Commit Graph

63 Commits

Author SHA256 Message Date
Ana Guerrero
2e4128064b Accepting request 1124707 from server:database:postgresql
November 2023 Security Updates

OBS-URL: https://build.opensuse.org/request/show/1124707
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=15
2023-11-09 20:36:15 +00:00
Reinhard Max
a4bd8978d7 November 2023 Security Updates
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=60
2023-11-09 14:43:38 +00:00
Ana Guerrero
45c336c837 Accepting request 1121434 from server:database:postgresql
Revert last change and make the devel package independend

OBS-URL: https://build.opensuse.org/request/show/1121434
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=14
2023-10-31 19:26:33 +00:00
Reinhard Max
403cdbef99 - boo#1216734: Revert the last change and make the devel package
independend of all other subpackages except for the libs.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=58
2023-10-31 11:04:13 +00:00
Ana Guerrero
4386e8b344 Accepting request 1120251 from server:database:postgresql
- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.

- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.

- Update to 14.9:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/14/release-14-9.html

- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.

- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.

OBS-URL: https://build.opensuse.org/request/show/1120251
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=13
2023-10-25 16:04:45 +00:00
Reinhard Max
274611f106 - boo#1216022: Call install-alternatives from the devel subpackage
as well, otherwise the symlink for ecpg might be missing.

- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=56
2023-10-10 13:12:37 +00:00
Reinhard Max
84b35c2760 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=55 2023-08-10 16:07:19 +00:00
Reinhard Max
b5e33915b4 - Update to 14.9:
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/14/release-14-9.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=54
2023-08-10 13:28:03 +00:00
Reinhard Max
8ca724be4b - Restore the independence of mini builds from the main build after
the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=53
2023-05-26 12:03:04 +00:00
Reinhard Max
ab032128d6 - Change the unix domain socket location from /var/run to /run.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=52
2023-05-15 14:53:16 +00:00
Reinhard Max
26442ff27b - Overhaul postgresql-README.SUSE and move it from the binary
package to the noarch wrapper package.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=51
2023-05-15 14:21:23 +00:00
Dominique Leuenberger
e06d02b05d Accepting request 1086555 from server:database:postgresql
- Update to 14.8:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/14/release-14-8.html

OBS-URL: https://build.opensuse.org/request/show/1086555
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=12
2023-05-12 18:37:13 +00:00
Reinhard Max
851c8ab13b - Update to 14.8:
* bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/14/release-14-8.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=49
2023-05-11 13:16:51 +00:00
Dominique Leuenberger
047c2512c3 Accepting request 1081146 from server:database:postgresql
- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.

- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.

OBS-URL: https://build.opensuse.org/request/show/1081146
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=11
2023-04-21 12:17:45 +00:00
Reinhard Max
13e33675b7 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=47 2023-04-19 13:25:42 +00:00
Reinhard Max
a1ab1284eb - bsc#1210303: Stop using the obsolete internal %_restart_on_update
macro and drop support for sysv init to simplify the scriptlets.

- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=46
2023-04-18 14:00:47 +00:00
Dominique Leuenberger
aa5a86e2bc Accepting request 1064055 from server:database:postgresql
- Update to 14.7:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/14/release-14-7.html
- Bump latest_supported_llvm_ver to 15.

OBS-URL: https://build.opensuse.org/request/show/1064055
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=10
2023-02-10 13:33:52 +00:00
Reinhard Max
0b7d93498a - Update to 14.7:
* CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/14/release-14-7.html
- Bump latest_supported_llvm_ver to 15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=44
2023-02-09 14:31:39 +00:00
Dominique Leuenberger
00936dc457 Accepting request 1035222 from server:database:postgresql
- bsc#1205300: Update to 14.6:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/14/release-14-6.html
- Sync spec file with postgresql15.

OBS-URL: https://build.opensuse.org/request/show/1035222
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=9
2022-11-12 16:40:42 +00:00
Reinhard Max
d5ab306d62 - bsc#1205300: Update to 14.6:
* https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/14/release-14-6.html
- Sync spec file with postgresql15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=42
2022-11-10 16:35:53 +00:00
Richard Brown
ee114d1fb1 Accepting request 1006977 from server:database:postgresql
- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.

- Sync spec file with postgresql15.

- Disable LLVM JIT on riscv64

OBS-URL: https://build.opensuse.org/request/show/1006977
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=8
2022-10-04 18:37:31 +00:00
Reinhard Max
a148fc98ec Accepting request 1006691 from home:aaronpuchert:branches:server:database:postgresql
- Remove accidentally committed patch.

OBS-URL: https://build.opensuse.org/request/show/1006691
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=40
2022-09-29 13:09:00 +00:00
Reinhard Max
8170a89340 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=39 2022-09-23 16:15:45 +00:00
Reinhard Max
66c4d04e6c - Sync spec file with postgresql15.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=38
2022-09-23 13:53:38 +00:00
Reinhard Max
554fe64b91 - Add generic mechanism to pin to latest supported LLVM version.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=37
2022-09-23 12:44:59 +00:00
Reinhard Max
288e197077 Accepting request 1002898 from openSUSE:Factory:RISCV
- Disable LLVM JIT on riscv64

OBS-URL: https://build.opensuse.org/request/show/1002898
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=36
2022-09-13 11:51:20 +00:00
Dominique Leuenberger
838f386501 Accepting request 995185 from server:database:postgresql
-  Update to 14.5:
  * bsc#1202368, CVE-2022-2625: Extension scripts replace objects
    not belonging to the extension.
  * https://www.postgresql.org/docs/release/14.5/

OBS-URL: https://build.opensuse.org/request/show/995185
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=7
2022-08-16 15:06:44 +00:00
Reinhard Max
976939335e - Update to 14.5:
* bsc#1202368, CVE-2022-2625: Extension scripts replace objects
    not belonging to the extension.
  * https://www.postgresql.org/docs/release/14.5/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=34
2022-08-15 09:44:27 +00:00
Dominique Leuenberger
c35c2e5188 Accepting request 983858 from server:database:postgresql
- bsc#1200437: Upgrade to 14.4:
  * Prevent possible corruption of indexes created or rebuilt with 
    the CONCURRENTLY option.
  * https://www.postgresql.org/docs/release/14.4/
  * https://www.postgresql.org/about/news/p-2470/

OBS-URL: https://build.opensuse.org/request/show/983858
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=6
2022-06-21 15:15:05 +00:00
Reinhard Max
dc8697e41a - bsc#1200437: Upgrade to 14.4:
* Prevent possible corruption of indexes created or rebuilt with 
    the CONCURRENTLY option.
  * https://www.postgresql.org/docs/release/14.4/
  * https://www.postgresql.org/about/news/p-2470/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=32
2022-06-17 06:44:37 +00:00
Dominique Leuenberger
910c88c121 Accepting request 977049 from server:database:postgresql
- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html

OBS-URL: https://build.opensuse.org/request/show/977049
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=5
2022-05-14 20:54:47 +00:00
Reinhard Max
0a5275e3ae - Upgrade to 14.3:
* bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=30
2022-05-12 14:53:37 +00:00
Dominique Leuenberger
76fadae400 Accepting request 969861 from server:database:postgresql
- bsc#1198166: Pin to llvm13 until the next patchlevel update.

- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.

- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround

OBS-URL: https://build.opensuse.org/request/show/969861
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=4
2022-04-14 15:22:57 +00:00
Reinhard Max
520352f47a - bsc#1198166: Pin to llvm13 until the next patchlevel update.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=28
2022-04-13 12:19:14 +00:00
Reinhard Max
13446b31ca OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=27 2022-02-10 15:29:32 +00:00
Reinhard Max
073807a82f - bsc#1195680: Upgrade to 14.2:
* https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=26
2022-02-10 15:26:36 +00:00
Reinhard Max
9592d75205 Accepting request 941425 from home:AdaLovelace:branches:openSUSE:Factory:zSystems
- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround

OBS-URL: https://build.opensuse.org/request/show/941425
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=25
2022-02-08 13:45:49 +00:00
Dominique Leuenberger
950fbf9cda Accepting request 935204 from server:database:postgresql
- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.

OBS-URL: https://build.opensuse.org/request/show/935204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=3
2021-12-06 22:59:24 +00:00
Reinhard Max
3b6638a0f6 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=24 2021-12-02 13:42:39 +00:00
Reinhard Max
65f594bd07 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=23 2021-11-30 19:03:38 +00:00
Reinhard Max
bb2e482ca2 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=22 2021-11-30 18:29:32 +00:00
Reinhard Max
89d8c76292 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=21 2021-11-30 18:15:01 +00:00
Reinhard Max
d57adbce30 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=20 2021-11-30 17:04:51 +00:00
Reinhard Max
6751d7668c OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=19 2021-11-30 16:36:45 +00:00
Reinhard Max
92f6f97f1f - Add a llvmjit-devel subpackage to pull in the right versions
of clang and llvm for building extensions.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=18
2021-11-30 15:48:50 +00:00
Dominique Leuenberger
c11c8f6807 Accepting request 930949 from server:database:postgresql
- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html

- boo#1191782: Let rpmlint ignore shlib-policy-name-error.

- remove a duplicate .changes entry

OBS-URL: https://build.opensuse.org/request/show/930949
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=2
2021-11-13 21:48:08 +00:00
Reinhard Max
d7acfaaff7 - bsc#1192516: Upgrade to 14.1
* Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=17
2021-11-11 14:57:48 +00:00
Reinhard Max
8601944414 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=16 2021-10-28 20:31:58 +00:00
Reinhard Max
97fe631901 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=15 2021-10-26 06:52:39 +00:00
Reinhard Max
3c0c18f384 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=14 2021-10-26 06:50:43 +00:00