55 Commits

Author SHA256 Message Date
26623c3dfb - Update to 14.21:
* https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=101
2026-02-12 16:15:44 +00:00
17ae355f69 Accepting request 1322549 from home:Guillaume_G:branches:server:database:postgresql
- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch

OBS-URL: https://build.opensuse.org/request/show/1322549
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=99
2025-12-18 09:16:01 +00:00
5bde778342 - Fix build with uring for post SLE15 code streams.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=97
2025-11-24 16:49:52 +00:00
9f199d46e8 - Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=96
2025-11-14 17:14:34 +00:00
0e383c2f11 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=95 2025-11-13 15:51:15 +00:00
7f8a6bcd52 - Upgrade to 14.20:
* https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=94
2025-11-13 14:34:51 +00:00
7ae10d1b45 Accepting request 1307143 from server:database:postgresql:devel
- Sync spec file from version 18.

OBS-URL: https://build.opensuse.org/request/show/1307143
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=91
2025-09-25 14:14:15 +00:00
6a7e5b5956 Accepting request 1299464 from server:database:postgresql:devel
https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/

OBS-URL: https://build.opensuse.org/request/show/1299464
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=89
2025-08-14 20:11:38 +00:00
77ed01aafb - Upgrade to 14.18:
* bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=87
2025-05-09 11:59:02 +00:00
0bab05607b - Upgrade to 14.17:
* Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=85
2025-02-20 16:33:34 +00:00
d6391665a4 - Upgrade to 14.16:
* bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=83
2025-02-13 14:50:05 +00:00
9b7ff4b4d4 - Fix build, add postgresql-tzdata2025a.patch
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=80
2025-01-28 12:35:53 +00:00
e43c83bec4 - Upgrade to 14.15:
* Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=78
2024-11-21 17:45:28 +00:00
e7e8ef4d71 - Upgrade to 14.14:
* CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/
  * https://www.postgresql.org/about/news/p-2910/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=76
2024-11-14 14:53:58 +00:00
2d290f5bd1 - Pull upstream patch to fix tests with timezone 2024b
* postgresql-testsuite-timezone-fix.patch

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=75
2024-11-05 13:57:30 +00:00
1aa17cc0c7 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=74 2024-09-26 14:38:17 +00:00
7f42a0d301 https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=72
2024-08-10 14:37:33 +00:00
d85fcfc228 - Upgrade to 14.12 (bsc#1224051):
* bsc#1224038, CVE-2024-4317: Restrict visibility of pg_stats_ext
    and pg_stats_ext_exprs entries to the table owner. See the
    release notes for the steps that have to be taken to fix
    existing PostgreSQL instances.
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/14.12/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=69
2024-05-09 15:30:26 +00:00
9ed28ea185 CVE-2024-4317
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=68
2024-05-09 14:13:31 +00:00
6392774d96 Accepting request 1171158 from home:aaronpuchert:branches:server:database:postgresql
- Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work.

OBS-URL: https://build.opensuse.org/request/show/1171158
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=67
2024-05-02 07:15:38 +00:00
5166a0f426 - Remove constraints file because improved memory usage for s390x
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=66
2024-03-11 09:16:34 +00:00
b547acd24e Accepting request 1153289 from home:dimstar:rpm4.20:p
Prepare for RPM 4.20

OBS-URL: https://build.opensuse.org/request/show/1153289
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=64
2024-03-04 14:16:16 +00:00
01a61814d4 - Upgrade to 14.11:
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/14.11/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=62
2024-02-08 15:24:01 +00:00
84b2efd723 November 2023 Security Updates
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=60
2023-11-09 14:43:38 +00:00
6413f0a865 - boo#1216734: Revert the last change and make the devel package
independend of all other subpackages except for the libs.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=58
2023-10-31 11:04:13 +00:00
b88df62f0f - boo#1216022: Call install-alternatives from the devel subpackage
as well, otherwise the symlink for ecpg might be missing.

- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=56
2023-10-10 13:12:37 +00:00
19cade5c3d - Update to 14.9:
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/14/release-14-9.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=54
2023-08-10 13:28:03 +00:00
11dd21cb34 - Restore the independence of mini builds from the main build after
the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=53
2023-05-26 12:03:04 +00:00
962ca49802 - Change the unix domain socket location from /var/run to /run.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=52
2023-05-15 14:53:16 +00:00
3d56516715 - Overhaul postgresql-README.SUSE and move it from the binary
package to the noarch wrapper package.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=51
2023-05-15 14:21:23 +00:00
16829a0456 - Update to 14.8:
* bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/14/release-14-8.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=49
2023-05-11 13:16:51 +00:00
15d339b7f9 - bsc#1210303: Stop using the obsolete internal %_restart_on_update
macro and drop support for sysv init to simplify the scriptlets.

- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=46
2023-04-18 14:00:47 +00:00
7770dcd01c - Update to 14.7:
* CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/14/release-14-7.html
- Bump latest_supported_llvm_ver to 15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=44
2023-02-09 14:31:39 +00:00
1f7e4e952b - bsc#1205300: Update to 14.6:
* https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/14/release-14-6.html
- Sync spec file with postgresql15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=42
2022-11-10 16:35:53 +00:00
efcfec7746 - Sync spec file with postgresql15.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=38
2022-09-23 13:53:38 +00:00
d6b8cf9244 - Add generic mechanism to pin to latest supported LLVM version.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=37
2022-09-23 12:44:59 +00:00
2e7ada9504 Accepting request 1002898 from openSUSE:Factory:RISCV
- Disable LLVM JIT on riscv64

OBS-URL: https://build.opensuse.org/request/show/1002898
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=36
2022-09-13 11:51:20 +00:00
3aa4596f9e - Update to 14.5:
* bsc#1202368, CVE-2022-2625: Extension scripts replace objects
    not belonging to the extension.
  * https://www.postgresql.org/docs/release/14.5/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=34
2022-08-15 09:44:27 +00:00
4cab4ac14f - bsc#1200437: Upgrade to 14.4:
* Prevent possible corruption of indexes created or rebuilt with 
    the CONCURRENTLY option.
  * https://www.postgresql.org/docs/release/14.4/
  * https://www.postgresql.org/about/news/p-2470/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=32
2022-06-17 06:44:37 +00:00
082897d005 - Upgrade to 14.3:
* bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=30
2022-05-12 14:53:37 +00:00
f77189c344 - bsc#1198166: Pin to llvm13 until the next patchlevel update.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=28
2022-04-13 12:19:14 +00:00
72ec316c72 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=27 2022-02-10 15:29:32 +00:00
e730580777 - bsc#1195680: Upgrade to 14.2:
* https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=26
2022-02-10 15:26:36 +00:00
63e7d55e61 Accepting request 941425 from home:AdaLovelace:branches:openSUSE:Factory:zSystems
- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround

OBS-URL: https://build.opensuse.org/request/show/941425
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=25
2022-02-08 13:45:49 +00:00
6c181c92aa OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=24 2021-12-02 13:42:39 +00:00
3f92ae2d96 - Add a llvmjit-devel subpackage to pull in the right versions
of clang and llvm for building extensions.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=18
2021-11-30 15:48:50 +00:00
778782d382 - bsc#1192516: Upgrade to 14.1
* Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=17
2021-11-11 14:57:48 +00:00
04eae2edaf OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=12 2021-10-26 06:45:51 +00:00
7639209fd3 - boo#1190740: Add constraints file with 8GB memory for s390x as
a workaround for a memory issue with LLVM

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=10
2021-10-21 15:49:17 +00:00
3d8c6c6b5c - boo#1191782: Let rpmlint ignore shlib-policy-name-error.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=9
2021-10-20 15:47:28 +00:00