pool/postgresql15
SHA256
20
0
Fork 1
Code Issues Pull Requests Activity

- Upgrade to 15.9:

Browse Source 
* CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/
  * https://www.postgresql.org/about/news/p-2910/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql15?expand=0&rev=60
This commit is contained in:
Reinhard Max
2024-11-14 14:56:30 +00:00
committed by Git OBS Bridge
parent f7605c0b05
commit ed6a865f30
7 changed files with 22 additions and 511 deletions
Download Patch File Download Diff File Expand all files Collapse all files
postgresql15.changes
+17 -3
View File
@@ -1,9 +1,23 @@
-------------------------------------------------------------------
Wed Nov 13 13:55:01 UTC 2024 - Reinhard Max <max@suse.com>
- Upgrade to 15.9:
* CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
dependent on the calling role when RLS applies to a
non-top-level table reference.
* CVE-2024-10977, bsc#1233325: Make libpq discard error messages
received during SSL or GSS protocol negotiation.
* CVE-2024-10978, bsc#1233326: Fix unintended interactions
between SET SESSION AUTHORIZATION and SET ROLE
* CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
changing environment variables.
* https://www.postgresql.org/about/news/p-2955/
* https://www.postgresql.org/docs/release/15.9/
-------------------------------------------------------------------
Tue Nov 5 12:35:17 UTC 2024 - Reinhard Max <max@suse.com>
- Sync spec file from postgresql17.
- Pull upstream patch to fix tests with timezone 2024b
* postgresql-testsuite-timezone-fix.patch
-------------------------------------------------------------------
Sat Aug 10 14:11:36 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
@@ -11,7 +25,7 @@ Sat Aug 10 14:11:36 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- Upgrade to 15.8 (bsc#1229013):
* bsc#1229013, CVE-2024-7348 PostgreSQL relation replacement
during pg_dump executes arbitrary SQL
* https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/
* https://www.postgresql.org/about/news/p-2910/
* https://www.postgresql.org/docs/release/15.8/
-------------------------------------------------------------------