Compare commits

..

No commits in common. "factory" and "factory" have entirely different histories.

6 changed files with 25 additions and 107 deletions

3
postgresql-13.15.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:42edd415446d33b8c242be76d1ad057531b2264b2e86939339b7075c6e4ec925
size 21597871

View File

@ -0,0 +1 @@
42edd415446d33b8c242be76d1ad057531b2264b2e86939339b7075c6e4ec925 postgresql-13.15.tar.bz2

BIN
postgresql-13.20.tar.bz2 (Stored with Git LFS)

Binary file not shown.

View File

@ -1 +0,0 @@
8134b685724d15e60d93bea206fbe0f14c8295e84f1cc91d5a3928163e4fb288 postgresql-13.20.tar.bz2

View File

@ -1,86 +1,3 @@
-------------------------------------------------------------------
Tue Feb 18 11:36:44 UTC 2025 - Reinhard Max <max@suse.com>
- Upgrade to 13.20:
* Improve behavior of libpq's quoting functions:
The changes made for CVE-2025-1094 had one serious oversight:
PQescapeLiteral() and PQescapeIdentifier() failed to honor
their string length parameter, instead always reading to the
input string's trailing null. This resulted in including
unwanted text in the output, if the caller intended to
truncate the string via the length parameter. With very bad
luck it could cause a crash due to reading off the end of
memory.
In addition, modify all these quoting functions so that when
invalid encoding is detected, an invalid sequence is
substituted for just the first byte of the presumed
character, not all of it. This reduces the risk of problems
if a calling application performs additional processing on
the quoted string.
* Fix small memory leak in pg_createsubscriber.
* https://www.postgresql.org/docs/release/13.20/
* https://www.postgresql.org/about/news/p-3018/
-------------------------------------------------------------------
Tue Feb 11 14:27:58 UTC 2025 - Reinhard Max <max@suse.com>
- Upgrade to 13.19:
* bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
functions against invalidly-encoded input strings.
* obsoletes postgresql-tzdata2025a.patch
* https://www.postgresql.org/docs/release/13.19/
* https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64
-------------------------------------------------------------------
Tue Jan 28 12:23:29 UTC 2025 - Reinhard Max <max@suse.com>
- Fix build, add postgresql-tzdata2025a.patch
-------------------------------------------------------------------
Tue Nov 19 14:17:26 UTC 2024 - Reinhard Max <max@suse.com>
- Upgrade to 13.18:
* Restore functionality of ALTER {ROLE|DATABASE} SET role.
* Fix cases where a logical replication slot's restart_lsn could
go backwards.
* Count index scans in contrib/bloom indexes in the statistics
views, such as the pg_stat_user_indexes.idx_scan counter.
* Fix crash when checking to see if an index's opclass options
have changed.
* https://www.postgresql.org/about/news/p-2965/
* https://www.postgresql.org/docs/release/13.18/
-------------------------------------------------------------------
Wed Nov 13 13:30:13 UTC 2024 - Reinhard Max <max@suse.com>
- Upgrade to 13.17:
* CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
dependent on the calling role when RLS applies to a
non-top-level table reference.
* CVE-2024-10977, bsc#1233325: Make libpq discard error messages
received during SSL or GSS protocol negotiation.
* CVE-2024-10978, bsc#1233326: Fix unintended interactions
between SET SESSION AUTHORIZATION and SET ROLE
* CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
changing environment variables.
* https://www.postgresql.org/about/news/p-2955/
* https://www.postgresql.org/docs/release/13.17/
-------------------------------------------------------------------
Tue Nov 5 14:00:20 UTC 2024 - Reinhard Max <max@suse.com>
- Sync spec file from postgresql17.
-------------------------------------------------------------------
Sat Aug 10 14:13:54 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- Upgrade to 13.16 (bsc#1229013):
* bsc#1229013, CVE-2024-7348 PostgreSQL relation replacement
during pg_dump executes arbitrary SQL
* https://www.postgresql.org/about/news/p-2910/
* https://www.postgresql.org/docs/release/13.16/
------------------------------------------------------------------- -------------------------------------------------------------------
Wed May 8 14:10:27 UTC 2024 - Reinhard Max <max@suse.com> Wed May 8 14:10:27 UTC 2024 - Reinhard Max <max@suse.com>

View File

@ -1,7 +1,7 @@
# #
# spec file for package postgresql13 # spec file for package postgresql13
# #
# Copyright (c) 2025 SUSE LLC # Copyright (c) 2024 SUSE LLC
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed # remain the property of their copyright owners, unless otherwise agreed
@ -16,13 +16,11 @@
# #
%define pgversion 13.20 %define pgversion 13.15
%define pgmajor 13 %define pgmajor 13
%define buildlibs 0 %define buildlibs 0
%define tarversion %{pgversion} %define tarversion %{pgversion}
%define oldest_supported_llvm_ver 10 %define latest_supported_llvm_ver 17
# To be able to use cmake(LLVM) < ...
%define latest_supported_llvm_ver_plus_one 19
### CUT HERE ### ### CUT HERE ###
%define pgname postgresql%pgmajor %define pgname postgresql%pgmajor
@ -62,7 +60,7 @@ Name: %pgname
%endif %endif
%if %pgmajor >= 17 %if %pgmajor >= 17
%bcond_with derived %bcond_with dreived
%else %else
%bcond_without derived %bcond_without derived
%endif %endif
@ -75,12 +73,6 @@ Name: %pgname
%bcond_without libzstd %bcond_without libzstd
%endif %endif
%if %{without derived}
BuildRequires: bison
BuildRequires: docbook-xsl-stylesheets
BuildRequires: flex
BuildRequires: perl
%endif
%if %mini %if %mini
%bcond_with selinux %bcond_with selinux
%if %pgmajor >= 16 %if %pgmajor >= 16
@ -102,6 +94,12 @@ BuildRequires: zlib-devel
%if %{with liblz4} %if %{with liblz4}
BuildRequires: pkgconfig(liblz4) BuildRequires: pkgconfig(liblz4)
%endif %endif
%if %{without derived}
BuildRequires: bison
BuildRequires: docbook-xsl-stylesheets
BuildRequires: flex
BuildRequires: perl
%endif
%if %{with libzstd} %if %{with libzstd}
BuildRequires: pkgconfig(libzstd) BuildRequires: pkgconfig(libzstd)
@ -115,7 +113,7 @@ BuildRequires: %libpq
%endif %endif
%if 0%{?suse_version} >= 1500 && %pgmajor >= 11 %if 0%{?suse_version} >= 1500 && %pgmajor >= 11
%ifarch riscv64 loongarch64 %ifarch riscv64
%bcond_with llvm %bcond_with llvm
%else %else
%bcond_without llvm %bcond_without llvm
@ -146,8 +144,13 @@ BuildRequires: libselinux-devel
%endif %endif
%if %{with llvm} %if %{with llvm}
BuildRequires: gcc-c++ BuildRequires: gcc-c++
BuildRequires: (cmake(Clang) >= %{oldest_supported_llvm_ver} with cmake(Clang) < %{latest_supported_llvm_ver_plus_one}) %if 0%{?product_libs_llvm_ver} > %{latest_supported_llvm_ver}
BuildRequires: (cmake(LLVM) >= %{oldest_supported_llvm_ver} with cmake(LLVM) < %{latest_supported_llvm_ver_plus_one}) BuildRequires: clang%{latest_supported_llvm_ver}
BuildRequires: llvm%{latest_supported_llvm_ver}-devel
%else
BuildRequires: clang
BuildRequires: llvm-devel
%endif
%endif %endif
BuildRequires: libxslt-devel BuildRequires: libxslt-devel
BuildRequires: openldap2-devel BuildRequires: openldap2-devel
@ -607,7 +610,6 @@ VLANG=%pgmajor
make DESTDIR=%buildroot PACKAGE_TARNAME=%pgname -C src/include install make DESTDIR=%buildroot PACKAGE_TARNAME=%pgname -C src/include install
make DESTDIR=%buildroot PACKAGE_TARNAME=%pgname -C src/interfaces install make DESTDIR=%buildroot PACKAGE_TARNAME=%pgname -C src/interfaces install
rm -rf %buildroot%pgincludedir/server rm -rf %buildroot%pgincludedir/server
rm -rf %buildroot%pgdatadir
%else %else
make DESTDIR=%buildroot PACKAGE_TARNAME=%pgname install install-docs make DESTDIR=%buildroot PACKAGE_TARNAME=%pgname install install-docs
%if 0 %if 0
@ -770,6 +772,8 @@ done
%endif %endif
popd popd
mkdir -p %buildroot%pgmandir/man1
cp -a doc/src/sgml/man1/ecpg.1 %buildroot%pgmandir/man1/ecpg.1pg%pgmajor
%find_lang ecpg-$VLANG devel.files %find_lang ecpg-$VLANG devel.files
# The devel subpackage is exclusive across versions # The devel subpackage is exclusive across versions
# and not handled by update-alternatives. # and not handled by update-alternatives.
@ -787,10 +791,8 @@ cat server-devel.files >> devel.files
# Build up the file lists for the libpq and libecpg packages # Build up the file lists for the libpq and libecpg packages
cat > libpq.files <<EOF cat > libpq.files <<EOF
%defattr(-,root,root) %defattr(-,root,root)
%if !%mini
%dir %pgdatadir %dir %pgdatadir
%pgdatadir/pg_service.conf.sample %pgdatadir/pg_service.conf.sample
%endif
EOF EOF
find %buildroot -name 'libpq*.so.*' -printf '/%%P\n' >> libpq.files find %buildroot -name 'libpq*.so.*' -printf '/%%P\n' >> libpq.files
%find_lang libpq5-$VLANG libpq.files %find_lang libpq5-$VLANG libpq.files
@ -976,13 +978,12 @@ fi
%_libdir/pkgconfig/* %_libdir/pkgconfig/*
%_libdir/lib*.so %_libdir/lib*.so
%pgincludedir %pgincludedir
%if %{with server_devel} %if %{with server_devel}
%exclude %pgincludedir/server %exclude %pgincludedir/server
%endif %endif
%doc %pgmandir/man1/ecpg.1*
%if !%mini %if !%mini
%doc %pgmandir/man1/ecpg.1*
%if %{with server_devel} %if %{with server_devel}
%files server-devel -f server-devel.files %files server-devel -f server-devel.files
%endif %endif