Sync from SUSE:SLFO:Main postgresql14 revision ada18a2faebe8ace19badee5998b8d9f

postgresql-14.17.tar.bz2.sha256

@@ -1 +0,0 @@
-6ce0ccd6403bf7f0f2eddd333e2ee9ba02edfa977c66660ed9b4b1057e7630a1  postgresql-14.17.tar.bz2

postgresql-14.18.tar.bz2.sha256

@@ -0,0 +1 @@
+83ab29d6bfc3dc58b2ed3c664114fdfbeb6a0450c4b8d7fa69aee91e3ca14f8e  postgresql-14.18.tar.bz2

postgresql14.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Fri May  9 11:54:41 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Upgrade to 14.18:
+  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
+    encoding validation can read one byte past end of allocation
+    for text that fails validation.
+  * https://www.postgresql.org/docs/release/14.18/
+  * https://www.postgresql.org/about/news/p-3072/
+- Add postresql-pg_config_paths.patch to fix a race condition
+  while generating pg_config_paths.h.
+
 -------------------------------------------------------------------
 Tue Feb 18 11:36:44 UTC 2025 - Reinhard Max <max@suse.com>
 
@@ -19,6 +31,7 @@ Tue Feb 18 11:36:44 UTC 2025 - Reinhard Max <max@suse.com>
     the quoted string.
   * Fix small memory leak in pg_createsubscriber.
   * https://www.postgresql.org/docs/release/14.17/
+  * https://www.postgresql.org/about/news/p-3018/
 
 -------------------------------------------------------------------
 Tue Feb 11 14:27:58 UTC 2025 - Reinhard Max <max@suse.com>

postgresql14.spec

@@ -16,7 +16,7 @@
 #
 
 
-%define pgversion 14.17
+%define pgversion 14.18
 %define pgmajor 14
 %define buildlibs 0
 %define tarversion %{pgversion}
@@ -182,6 +182,7 @@ Source1:        https://ftp.postgresql.org/pub/source/v%{tarversion}/postgresql-
 Source2:        baselibs.conf
 Source17:       postgresql-rpmlintrc
 Patch1:         postgresql-conf.patch
+Patch2:         postresql-pg_config_paths.patch
 # PL/Perl needs to be linked with rpath (bsc#578053)
 Patch4:         postgresql-plperl-keep-rpath.patch
 Patch8:         postgresql-testsuite-keep-results-file.patch
@@ -517,6 +518,7 @@ included in the postgresql-server package.
 # confuse PostgreSQL's build system
 touch -r configure tmp
 %patch -P 1
+%patch -P 2
 %patch -P 4
 %patch -P 8
 %patch -P 9

postresql-pg_config_paths.patch

@@ -0,0 +1,35 @@
+--- src/port/Makefile.orig
++++ src/port/Makefile
+@@ -145,18 +145,20 @@ path_srv.o: path.c pg_config_paths.h
+ # because many of these values come from makefiles and are not
+ # available to configure.
+ pg_config_paths.h: $(top_builddir)/src/Makefile.global
+-	echo "#define PGBINDIR \"$(bindir)\"" >$@
+-	echo "#define PGSHAREDIR \"$(datadir)\"" >>$@
+-	echo "#define SYSCONFDIR \"$(sysconfdir)\"" >>$@
+-	echo "#define INCLUDEDIR \"$(includedir)\"" >>$@
+-	echo "#define PKGINCLUDEDIR \"$(pkgincludedir)\"" >>$@
+-	echo "#define INCLUDEDIRSERVER \"$(includedir_server)\"" >>$@
+-	echo "#define LIBDIR \"$(libdir)\"" >>$@
+-	echo "#define PKGLIBDIR \"$(pkglibdir)\"" >>$@
+-	echo "#define LOCALEDIR \"$(localedir)\"" >>$@
+-	echo "#define DOCDIR \"$(docdir)\"" >>$@
+-	echo "#define HTMLDIR \"$(htmldir)\"" >>$@
+-	echo "#define MANDIR \"$(mandir)\"" >>$@
++	T=`mktemp -p .`; \
++	echo "#define PGBINDIR \"$(bindir)\"" >>$$T; \
++	echo "#define PGSHAREDIR \"$(datadir)\"" >>$$T; \
++	echo "#define SYSCONFDIR \"$(sysconfdir)\"" >>$$T; \
++	echo "#define INCLUDEDIR \"$(includedir)\"" >>$$T; \
++	echo "#define PKGINCLUDEDIR \"$(pkgincludedir)\"" >>$$T; \
++	echo "#define INCLUDEDIRSERVER \"$(includedir_server)\"" >>$$T; \
++	echo "#define LIBDIR \"$(libdir)\"" >>$$T; \
++	echo "#define PKGLIBDIR \"$(pkglibdir)\"" >>$$T; \
++	echo "#define LOCALEDIR \"$(localedir)\"" >>$$T; \
++	echo "#define DOCDIR \"$(docdir)\"" >>$$T; \
++	echo "#define HTMLDIR \"$(htmldir)\"" >>$$T; \
++	echo "#define MANDIR \"$(mandir)\"" >>$$T; \
++	mv $$T $@
+ 
+ clean distclean maintainer-clean:
+ 	rm -f libpgport.a libpgport_shlib.a libpgport_srv.a