70 Commits

Author SHA256 Message Date
609521edef Accepting request 1322550 from home:Guillaume_G:branches:server:database:postgresql
- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch

OBS-URL: https://build.opensuse.org/request/show/1322550
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=116
2025-12-18 09:16:06 +00:00
4a5c2a17ac - Fix build with uring for post SLE15 code streams.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=114
2025-11-24 16:53:10 +00:00
6716aef3aa - Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=113
2025-11-14 17:14:07 +00:00
3b30d34107 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=112 2025-11-13 15:50:36 +00:00
fff114a2df - Upgrade to 13.23:
* https://www.postgresql.org/docs/release/13.23/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=111
2025-11-13 14:34:32 +00:00
045e03b315 Accepting request 1307146 from server:database:postgresql:devel
- Sync spec file from version 18

OBS-URL: https://build.opensuse.org/request/show/1307146
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=108
2025-09-25 14:15:49 +00:00
d9e64224b1 Accepting request 1299463 from server:database:postgresql:devel
https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/

OBS-URL: https://build.opensuse.org/request/show/1299463
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=106
2025-08-14 20:11:33 +00:00
692a53bb66 - Upgrade to 13.21:
* bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/13.21/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=104
2025-05-09 12:02:23 +00:00
fcdc80f955 - Upgrade to 13.20:
* Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/13.20/
  * https://www.postgresql.org/about/news/p-3018/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=102
2025-02-20 16:34:04 +00:00
5922a93776 - Upgrade to 13.19:
* bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/13.19/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=100
2025-02-13 14:50:48 +00:00
f92e7b1276 - Fix build, add postgresql-tzdata2025a.patch
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=97
2025-01-28 12:35:17 +00:00
de0b311438 - Upgrade to 13.18:
* Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/13.18/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=95
2024-11-21 17:45:12 +00:00
9c8486ebd9 - Upgrade to 13.17:
* CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/13.17/
  * https://www.postgresql.org/about/news/p-2910/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=93
2024-11-14 14:16:21 +00:00
ab1505da2b - Pull upstream patch to fix tests with timezone 2024b
* postgresql-testsuite-timezone-fix.patch

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=92
2024-11-05 14:00:46 +00:00
6b4d312542 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=91 2024-09-26 14:38:02 +00:00
de9e0ceb66 https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=89
2024-08-10 14:37:23 +00:00
fbb13fc152 - Upgrade to 13.15 (bsc#1224051):
* Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/13.15/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.
  * https://www.postgresql.org/docs/release/13.14/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=87
2024-05-09 15:31:24 +00:00
378f497d09 CVE-2024-4317
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=86
2024-05-09 14:13:25 +00:00
607bd70ab2 Accepting request 1171158 from home:aaronpuchert:branches:server:database:postgresql
- Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work.

OBS-URL: https://build.opensuse.org/request/show/1171158
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=85
2024-05-02 07:15:37 +00:00
1ee13f43ab - Remove constraints file because improved memory usage for s390x
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=84
2024-03-11 09:21:20 +00:00
638c494aab Accepting request 1153288 from home:dimstar:rpm4.20:p
Prepare for RPM 4.20

OBS-URL: https://build.opensuse.org/request/show/1153288
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=82
2024-03-04 14:16:20 +00:00
0bce075cdc - Upgrade to 13.14:
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.4/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=80
2024-02-08 15:24:49 +00:00
4d729a79d9 November 2023 Security Updates
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=78
2023-11-09 14:44:44 +00:00
0bae97849d - boo#1216734: Revert the last change and make the devel package
independend of all other subpackages except for the libs.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=76
2023-10-31 11:04:31 +00:00
e721f8c60d - boo#1216022: Call install-alternatives from the devel subpackage
as well, otherwise the symlink for ecpg might be missing.

- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=74
2023-10-10 13:13:02 +00:00
c9de63a30f - Update to 13.12:
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=72
2023-08-10 13:36:21 +00:00
b6b4b53394 - Restore the independence of mini builds from the main build after
the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=71
2023-05-26 12:03:19 +00:00
6422a3b974 - Overhaul postgresql-README.SUSE and move it from the binary
package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=70
2023-05-15 14:54:20 +00:00
51defcdfc1 - Update to 13.11:
* bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=68
2023-05-11 13:19:18 +00:00
68f95fa971 - bsc#1210303: Stop using the obsolete internal %_restart_on_update
macro and drop support for sysv init to simplify the scriptlets.

- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=65
2023-04-18 14:02:56 +00:00
a987949d06 - Update to 13.10:
* CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=63
2023-02-09 14:32:13 +00:00
fed67ff9b4 - bsc#1205300: Update to 13.9:
* https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=61
2022-11-10 16:35:33 +00:00
1a36523895 - Sync spec file with postgresql15.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=58
2022-09-23 14:11:55 +00:00
7d4b27ba5a - Add generic mechanism to pin to latest supported LLVM version.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=57
2022-09-23 12:44:57 +00:00
92f5605815 Accepting request 1003037 from openSUSE:Factory:RISCV
- Disable LLVM JIT on riscv64

OBS-URL: https://build.opensuse.org/request/show/1003037
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=56
2022-09-13 11:53:01 +00:00
840763f0e6 - Update to 13.8:
* bsc#1202368, CVE-2022-2625: Extension scripts replace objects
    not belonging to the extension.
  * https://www.postgresql.org/docs/release/13.8/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=54
2022-08-15 09:56:04 +00:00
442f9d54e3 - Upgrade to 13.7:
* bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/13/release-13-7.html
  * https://www.postgresql.org/docs/13/release-13-5.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=52
2022-05-12 14:53:06 +00:00
bc4d5bb01a - bsc#1198166: Pin to llvm13 until the next patchlevel update.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=50
2022-04-13 12:21:23 +00:00
22bd0b70c5 - bsc#1195680: Upgrade to 13.6:
* https://www.postgresql.org/docs/13/release-13-6.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.
- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=49
2022-02-10 15:27:11 +00:00
30a5f68fc1 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=48 2021-12-02 13:44:09 +00:00
4c10a40cb3 - Add a llvmjit-devel subpackage to pull in the right versions
of clang and llvm for building extensions.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=44
2021-11-30 16:49:34 +00:00
f8597e260a - bsc#1192516: Upgrade to 13.5:
* Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/13/release-13-4.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=43
2021-11-11 14:58:14 +00:00
8b46c99306 Accepting request 926787 from home:AdaLovelace:branches:openSUSE:Factory:zSystems
- boo#1190740: Add constraints file with 8GB memory for s390x as 
  a workaround for a memory issue with LLVM

OBS-URL: https://build.opensuse.org/request/show/926787
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=42
2021-10-21 15:47:16 +00:00
434c50e89c - Remove postgresql-testsuite-int8.sql.patch, because its purpose
is unclear. This affects only the test subpackage.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=41
2021-10-06 14:15:37 +00:00
c64cfd2822 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=40 2021-10-05 11:44:09 +00:00
a7e71adb47 - Simplify file list generation.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=39
2021-10-05 11:16:03 +00:00
d0dd1c7056 - Stop building the mini and lib packages as they are now coming
from postgresql14.
- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=38
2021-09-27 14:07:11 +00:00
a9fff1cea5 - bsc#1179945: Re-enable icu for PostgreSQL 10.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=35
2021-08-31 14:27:29 +00:00
242268e955 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=34 2021-08-31 11:46:39 +00:00
2379864865 - bsc#1185952: fix build with llvm12 on s390x.
0001-jit-Workaround-potential-datalayout-mismatch-on-s390.patch

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=32
2021-08-31 11:16:37 +00:00