PostgreSQL 9.2.4 

This version fixes the following vulnerabilities:

* [CVE-2013-1899] - makes it possible for a connection request 
  containing a database name that begins with "-" to be crafted that can 
  damage or destroy files within a server's data directory. Anyone with 
  access to the port the PostgreSQL server listens on can initiate this 
  request.
* [CVE-2013-1900] - wherein random numbers generated by contrib/pgcrypto 
  functions may be easy for another database user to guess
* [CVE-2013-1901] - which mistakenly allows an unprivileged user to run 
  commands that could interfere with in-progress backups.

These issues are also addressed but only affect the graphical installers 
for Linux and Mac OS X:

* [CVE-2013-1902] - the use of predictable filenames in /tmp
* [CVE-2013-1903] - insecure passing of superuser passwords to a script

More details in the release announcement:
http://www.postgresql.org/about/news/1456/
Merge branch 'CHEF-4060'
Update software definitions to latest version of DSL
DAT TRAILING WHITESPACE!
Merge branch 'omnibus-1.0'
[cacerts] Added cwd to copy from omnibus cache rather than where fetcher tries to unpack it

There is a bug in omnibus-ruby that may or may not have been fixed.
Since the source url does not point to an archive, omnibus-ruby tries to copy
cacert.pem into the project working directory. However, it fails and copies to
'/var/cache/omnibus/src/cacerts-2012.12.19\' instead There is supposed to be
a fix in omnibus-ruby, but under further testing, it was unsure if the fix
worked. Rather than trying to fix this now, we're filing a bug and copying the
cacert.pem directly from the cache instead.
[libpng] Updated url for libpng for 1.5.15
[nagios] Use Sourceforge mirror autoselector instead of hardcoding a specific mirror
[zlib] Use Sourceforge mirror autoselector instead of hardcoding a specific mirror
[gd] Updated source url for libgd
Merge branch 'hh/source-url-updates'
[openresty] Added openresty build based upon nginx.

Added an openresty build definition. It should be a drop-in replacement
for standard nginx.

 - Since openresty is a metapackage, its configure script descends into
   the source files and calls `configure` for nginx. In order to link to
   the embedded shared libraries, we added linker and cc flags to force a
   lookup in the embedded directories first

 - The sbin and nginx.conf had to be explicitly set to the omnibus
   convensions.

 - Openresty cookbook will automatically detect AIO capabilities and
   automatically enable AIO compile flags. It appears that Ubuntu 10.04
   have the necessary kernel version. However, this requires compiling
   additional AIO libraries. This is a possible improvement for future
   builds.
[openresty] Bumped to Openresty 1.2.6.6
Merge branch 'hh/OC-7187/xdarklaunch'
add O3 and -g flags for ruby

Setting any CFLAGS completely disables ruby's default CFLAG settings. On
my mac I have flags like:

    " -O3 -ggdb -Wextra -Wno-unused-parameter -Wno-parentheses
    -Wno-long-long -Wno-missing-field-initializers -Werror=pointer-arith
    -Werror=write-strings -Werror=declaration-after-statement
    -Werror=shorten-64-to-32 -Werror=implicit-function-declaration  -pipe"

But Omnibus currently builds ruby with no optimization and no gdb
support:

    "-I/opt/chef/embedded/include -fPIC"
Merge branch 'ruby-O3'
CHEF-4141 - FreeBSD support for ncurses build

Use gmake, not make
CHEF-4141 - FreeBSD support for libedit

Requires modifying vi.c in a similar manner as the patch found in the
FreeBSD ports tree.

See: /usr/ports/devel/libedit/files/patch-vi.c
CHEF-4141 - FreeBSD support for libiconv build

Use gmake, not make
CHEF-4141 - splat