Commit Graph

81 Commits

Author SHA256 Message Date
Ana Guerrero
351ea6989c Accepting request 1225751 from server:database:postgresql
- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/

OBS-URL: https://build.opensuse.org/request/show/1225751
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=21
2024-11-22 22:51:54 +00:00
Reinhard Max
9d98757c2b - Upgrade to 14.15:
* Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=78
2024-11-21 17:45:28 +00:00
Ana Guerrero
b212f7c418 Accepting request 1224294 from server:database:postgresql
- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/

- Sync spec file from postgresql17.

  * https://www.postgresql.org/about/news/p-2910/

OBS-URL: https://build.opensuse.org/request/show/1224294
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=20
2024-11-15 14:43:19 +00:00
Reinhard Max
18342ee243 - Upgrade to 14.14:
* CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/
  * https://www.postgresql.org/about/news/p-2910/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=76
2024-11-14 14:53:58 +00:00
Reinhard Max
b7706c3e7c - Pull upstream patch to fix tests with timezone 2024b
* postgresql-testsuite-timezone-fix.patch

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=75
2024-11-05 13:57:30 +00:00
Reinhard Max
27243811a9 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=74 2024-09-26 14:38:17 +00:00
Ana Guerrero
7cc5843c21 Accepting request 1201985 from server:database:postgresql
- Upgrade to 14.13 (bsc#1229013):
  * bsc#1229013, CVE-2024-7348 PostgreSQL relation replacement
    during pg_dump executes arbitrary SQL
  * https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/
  * https://www.postgresql.org/docs/release/14.13/

OBS-URL: https://build.opensuse.org/request/show/1201985
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=19
2024-09-19 19:17:56 +00:00
50a363db7c https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=72
2024-08-10 14:37:33 +00:00
Reinhard Max
3ab629210f typo
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=71
2024-05-15 08:19:04 +00:00
Dominique Leuenberger
8c1baa5b8d Accepting request 1172962 from server:database:postgresql
- Upgrade to 14.12 (bsc#1224051):
  * bsc#1224038, CVE-2024-4317: Restrict visibility of pg_stats_ext
    and pg_stats_ext_exprs entries to the table owner. See the
    release notes for the steps that have to be taken to fix
    existing PostgreSQL instances.
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/14.12/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.

- Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work.

- Remove constraints file because improved memory usage for s390x

OBS-URL: https://build.opensuse.org/request/show/1172962
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=18
2024-05-10 10:05:15 +00:00
Reinhard Max
afc973174f - Upgrade to 14.12 (bsc#1224051):
* bsc#1224038, CVE-2024-4317: Restrict visibility of pg_stats_ext
    and pg_stats_ext_exprs entries to the table owner. See the
    release notes for the steps that have to be taken to fix
    existing PostgreSQL instances.
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/14.12/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=69
2024-05-09 15:30:26 +00:00
393de042f2 CVE-2024-4317
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=68
2024-05-09 14:13:31 +00:00
Reinhard Max
2801a6304c Accepting request 1171158 from home:aaronpuchert:branches:server:database:postgresql
- Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work.

OBS-URL: https://build.opensuse.org/request/show/1171158
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=67
2024-05-02 07:15:38 +00:00
Reinhard Max
05bd1e4890 - Remove constraints file because improved memory usage for s390x
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=66
2024-03-11 09:16:34 +00:00
Ana Guerrero
4c1921e022 Accepting request 1154711 from server:database:postgresql
OBS-URL: https://build.opensuse.org/request/show/1154711
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=17
2024-03-04 20:25:53 +00:00
Reinhard Max
0daab0ee0e Accepting request 1153289 from home:dimstar:rpm4.20:p
Prepare for RPM 4.20

OBS-URL: https://build.opensuse.org/request/show/1153289
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=64
2024-03-04 14:16:16 +00:00
Ana Guerrero
9888a49a6a Accepting request 1145270 from server:database:postgresql
- Upgrade to 14.11:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/14.11/

OBS-URL: https://build.opensuse.org/request/show/1145270
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=16
2024-02-09 22:52:55 +00:00
Reinhard Max
ec32bc13e8 - Upgrade to 14.11:
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/14.11/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=62
2024-02-08 15:24:01 +00:00
Ana Guerrero
2e4128064b Accepting request 1124707 from server:database:postgresql
November 2023 Security Updates

OBS-URL: https://build.opensuse.org/request/show/1124707
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=15
2023-11-09 20:36:15 +00:00
Reinhard Max
a4bd8978d7 November 2023 Security Updates
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=60
2023-11-09 14:43:38 +00:00
Ana Guerrero
45c336c837 Accepting request 1121434 from server:database:postgresql
Revert last change and make the devel package independend

OBS-URL: https://build.opensuse.org/request/show/1121434
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=14
2023-10-31 19:26:33 +00:00
Reinhard Max
403cdbef99 - boo#1216734: Revert the last change and make the devel package
independend of all other subpackages except for the libs.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=58
2023-10-31 11:04:13 +00:00
Ana Guerrero
4386e8b344 Accepting request 1120251 from server:database:postgresql
- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.

- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.

- Update to 14.9:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/14/release-14-9.html

- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.

- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.

OBS-URL: https://build.opensuse.org/request/show/1120251
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=13
2023-10-25 16:04:45 +00:00
Reinhard Max
274611f106 - boo#1216022: Call install-alternatives from the devel subpackage
as well, otherwise the symlink for ecpg might be missing.

- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=56
2023-10-10 13:12:37 +00:00
Reinhard Max
84b35c2760 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=55 2023-08-10 16:07:19 +00:00
Reinhard Max
b5e33915b4 - Update to 14.9:
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/14/release-14-9.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=54
2023-08-10 13:28:03 +00:00
Reinhard Max
8ca724be4b - Restore the independence of mini builds from the main build after
the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=53
2023-05-26 12:03:04 +00:00
Reinhard Max
ab032128d6 - Change the unix domain socket location from /var/run to /run.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=52
2023-05-15 14:53:16 +00:00
Reinhard Max
26442ff27b - Overhaul postgresql-README.SUSE and move it from the binary
package to the noarch wrapper package.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=51
2023-05-15 14:21:23 +00:00
Dominique Leuenberger
e06d02b05d Accepting request 1086555 from server:database:postgresql
- Update to 14.8:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/14/release-14-8.html

OBS-URL: https://build.opensuse.org/request/show/1086555
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=12
2023-05-12 18:37:13 +00:00
Reinhard Max
851c8ab13b - Update to 14.8:
* bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/14/release-14-8.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=49
2023-05-11 13:16:51 +00:00
Dominique Leuenberger
047c2512c3 Accepting request 1081146 from server:database:postgresql
- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.

- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.

OBS-URL: https://build.opensuse.org/request/show/1081146
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=11
2023-04-21 12:17:45 +00:00
Reinhard Max
13e33675b7 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=47 2023-04-19 13:25:42 +00:00
Reinhard Max
a1ab1284eb - bsc#1210303: Stop using the obsolete internal %_restart_on_update
macro and drop support for sysv init to simplify the scriptlets.

- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=46
2023-04-18 14:00:47 +00:00
Dominique Leuenberger
aa5a86e2bc Accepting request 1064055 from server:database:postgresql
- Update to 14.7:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/14/release-14-7.html
- Bump latest_supported_llvm_ver to 15.

OBS-URL: https://build.opensuse.org/request/show/1064055
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=10
2023-02-10 13:33:52 +00:00
Reinhard Max
0b7d93498a - Update to 14.7:
* CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/14/release-14-7.html
- Bump latest_supported_llvm_ver to 15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=44
2023-02-09 14:31:39 +00:00
Dominique Leuenberger
00936dc457 Accepting request 1035222 from server:database:postgresql
- bsc#1205300: Update to 14.6:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/14/release-14-6.html
- Sync spec file with postgresql15.

OBS-URL: https://build.opensuse.org/request/show/1035222
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=9
2022-11-12 16:40:42 +00:00
Reinhard Max
d5ab306d62 - bsc#1205300: Update to 14.6:
* https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/14/release-14-6.html
- Sync spec file with postgresql15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=42
2022-11-10 16:35:53 +00:00
Richard Brown
ee114d1fb1 Accepting request 1006977 from server:database:postgresql
- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.

- Sync spec file with postgresql15.

- Disable LLVM JIT on riscv64

OBS-URL: https://build.opensuse.org/request/show/1006977
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=8
2022-10-04 18:37:31 +00:00
Reinhard Max
a148fc98ec Accepting request 1006691 from home:aaronpuchert:branches:server:database:postgresql
- Remove accidentally committed patch.

OBS-URL: https://build.opensuse.org/request/show/1006691
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=40
2022-09-29 13:09:00 +00:00
Reinhard Max
8170a89340 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=39 2022-09-23 16:15:45 +00:00
Reinhard Max
66c4d04e6c - Sync spec file with postgresql15.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=38
2022-09-23 13:53:38 +00:00
Reinhard Max
554fe64b91 - Add generic mechanism to pin to latest supported LLVM version.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=37
2022-09-23 12:44:59 +00:00
Reinhard Max
288e197077 Accepting request 1002898 from openSUSE:Factory:RISCV
- Disable LLVM JIT on riscv64

OBS-URL: https://build.opensuse.org/request/show/1002898
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=36
2022-09-13 11:51:20 +00:00
Dominique Leuenberger
838f386501 Accepting request 995185 from server:database:postgresql
-  Update to 14.5:
  * bsc#1202368, CVE-2022-2625: Extension scripts replace objects
    not belonging to the extension.
  * https://www.postgresql.org/docs/release/14.5/

OBS-URL: https://build.opensuse.org/request/show/995185
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=7
2022-08-16 15:06:44 +00:00
Reinhard Max
976939335e - Update to 14.5:
* bsc#1202368, CVE-2022-2625: Extension scripts replace objects
    not belonging to the extension.
  * https://www.postgresql.org/docs/release/14.5/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=34
2022-08-15 09:44:27 +00:00
Dominique Leuenberger
c35c2e5188 Accepting request 983858 from server:database:postgresql
- bsc#1200437: Upgrade to 14.4:
  * Prevent possible corruption of indexes created or rebuilt with 
    the CONCURRENTLY option.
  * https://www.postgresql.org/docs/release/14.4/
  * https://www.postgresql.org/about/news/p-2470/

OBS-URL: https://build.opensuse.org/request/show/983858
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=6
2022-06-21 15:15:05 +00:00
Reinhard Max
dc8697e41a - bsc#1200437: Upgrade to 14.4:
* Prevent possible corruption of indexes created or rebuilt with 
    the CONCURRENTLY option.
  * https://www.postgresql.org/docs/release/14.4/
  * https://www.postgresql.org/about/news/p-2470/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=32
2022-06-17 06:44:37 +00:00
Dominique Leuenberger
910c88c121 Accepting request 977049 from server:database:postgresql
- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html

OBS-URL: https://build.opensuse.org/request/show/977049
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=5
2022-05-14 20:54:47 +00:00
Reinhard Max
0a5275e3ae - Upgrade to 14.3:
* bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=30
2022-05-12 14:53:37 +00:00