 8.3</td>