- Upgrade to 15.6:
* bsc#1219679, CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY. One step of a concurrent refresh command was run under weak security restrictions. If a materialized view's owner could persuade a superuser or other high-privileged user to perform a concurrent refresh on that view, the view's owner could control code executed with the privileges of the user running REFRESH. Fix things so that all user-determined code is run as the view's owner, as expected * If you use GIN indexes, you may need to reindex after updating to this release. * LLVM 18 is now supported. * https://www.postgresql.org/docs/release/15.6/ OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql15?expand=0&rev=44
This commit is contained in:
parent
d08f536e1e
commit
a1154e8c10
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:8f53aa95d78eb8e82536ea46b68187793b42bba3b4f65aa342f540b23c9b10a6
|
|
||||||
size 23091780
|
|
@ -1 +0,0 @@
|
|||||||
8f53aa95d78eb8e82536ea46b68187793b42bba3b4f65aa342f540b23c9b10a6 postgresql-15.5.tar.bz2
|
|
3
postgresql-15.6.tar.bz2
Normal file
3
postgresql-15.6.tar.bz2
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:8455146ed9c69c93a57de954aead0302cafad035c2b242175d6aa1e17ebcb2fb
|
||||||
|
size 23093967
|
1
postgresql-15.6.tar.bz2.sha256
Normal file
1
postgresql-15.6.tar.bz2.sha256
Normal file
@ -0,0 +1 @@
|
|||||||
|
8455146ed9c69c93a57de954aead0302cafad035c2b242175d6aa1e17ebcb2fb postgresql-15.6.tar.bz2
|
@ -1,3 +1,21 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu Feb 8 14:04:50 UTC 2024 - Reinhard Max <max@suse.com>
|
||||||
|
|
||||||
|
- Upgrade to 15.6:
|
||||||
|
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
|
||||||
|
within REFRESH MATERIALIZED VIEW CONCURRENTLY.
|
||||||
|
One step of a concurrent refresh command was run under weak
|
||||||
|
security restrictions. If a materialized view's owner could
|
||||||
|
persuade a superuser or other high-privileged user to perform a
|
||||||
|
concurrent refresh on that view, the view's owner could control
|
||||||
|
code executed with the privileges of the user running REFRESH.
|
||||||
|
Fix things so that all user-determined code is run as the
|
||||||
|
view's owner, as expected
|
||||||
|
* If you use GIN indexes, you may need to reindex after updating
|
||||||
|
to this release.
|
||||||
|
* LLVM 18 is now supported.
|
||||||
|
* https://www.postgresql.org/docs/release/15.6/
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Wed Nov 8 14:26:51 UTC 2023 - Reinhard Max <max@suse.com>
|
Wed Nov 8 14:26:51 UTC 2023 - Reinhard Max <max@suse.com>
|
||||||
|
|
||||||
@ -27,7 +45,6 @@ Wed Nov 8 14:26:51 UTC 2023 - Reinhard Max <max@suse.com>
|
|||||||
such processes. No specific security consequences are known for
|
such processes. No specific security consequences are known for
|
||||||
that oversight, but it might be significant for some extensions.
|
that oversight, but it might be significant for some extensions.
|
||||||
* Add support for LLVM 16 and 17
|
* Add support for LLVM 16 and 17
|
||||||
* https://www.postgresql.org/about/news/2749
|
|
||||||
* https://www.postgresql.org/docs/15/release-15-5.html
|
* https://www.postgresql.org/docs/15/release-15-5.html
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
#
|
#
|
||||||
# spec file
|
# spec file for package postgresql15
|
||||||
#
|
#
|
||||||
# Copyright (c) 2023 SUSE LLC
|
# Copyright (c) 2024 SUSE LLC
|
||||||
#
|
#
|
||||||
# All modifications and additions to the file contributed by third parties
|
# All modifications and additions to the file contributed by third parties
|
||||||
# remain the property of their copyright owners, unless otherwise agreed
|
# remain the property of their copyright owners, unless otherwise agreed
|
||||||
@ -16,11 +16,11 @@
|
|||||||
#
|
#
|
||||||
|
|
||||||
|
|
||||||
%define pgversion 15.5
|
%define pgversion 15.6
|
||||||
%define pgmajor 15
|
%define pgmajor 15
|
||||||
%define buildlibs 0
|
%define buildlibs 0
|
||||||
%define tarversion %{pgversion}
|
%define tarversion %{pgversion}
|
||||||
%define latest_supported_llvm_ver 17
|
%define latest_supported_llvm_ver 18
|
||||||
|
|
||||||
### CUT HERE ###
|
### CUT HERE ###
|
||||||
%define pgname postgresql%pgmajor
|
%define pgname postgresql%pgmajor
|
||||||
@ -187,7 +187,7 @@ Provides: postgresql = %version-%release
|
|||||||
Provides: postgresql-implementation = %version-%release
|
Provides: postgresql-implementation = %version-%release
|
||||||
Requires: %libpq >= %version
|
Requires: %libpq >= %version
|
||||||
Requires(post): postgresql-noarch >= %pgmajor
|
Requires(post): postgresql-noarch >= %pgmajor
|
||||||
Requires(postun):postgresql-noarch >= %pgmajor
|
Requires(postun): postgresql-noarch >= %pgmajor
|
||||||
# At this point we changed the package layout on SLE and conflict with
|
# At this point we changed the package layout on SLE and conflict with
|
||||||
# older releases to get a clean cut.
|
# older releases to get a clean cut.
|
||||||
Conflicts: postgresql-noarch < 12.0.1
|
Conflicts: postgresql-noarch < 12.0.1
|
||||||
@ -277,7 +277,7 @@ Provides: %pgname-server-devel = %version-%release
|
|||||||
Provides: postgresql-server-devel = %version-%release
|
Provides: postgresql-server-devel = %version-%release
|
||||||
Provides: postgresql-server-devel-implementation = %version-%release
|
Provides: postgresql-server-devel-implementation = %version-%release
|
||||||
Requires(post): postgresql-server-devel-noarch >= %pgmajor
|
Requires(post): postgresql-server-devel-noarch >= %pgmajor
|
||||||
Requires(postun):postgresql-server-devel-noarch >= %pgmajor
|
Requires(postun): postgresql-server-devel-noarch >= %pgmajor
|
||||||
Requires: %pgname-devel = %version
|
Requires: %pgname-devel = %version
|
||||||
Requires: %pgname-server = %version-%release
|
Requires: %pgname-server = %version-%release
|
||||||
# Installation of postgresql??-devel is exclusive
|
# Installation of postgresql??-devel is exclusive
|
||||||
@ -335,10 +335,10 @@ Recommends: %{name}-llvmjit
|
|||||||
Provides: postgresql-server-implementation = %version-%release
|
Provides: postgresql-server-implementation = %version-%release
|
||||||
Requires: %libpq >= %version
|
Requires: %libpq >= %version
|
||||||
Requires(pre): postgresql-server-noarch >= %pgmajor
|
Requires(pre): postgresql-server-noarch >= %pgmajor
|
||||||
Requires(preun):postgresql-server-noarch >= %pgmajor
|
Requires(preun): postgresql-server-noarch >= %pgmajor
|
||||||
Requires(postun):postgresql-server-noarch >= %pgmajor
|
Requires(postun): postgresql-server-noarch >= %pgmajor
|
||||||
Requires(post): postgresql-noarch >= %pgmajor
|
Requires(post): postgresql-noarch >= %pgmajor
|
||||||
Requires(postun):postgresql-noarch >= %pgmajor
|
Requires(postun): postgresql-noarch >= %pgmajor
|
||||||
|
|
||||||
%description server
|
%description server
|
||||||
PostgreSQL is an advanced object-relational database management system
|
PostgreSQL is an advanced object-relational database management system
|
||||||
@ -377,7 +377,7 @@ Requires: %pgname-server-devel = %version
|
|||||||
%if %{with llvm}
|
%if %{with llvm}
|
||||||
Requires: %pgname-llvmjit = %version
|
Requires: %pgname-llvmjit = %version
|
||||||
Requires(post): postgresql-llvmjit-devel-noarch >= %pgmajor
|
Requires(post): postgresql-llvmjit-devel-noarch >= %pgmajor
|
||||||
Requires(postun):postgresql-llvmjit-devel-noarch >= %pgmajor
|
Requires(postun): postgresql-llvmjit-devel-noarch >= %pgmajor
|
||||||
%requires_file %_bindir/llc
|
%requires_file %_bindir/llc
|
||||||
%requires_file %_bindir/clang
|
%requires_file %_bindir/clang
|
||||||
%endif
|
%endif
|
||||||
|
Loading…
Reference in New Issue
Block a user