postgresql-8.4.20-4.AXS4

PostgreSQL is an advanced Object-Relational database management system
(DBMS) that supports almost all SQL constructs (including
transactions, subselects and user-defined types and functions). The
postgresql package includes the client programs and libraries that
you'll need to access a PostgreSQL DBMS server. These PostgreSQL
client programs are programs that directly manipulate the internal
structure of PostgreSQL databases on a PostgreSQL server. These client
programs can be located on the same machine with the PostgreSQL
server, or may be on a remote machine which accesses a PostgreSQL
server over a network connection. This package contains the docs
in HTML for the whole package, as well as command-line utilities for
managing PostgreSQL databases on a PostgreSQL server.

If you want to manipulate a PostgreSQL database on a local or remote PostgreSQL
server, you need this package. You also need to install this package
if you're installing the postgresql-server package.

Security issues fixed with this release:

CVE-2015-5288
The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23,
9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and
9.4.x before 9.4.5 allows attackers to cause a denial of service
(server crash) or read arbitrary server memory via a "too-short" salt.