Ana Guerrero
50862f95fc
Accepting request 1225753 from server:database:postgresql
...
- Upgrade to 12.22:
* Restore functionality of ALTER {ROLE|DATABASE} SET role
* https://www.postgresql.org/about/news/p-2965/
* https://www.postgresql.org/docs/release/12.22/
OBS-URL: https://build.opensuse.org/request/show/1225753
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=37
2024-11-22 22:52:00 +00:00
Reinhard Max
58766a9fcf
- Upgrade to 12.22:
...
* Restore functionality of ALTER {ROLE|DATABASE} SET role
* https://www.postgresql.org/about/news/p-2965/
* https://www.postgresql.org/docs/release/12.22/
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=110
2024-11-21 17:44:36 +00:00
Ana Guerrero
81b05607ee
Accepting request 1224296 from server:database:postgresql
...
- Upgrade to 12.21:
* CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
dependent on the calling role when RLS applies to a
non-top-level table reference.
* CVE-2024-10977, bsc#1233325: Make libpq discard error messages
received during SSL or GSS protocol negotiation.
* CVE-2024-10978, bsc#1233326: Fix unintended interactions
between SET SESSION AUTHORIZATION and SET ROLE
* CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
changing environment variables.
* https://www.postgresql.org/about/news/p-2955/
* https://www.postgresql.org/docs/release/12.21/
- Sync spec file from postgresql17.
* https://www.postgresql.org/about/news/p-2910/
OBS-URL: https://build.opensuse.org/request/show/1224296
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=36
2024-11-15 14:43:22 +00:00
Reinhard Max
ac6f35f50c
- Upgrade to 12.21:
...
* CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
dependent on the calling role when RLS applies to a
non-top-level table reference.
* CVE-2024-10977, bsc#1233325: Make libpq discard error messages
received during SSL or GSS protocol negotiation.
* CVE-2024-10978, bsc#1233326: Fix unintended interactions
between SET SESSION AUTHORIZATION and SET ROLE
* CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
changing environment variables.
* https://www.postgresql.org/about/news/p-2955/
* https://www.postgresql.org/docs/release/12.21/
* https://www.postgresql.org/about/news/p-2910/
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=108
2024-11-14 14:15:17 +00:00
Reinhard Max
dd867a2851
- Sync spec file from postgresql17.
...
- Pull upstream patch to fix tests with timezone 2024b
* postgresql-testsuite-timezone-fix.patch
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=107
2024-11-05 14:03:35 +00:00
Reinhard Max
b5bc7f0a98
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=106
2024-09-26 14:37:44 +00:00
Ana Guerrero
14c94d23b8
Accepting request 1201983 from server:database:postgresql
...
- Upgrade to 12.20 (bsc#1229013):
* bsc#1229013, CVE-2024-7348 PostgreSQL relation replacement
during pg_dump executes arbitrary SQL
* https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/
* https://www.postgresql.org/docs/release/12.20/
OBS-URL: https://build.opensuse.org/request/show/1201983
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=35
2024-09-19 19:17:54 +00:00
bfbac990e8
https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/
...
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=104
2024-08-10 14:37:05 +00:00
Reinhard Max
a9bf787362
typo
...
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=103
2024-05-15 08:18:19 +00:00
Dominique Leuenberger
376af59aa1
Accepting request 1172964 from server:database:postgresql
...
- Upgrade to 12.19 (bsc#1224051):
* Fix incompatibility with LLVM 18.
* https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.
- Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work.
- Remove constraints file because improved memory usage for s390x
OBS-URL: https://build.opensuse.org/request/show/1172964
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=34
2024-05-10 10:05:21 +00:00
Reinhard Max
ba7da7202e
- Upgrade to 12.19 (bsc#1224051):
...
* Fix incompatibility with LLVM 18.
* https://www.postgresql.org/docs/release/12.19/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=101
2024-05-09 15:33:52 +00:00
481e8e504e
CVE-2024-4317
...
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=100
2024-05-09 14:13:19 +00:00
Reinhard Max
76fc3dce47
Accepting request 1171158 from home:aaronpuchert:branches:server:database:postgresql
...
- Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work.
OBS-URL: https://build.opensuse.org/request/show/1171158
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=99
2024-05-02 07:15:36 +00:00
Reinhard Max
6c6a0f5d9f
- Remove constraints file because improved memory usage for s390x
...
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=98
2024-03-11 09:21:53 +00:00
Ana Guerrero
f5b48c393a
Accepting request 1154709 from server:database:postgresql
...
OBS-URL: https://build.opensuse.org/request/show/1154709
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=33
2024-03-04 20:25:49 +00:00
Reinhard Max
91c7c93a1a
Accepting request 1153295 from home:dimstar:rpm4.20:p
...
Prepare for RPM 4.20
OBS-URL: https://build.opensuse.org/request/show/1153295
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=96
2024-03-04 14:16:06 +00:00
Ana Guerrero
69db83cf17
Accepting request 1145273 from server:database:postgresql
...
- Upgrade to 12.18:
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
within REFRESH MATERIALIZED VIEW CONCURRENTLY.
One step of a concurrent refresh command was run under weak
security restrictions. If a materialized view's owner could
persuade a superuser or other high-privileged user to perform a
concurrent refresh on that view, the view's owner could control
code executed with the privileges of the user running REFRESH.
Fix things so that all user-determined code is run as the
view's owner, as expected
* If you use GIN indexes, you may need to reindex after updating
to this release.
* LLVM 18 is now supported.
* https://www.postgresql.org/docs/release/12.18/
- Update to 12.17:
* bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
arguments in DISTINCT "any" aggregate functions. This error led
to a text-type value being interpreted as an unknown-type value
(that is, a zero-terminated string) at runtime. This could
result in disclosure of server memory following the text value.
* bsc#1216961, CVE-2023-5869: Detect integer overflow while
computing new array dimensions. When assigning new elements to
array subscripts that are outside the current array bounds, an
undetected integer overflow could occur in edge cases. Memory
stomps that are potentially exploitable for arbitrary code
execution are possible, and so is disclosure of server memory.
* bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
from signalling background workers and autovacuum processes.
The documentation says that pg_signal_backend cannot issue
OBS-URL: https://build.opensuse.org/request/show/1145273
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=32
2024-02-09 22:52:58 +00:00
Reinhard Max
2e2b4a38db
- Upgrade to 12.18:
...
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
within REFRESH MATERIALIZED VIEW CONCURRENTLY.
One step of a concurrent refresh command was run under weak
security restrictions. If a materialized view's owner could
persuade a superuser or other high-privileged user to perform a
concurrent refresh on that view, the view's owner could control
code executed with the privileges of the user running REFRESH.
Fix things so that all user-determined code is run as the
view's owner, as expected
* If you use GIN indexes, you may need to reindex after updating
to this release.
* LLVM 18 is now supported.
* https://www.postgresql.org/docs/release/12.18/
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=94
2024-02-08 15:26:36 +00:00
Reinhard Max
6923d19d72
November 2023 Security Updates
...
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=93
2023-11-09 14:43:25 +00:00
Ana Guerrero
9535d3dc2f
Accepting request 1121432 from server:database:postgresql
...
Revert last change and make the devel package independend
OBS-URL: https://build.opensuse.org/request/show/1121432
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=31
2023-10-31 19:26:30 +00:00
Reinhard Max
9e5cf987b7
- boo#1216734: Revert the last change and make the devel package
...
independend of all other subpackages except for the libs.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=91
2023-10-31 11:05:07 +00:00
Ana Guerrero
b4ae1bfbbc
Accepting request 1120253 from server:database:postgresql
...
- boo#1216022: Call install-alternatives from the devel subpackage
as well, otherwise the symlink for ecpg might be missing.
- Also buildignore the postgresql*-implementation symbols: this is
needed in order to bootstrap when no postgresql version currently
has valid symbols provided. Once the packages are built, OBS
could translate this to the pgname-* packages and accept the
ignores; during bootstrap though, there is nothing providing the
symbol and the existing buildignores do not suffice.
OBS-URL: https://build.opensuse.org/request/show/1120253
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=30
2023-10-25 16:04:49 +00:00
Reinhard Max
70f264061c
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=89
2023-10-10 14:54:09 +00:00
Reinhard Max
1a20e3016b
- boo#1216022: Call install-alternatives from the devel subpackage
...
as well, otherwise the symlink for ecpg might be missing.
- Also buildignore the postgresql*-implementation symbols: this is
needed in order to bootstrap when no postgresql version currently
has valid symbols provided. Once the packages are built, OBS
could translate this to the pgname-* packages and accept the
ignores; during bootstrap though, there is nothing providing the
symbol and the existing buildignores do not suffice.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=88
2023-10-10 13:13:29 +00:00
Dominique Leuenberger
527f9ebcd6
Accepting request 1103350 from server:database:postgresql
...
- Update to 12.16:
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
owner name into an extension script if the name contains a
quote, backslash, or dollar sign.
* https://www.postgresql.org/docs/12/release-12-16.html
- Restore the independence of mini builds from the main build after
the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.
- Overhaul postgresql-README.SUSE and move it from the binary
package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.
OBS-URL: https://build.opensuse.org/request/show/1103350
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=29
2023-08-11 13:55:42 +00:00
Reinhard Max
0c9821a301
- Update to 12.16:
...
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
owner name into an extension script if the name contains a
quote, backslash, or dollar sign.
* https://www.postgresql.org/docs/12/release-12-16.html
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=86
2023-08-10 15:25:53 +00:00
Reinhard Max
383c21ac44
- Restore the independence of mini builds from the main build after
...
the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=85
2023-05-26 12:03:32 +00:00
Reinhard Max
581cdd5cc5
- Overhaul postgresql-README.SUSE and move it from the binary
...
package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=84
2023-05-15 14:55:37 +00:00
Dominique Leuenberger
f082e4eca2
Accepting request 1086557 from server:database:postgresql
...
- Update to 12.15:
* bsc#1211228, CVE-2023-2454:
Prevent CREATE SCHEMA from defeating changes in search_path
* bsc#1211229, CVE-2023-2455: Enforce row-level security
policies correctly after inlining a set-returning function
* https://www.postgresql.org/about/news/2637/
* https://www.postgresql.org/docs/12/release-12-15.html
OBS-URL: https://build.opensuse.org/request/show/1086557
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=28
2023-05-12 18:37:16 +00:00
Reinhard Max
6ae799d8be
- Update to 12.15:
...
* bsc#1211228, CVE-2023-2454:
Prevent CREATE SCHEMA from defeating changes in search_path
* bsc#1211229, CVE-2023-2455: Enforce row-level security
policies correctly after inlining a set-returning function
* https://www.postgresql.org/about/news/2637/
* https://www.postgresql.org/docs/12/release-12-15.html
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=82
2023-05-11 13:19:45 +00:00
Dominique Leuenberger
0143c2463f
Accepting request 1081148 from server:database:postgresql
...
- bsc#1210303: Stop using the obsolete internal %_restart_on_update
macro and drop support for sysv init to simplify the scriptlets.
- Include -mini in Name: to avoid conflicts in the source package
name and OBS internal dependency tracking.
OBS-URL: https://build.opensuse.org/request/show/1081148
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=27
2023-04-21 12:17:48 +00:00
Reinhard Max
fde8e83a71
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=80
2023-04-19 13:27:02 +00:00
Reinhard Max
79bc144101
- bsc#1210303: Stop using the obsolete internal %_restart_on_update
...
macro and drop support for sysv init to simplify the scriptlets.
- Include -mini in Name: to avoid conflicts in the source package
name and OBS internal dependency tracking.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=79
2023-04-18 14:04:58 +00:00
Dominique Leuenberger
8f75499fa8
Accepting request 1064057 from server:database:postgresql
...
- Update to 12.14:
* CVE-2022-41862, bsc#1208102: memory leak in libpq
* https://www.postgresql.org/about/news/2592/
* https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.
OBS-URL: https://build.opensuse.org/request/show/1064057
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=26
2023-02-10 13:33:54 +00:00
Reinhard Max
9da35c824e
- Update to 12.14:
...
* CVE-2022-41862, bsc#1208102: memory leak in libpq
* https://www.postgresql.org/about/news/2592/
* https://www.postgresql.org/docs/12/release-12-14.html
- Bump latest_supported_llvm_ver to 15.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=77
2023-02-09 14:39:22 +00:00
Dominique Leuenberger
4a707c7267
Accepting request 1035216 from server:database:postgresql
...
- bsc#1205300: Update to 12.13:
* https://www.postgresql.org/about/news/2543/
* https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.
OBS-URL: https://build.opensuse.org/request/show/1035216
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=25
2022-11-12 16:40:39 +00:00
Reinhard Max
290ea0293c
- bsc#1205300: Update to 12.13:
...
* https://www.postgresql.org/about/news/2543/
* https://www.postgresql.org/docs/12/release-12-13.html
- Sync spec file with postgresql15.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=75
2022-11-10 16:35:13 +00:00
Richard Brown
6d8dfc2516
Accepting request 1006685 from server:database:postgresql
...
- Create mechanism to specify the latest supported LLVM version.
Automatically pin to that version if the distribution has a newer
unsupported default version.
- Sync spec file with postgresql15.
- Disable LLVM JIT on riscv64
OBS-URL: https://build.opensuse.org/request/show/1006685
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=24
2022-10-04 18:37:28 +00:00
Reinhard Max
5224d7ae28
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=73
2022-09-23 16:03:25 +00:00
Reinhard Max
9aed76975f
- Sync spec file with postgresql15.
...
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=72
2022-09-23 14:12:50 +00:00
Reinhard Max
9805c47fe5
- Add generic mechanism to pin to latest supported LLVM version.
...
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=71
2022-09-23 12:44:56 +00:00
Reinhard Max
bf8c3b5bee
Accepting request 1003030 from openSUSE:Factory:RISCV
...
- Disable LLVM JIT on riscv64
OBS-URL: https://build.opensuse.org/request/show/1003030
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=70
2022-09-13 11:52:41 +00:00
Dominique Leuenberger
8e9558be49
Accepting request 995183 from server:database:postgresql
...
- - Update to 12.12:
* bsc#1202368, CVE-2022-2625: Extension scripts replace objects
not belonging to the extension.
* https://www.postgresql.org/docs/release/12.12/
OBS-URL: https://build.opensuse.org/request/show/995183
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=23
2022-08-16 15:06:42 +00:00
Reinhard Max
8bb87708c2
- - Update to 12.12:
...
* bsc#1202368, CVE-2022-2625: Extension scripts replace objects
not belonging to the extension.
* https://www.postgresql.org/docs/release/12.12/
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=68
2022-08-15 09:56:25 +00:00
Dominique Leuenberger
004b297213
Accepting request 977047 from server:database:postgresql
...
- Update to 12.11:
* bsc#1199475, CVE-2022-1552: Confine additional operations
within "security restricted operation" sandboxes.
* https://www.postgresql.org/docs/12/release-12-11.html
OBS-URL: https://build.opensuse.org/request/show/977047
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=22
2022-05-14 20:54:44 +00:00
Reinhard Max
bd272e6ae4
- Update to 12.11:
...
* bsc#1199475, CVE-2022-1552: Confine additional operations
within "security restricted operation" sandboxes.
* https://www.postgresql.org/docs/12/release-12-11.html
* https://www.postgresql.org/docs/12/release-12-9.html
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=66
2022-05-12 14:52:46 +00:00
Dominique Leuenberger
7ae7d8348d
Accepting request 969863 from server:database:postgresql
...
- bsc#1198166: Pin to llvm13 until the next patchlevel update.
- bsc#1195680: Upgrade to 12.10:
* https://www.postgresql.org/docs/12/release-12-10.html
* Reindexing might be needed after applying this upgrade, so
please read the release notes carefully.
- boo#1190740: Add constraints file with 12GB of memory for s390x
as a workaround
OBS-URL: https://build.opensuse.org/request/show/969863
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=21
2022-04-14 15:23:00 +00:00
Reinhard Max
897680f1c8
- bsc#1198166: Pin to llvm13 until the next patchlevel update.
...
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=64
2022-04-13 12:22:11 +00:00
Reinhard Max
132983986f
- bsc#1195680: Upgrade to 12.10:
...
* https://www.postgresql.org/docs/12/release-12-10.html
* Reindexing might be needed after applying this upgrade, so
please read the release notes carefully.
- boo#1190740: Add constraints file with 12GB of memory for s390x
as a workaround
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=63
2022-02-10 15:27:35 +00:00
Dominique Leuenberger
0df12f1a0c
Accepting request 935206 from server:database:postgresql
...
- Add a llvmjit-devel subpackage to pull in the right versions
of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
implementation packages and their noarch counterpart.
- Update the BuildIgnore section.
OBS-URL: https://build.opensuse.org/request/show/935206
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql12?expand=0&rev=20
2021-12-06 22:59:25 +00:00