postgresql 9.6.4

[Pierre Labastie]

New point version: See ​https://www.postgresql.org/docs/9.6/static/release-9-6-4.html

[bdubbs@…]

From release notes:

​https://www.postgresql.org/message-id/E1dfo0s-0001Ld-L6@atalia.postgresql.org

• Further restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. See the release notes for instructions for applying the fix to existing database clusters. (CVE-2017-7547; extends fix for CVE-2017-7484)
• Disallow empty passwords in all password-based authentication methods. (CVE-2017-7546)
• Make lo_put() check for UPDATE privilege on the target large object. (CVE-2017-7548)

• debian/rules: Unconditionally use DEB_BUILD_MAINT_OPTIONS=hardening=+all. The old logic is kept around for compiling on older distributions.
• Remove long obsolete --with-krb5 and move c/ldflags to configure switches.

[bdubbs@…]

Fixed at revision 19010.