Commit Graph

89 Commits

Author SHA256 Message Date
Ana Guerrero
b47250d9b7 Accepting request 1154712 from server:database:postgresql
OBS-URL: https://build.opensuse.org/request/show/1154712
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=28
2024-03-04 20:25:54 +00:00
Reinhard Max
929727e3a9 Accepting request 1153288 from home:dimstar:rpm4.20:p
Prepare for RPM 4.20

OBS-URL: https://build.opensuse.org/request/show/1153288
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=82
2024-03-04 14:16:20 +00:00
Ana Guerrero
9ba792710a Accepting request 1145272 from server:database:postgresql
- Upgrade to 13.14:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.4/

OBS-URL: https://build.opensuse.org/request/show/1145272
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=27
2024-02-09 22:52:57 +00:00
Reinhard Max
9797fa906c - Upgrade to 13.14:
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/13.4/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=80
2024-02-08 15:24:49 +00:00
Ana Guerrero
0bc99382ab Accepting request 1124706 from server:database:postgresql
November 2023 Security Updates

OBS-URL: https://build.opensuse.org/request/show/1124706
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=26
2023-11-09 20:36:14 +00:00
Reinhard Max
0e1cc7606d November 2023 Security Updates
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=78
2023-11-09 14:44:44 +00:00
Ana Guerrero
4f0fe7afa7 Accepting request 1121433 from server:database:postgresql
Revert last change and make the devel package independend

OBS-URL: https://build.opensuse.org/request/show/1121433
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=25
2023-10-31 19:26:32 +00:00
Reinhard Max
009fc88634 - boo#1216734: Revert the last change and make the devel package
independend of all other subpackages except for the libs.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=76
2023-10-31 11:04:31 +00:00
Ana Guerrero
e1aaa035ba Accepting request 1120252 from server:database:postgresql
- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.

- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.

OBS-URL: https://build.opensuse.org/request/show/1120252
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=24
2023-10-25 16:04:47 +00:00
Reinhard Max
0efd5a7c89 - boo#1216022: Call install-alternatives from the devel subpackage
as well, otherwise the symlink for ecpg might be missing.

- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=74
2023-10-10 13:13:02 +00:00
Dominique Leuenberger
69512f89e5 Accepting request 1103351 from server:database:postgresql
- Update to 13.12:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html

- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.

- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.

OBS-URL: https://build.opensuse.org/request/show/1103351
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=23
2023-08-11 13:55:44 +00:00
Reinhard Max
554b93a424 - Update to 13.12:
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/13/release-13-12.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=72
2023-08-10 13:36:21 +00:00
Reinhard Max
27d68739ef - Restore the independence of mini builds from the main build after
the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=71
2023-05-26 12:03:19 +00:00
Reinhard Max
bbfa0902cb - Overhaul postgresql-README.SUSE and move it from the binary
package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=70
2023-05-15 14:54:20 +00:00
Dominique Leuenberger
c6a3233116 Accepting request 1086556 from server:database:postgresql
- Update to 13.11:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html

OBS-URL: https://build.opensuse.org/request/show/1086556
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=22
2023-05-12 18:37:15 +00:00
Reinhard Max
da8e82d62f - Update to 13.11:
* bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/13/release-13-11.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=68
2023-05-11 13:19:18 +00:00
Dominique Leuenberger
82db7026ba Accepting request 1081147 from server:database:postgresql
- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.

- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.

OBS-URL: https://build.opensuse.org/request/show/1081147
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=21
2023-04-21 12:17:46 +00:00
Reinhard Max
9bae41c993 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=66 2023-04-19 13:26:38 +00:00
Reinhard Max
72a9f7df76 - bsc#1210303: Stop using the obsolete internal %_restart_on_update
macro and drop support for sysv init to simplify the scriptlets.

- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=65
2023-04-18 14:02:56 +00:00
Dominique Leuenberger
1cddf50a49 Accepting request 1064056 from server:database:postgresql
- Update to 13.10:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.

OBS-URL: https://build.opensuse.org/request/show/1064056
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=20
2023-02-10 13:33:53 +00:00
Reinhard Max
a7d87b9745 - Update to 13.10:
* CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/13/release-13-10.html
- Bump latest_supported_llvm_ver to 15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=63
2023-02-09 14:32:13 +00:00
Dominique Leuenberger
47ac148b5d Accepting request 1035217 from server:database:postgresql
- bsc#1205300: Update to 13.9:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.

OBS-URL: https://build.opensuse.org/request/show/1035217
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=19
2022-11-12 16:40:40 +00:00
Reinhard Max
15ffedd5be - bsc#1205300: Update to 13.9:
* https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/13/release-13-9.html
- Sync spec file with postgresql15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=61
2022-11-10 16:35:33 +00:00
Richard Brown
375127ece2 Accepting request 1006684 from server:database:postgresql
- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.
- Sync spec file with postgresql15.
- Disable LLVM JIT on riscv64

OBS-URL: https://build.opensuse.org/request/show/1006684
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=18
2022-10-04 18:37:26 +00:00
Reinhard Max
9c479b5d8f OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=59 2022-09-23 16:02:47 +00:00
Reinhard Max
879372ccb0 - Sync spec file with postgresql15.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=58
2022-09-23 14:11:55 +00:00
Reinhard Max
d3bcbd2969 - Add generic mechanism to pin to latest supported LLVM version.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=57
2022-09-23 12:44:57 +00:00
Reinhard Max
f9502278b0 Accepting request 1003037 from openSUSE:Factory:RISCV
- Disable LLVM JIT on riscv64

OBS-URL: https://build.opensuse.org/request/show/1003037
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=56
2022-09-13 11:53:01 +00:00
Dominique Leuenberger
e8f597751f Accepting request 995184 from server:database:postgresql
- Update to 13.8:
  * bsc#1202368, CVE-2022-2625: Extension scripts replace objects
    not belonging to the extension.
  * https://www.postgresql.org/docs/release/13.8/

OBS-URL: https://build.opensuse.org/request/show/995184
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=17
2022-08-16 15:06:43 +00:00
Reinhard Max
69b889ecd3 - Update to 13.8:
* bsc#1202368, CVE-2022-2625: Extension scripts replace objects
    not belonging to the extension.
  * https://www.postgresql.org/docs/release/13.8/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=54
2022-08-15 09:56:04 +00:00
Dominique Leuenberger
8631b42a95 Accepting request 977048 from server:database:postgresql
- Upgrade to 13.7:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/13/release-13-7.html

OBS-URL: https://build.opensuse.org/request/show/977048
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=16
2022-05-14 20:54:45 +00:00
Reinhard Max
8b2b5f1dc1 - Upgrade to 13.7:
* bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/13/release-13-7.html
  * https://www.postgresql.org/docs/13/release-13-5.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=52
2022-05-12 14:53:06 +00:00
Dominique Leuenberger
4bf0608837 Accepting request 969862 from server:database:postgresql
- bsc#1198166: Pin to llvm13 until the next patchlevel update.

- bsc#1195680: Upgrade to 13.6:
  * https://www.postgresql.org/docs/13/release-13-6.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.
- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround

OBS-URL: https://build.opensuse.org/request/show/969862
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=15
2022-04-14 15:22:59 +00:00
Reinhard Max
6112eb24ea - bsc#1198166: Pin to llvm13 until the next patchlevel update.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=50
2022-04-13 12:21:23 +00:00
Reinhard Max
5c58c0aebe - bsc#1195680: Upgrade to 13.6:
* https://www.postgresql.org/docs/13/release-13-6.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.
- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=49
2022-02-10 15:27:11 +00:00
Dominique Leuenberger
35209748fa Accepting request 935205 from server:database:postgresql
- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions. 
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.

OBS-URL: https://build.opensuse.org/request/show/935205
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=14
2021-12-06 22:59:24 +00:00
Reinhard Max
9f00a57e21 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=48 2021-12-02 13:44:09 +00:00
Reinhard Max
b86d3596f2 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=47 2021-11-30 19:03:55 +00:00
Reinhard Max
0eec778c1a OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=46 2021-11-30 18:52:48 +00:00
Reinhard Max
b0156e7b60 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=45 2021-11-30 17:13:10 +00:00
Reinhard Max
99c63d9f7d - Add a llvmjit-devel subpackage to pull in the right versions
of clang and llvm for building extensions.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=44
2021-11-30 16:49:34 +00:00
Dominique Leuenberger
7c70ce31d1 Accepting request 930950 from server:database:postgresql
- bsc#1192516: Upgrade to 13.5:
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/13/release-13-4.html

OBS-URL: https://build.opensuse.org/request/show/930950
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=13
2021-11-13 21:48:09 +00:00
Reinhard Max
4c09c871a7 - bsc#1192516: Upgrade to 13.5:
* Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/13/release-13-4.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=43
2021-11-11 14:58:14 +00:00
Reinhard Max
8563bdf93b Accepting request 926787 from home:AdaLovelace:branches:openSUSE:Factory:zSystems
- boo#1190740: Add constraints file with 8GB memory for s390x as 
  a workaround for a memory issue with LLVM

OBS-URL: https://build.opensuse.org/request/show/926787
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=42
2021-10-21 15:47:16 +00:00
Dominique Leuenberger
75560c4a56 Accepting request 923701 from server:database:postgresql
- Stop building the mini and lib packages as they are now coming
  from postgresql14.
- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.
- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.

OBS-URL: https://build.opensuse.org/request/show/923701
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=12
2021-10-12 19:48:00 +00:00
Reinhard Max
1d2ea82175 - Remove postgresql-testsuite-int8.sql.patch, because its purpose
is unclear. This affects only the test subpackage.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=41
2021-10-06 14:15:37 +00:00
Reinhard Max
c5a36ee1e0 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=40 2021-10-05 11:44:09 +00:00
Reinhard Max
1b8b7fdba8 - Simplify file list generation.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=39
2021-10-05 11:16:03 +00:00
Reinhard Max
755759be37 - Stop building the mini and lib packages as they are now coming
from postgresql14.
- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql13?expand=0&rev=38
2021-09-27 14:07:11 +00:00
Dominique Leuenberger
c37f70a862 Accepting request 917542 from server:database:postgresql
- bsc#1185952: fix build with llvm12 on s390x.
  0001-jit-Workaround-potential-datalayout-mismatch-on-s390.patch 
- bsc#1179945: Re-enable icu for PostgreSQL 10.

- Upgrade to version 13.4:
  https://www.postgresql.org/docs/13/release-13-4.html
  * CVE-2021-3677 (boo#1189748)
    The planner could create an incorrect plan in cases where two
    ProjectionPaths were stacked on top of each other. The only
    known way to trigger that situation involves parallel sort
    operations, but there may be other instances. The result would
    be crashes or incorrect query results. Disclosure of server
    memory contents is also possible.

- bsc#1187751: Make the dependency of postgresqlXX-server-devel on
  llvm and clang optional (postgresql-llvm-optional.patch).

OBS-URL: https://build.opensuse.org/request/show/917542
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql13?expand=0&rev=11
2021-09-13 14:24:18 +00:00