From 4e36d2e3087557a0c731c4ea9b0842d52925de44932243fa6336aea35d7ad5fd Mon Sep 17 00:00:00 2001 From: Reinhard Max Date: Wed, 14 Apr 2021 14:17:57 +0000 Subject: [PATCH 1/4] Add bug reference OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=39 --- postgresql12.changes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/postgresql12.changes b/postgresql12.changes index 3d81bda..97925e0 100644 --- a/postgresql12.changes +++ b/postgresql12.changes @@ -2,7 +2,7 @@ Mon Mar 15 19:29:39 UTC 2021 - Reinhard Max - Re-enable build of the llvmjit subpackage on SLE, but it will - only be delivered on PackageHub for now. + only be delivered on PackageHub for now (boo#1183118). ------------------------------------------------------------------- Tue Mar 9 13:52:19 UTC 2021 - Reinhard Max From b3cc6718768eaed927549c170273e3d2b1faecdc3ae4560265b9db5e091fec29 Mon Sep 17 00:00:00 2001 From: OBS User buildservice-autocommit Date: Thu, 22 Apr 2021 16:03:17 +0000 Subject: [PATCH 2/4] Updating link to change in openSUSE:Factory/postgresql12 revision 14.0 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=3084cf90e5fa3b4106361e8fe6b461fb --- postgresql12.changes | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/postgresql12.changes b/postgresql12.changes index 97925e0..d316dda 100644 --- a/postgresql12.changes +++ b/postgresql12.changes @@ -1,6 +1,12 @@ ------------------------------------------------------------------- Mon Mar 15 19:29:39 UTC 2021 - Reinhard Max +- Re-enable build of the llvmjit subpackage on SLE, but it will + only be delivered on PackageHub for now. + +------------------------------------------------------------------- +Mon Mar 15 19:29:39 UTC 2021 - Reinhard Max + - Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (boo#1183118). From 63590d5202066a608c2c300b446b85b580b4a2fa80bf981cf3c88e166e0aac87 Mon Sep 17 00:00:00 2001 From: OBS User buildservice-autocommit Date: Thu, 22 Apr 2021 16:03:17 +0000 Subject: [PATCH 3/4] Accepting request 885324 from server:database:postgresql baserev update by copy to link target OBS-URL: https://build.opensuse.org/request/show/885324 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=40 --- postgresql12.changes | 6 ------ 1 file changed, 6 deletions(-) diff --git a/postgresql12.changes b/postgresql12.changes index d316dda..97925e0 100644 --- a/postgresql12.changes +++ b/postgresql12.changes @@ -1,12 +1,6 @@ ------------------------------------------------------------------- Mon Mar 15 19:29:39 UTC 2021 - Reinhard Max -- Re-enable build of the llvmjit subpackage on SLE, but it will - only be delivered on PackageHub for now. - -------------------------------------------------------------------- -Mon Mar 15 19:29:39 UTC 2021 - Reinhard Max - - Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (boo#1183118). From 427a29ad96b92f4733c3f0e5ee3410dce362b608ca2a16824ed876022ed7611f Mon Sep 17 00:00:00 2001 From: Reinhard Max Date: Fri, 14 May 2021 11:50:49 +0000 Subject: [PATCH 4/4] =?UTF-8?q?-=20Upgrade=20to=20version=2012.7:=20=20=20?= =?UTF-8?q?*=20https://www.postgresql.org/docs/12/release-12-7.html=20=20?= =?UTF-8?q?=20*=20CVE-2021-32027,=20bsc#1185924:=20=20=20=20=20Prevent=20i?= =?UTF-8?q?nteger=20overflows=20in=20array=20subscripting=20calculations.?= =?UTF-8?q?=20=20=20*=20CVE-2021-32028,=20bsc#1185925:=20Fix=20mishandling?= =?UTF-8?q?=20of=20=E2=80=9Cjunk=E2=80=9D=20=20=20=20=20columns=20in=20INS?= =?UTF-8?q?ERT=20...=20ON=20CONFLICT=20...=20UPDATE=20target=20lists.=20?= =?UTF-8?q?=20=20*=20CVE-2021-32029,=20bsc#1185926:=20Fix=20possibly-incor?= =?UTF-8?q?rect=20=20=20=20=20computation=20of=20UPDATE=20...=20RETURNING?= =?UTF-8?q?=20=20=20=20=20"pg=5Fpsql=5Ftemporary=5Fsavepoint"=20does=20not?= =?UTF-8?q?=20exist=E2=80=9D.=20-=20Don't=20use=20%=5Fstop=5Fon=5Fremoval,?= =?UTF-8?q?=20because=20it=20was=20meant=20to=20be=20private=20=20=20and?= =?UTF-8?q?=20got=20removed=20from=20openSUSE.=20%=5Frestart=5Fon=5Fupdate?= =?UTF-8?q?=20is=20also=20=20=20private,=20but=20still=20supported=20and?= =?UTF-8?q?=20needed=20for=20now=20(bsc#1183168).?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql12?expand=0&rev=41 --- postgresql-12.6.tar.bz2 | 3 --- postgresql-12.6.tar.bz2.sha256 | 1 - postgresql-12.7.tar.bz2 | 3 +++ postgresql-12.7.tar.bz2.sha256 | 1 + postgresql12.changes | 17 +++++++++++++++++ postgresql12.spec | 8 ++++---- 6 files changed, 25 insertions(+), 8 deletions(-) delete mode 100644 postgresql-12.6.tar.bz2 delete mode 100644 postgresql-12.6.tar.bz2.sha256 create mode 100644 postgresql-12.7.tar.bz2 create mode 100644 postgresql-12.7.tar.bz2.sha256 diff --git a/postgresql-12.6.tar.bz2 b/postgresql-12.6.tar.bz2 deleted file mode 100644 index 20fcdf1..0000000 --- a/postgresql-12.6.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:df7dd98d5ccaf1f693c7e1d0d084e9fed7017ee248bba5be0167c42ad2d70a09 -size 20771172 diff --git a/postgresql-12.6.tar.bz2.sha256 b/postgresql-12.6.tar.bz2.sha256 deleted file mode 100644 index f879b18..0000000 --- a/postgresql-12.6.tar.bz2.sha256 +++ /dev/null @@ -1 +0,0 @@ -df7dd98d5ccaf1f693c7e1d0d084e9fed7017ee248bba5be0167c42ad2d70a09 postgresql-12.6.tar.bz2 diff --git a/postgresql-12.7.tar.bz2 b/postgresql-12.7.tar.bz2 new file mode 100644 index 0000000..d675d61 --- /dev/null +++ b/postgresql-12.7.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8490741f47c88edc8b6624af009ce19fda4dc9b31c4469ce2551d84075d5d995 +size 20819005 diff --git a/postgresql-12.7.tar.bz2.sha256 b/postgresql-12.7.tar.bz2.sha256 new file mode 100644 index 0000000..229ce01 --- /dev/null +++ b/postgresql-12.7.tar.bz2.sha256 @@ -0,0 +1 @@ +8490741f47c88edc8b6624af009ce19fda4dc9b31c4469ce2551d84075d5d995 postgresql-12.7.tar.bz2 diff --git a/postgresql12.changes b/postgresql12.changes index 97925e0..cd9b92a 100644 --- a/postgresql12.changes +++ b/postgresql12.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue May 11 16:19:19 UTC 2021 - Reinhard Max + +- Upgrade to version 12.7: + * https://www.postgresql.org/docs/12/release-12-7.html + * CVE-2021-32027, bsc#1185924: + Prevent integer overflows in array subscripting calculations. + * CVE-2021-32028, bsc#1185925: Fix mishandling of “junk” + columns in INSERT ... ON CONFLICT ... UPDATE target lists. + * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect + computation of UPDATE ... RETURNING + "pg_psql_temporary_savepoint" does not exist”. + +- Don't use %_stop_on_removal, because it was meant to be private + and got removed from openSUSE. %_restart_on_update is also + private, but still supported and needed for now (bsc#1183168). + ------------------------------------------------------------------- Mon Mar 15 19:29:39 UTC 2021 - Reinhard Max diff --git a/postgresql12.spec b/postgresql12.spec index 96d69f4..03ce05b 100644 --- a/postgresql12.spec +++ b/postgresql12.spec @@ -16,7 +16,7 @@ # -%define pgversion 12.6 +%define pgversion 12.7 %define pgmajor 12 %define pgsuffix %pgmajor %define buildlibs 0 @@ -764,10 +764,10 @@ awk -v P=%buildroot '/^(%lang|[^%])/{print P $NF}' libpq.files libecpg.files | x %preun server # Stop only when we are uninstalling the currently running version test -n "$FIRST_ARG" || FIRST_ARG="$1" -if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then +if [ "$FIRST_ARG" -eq 0 ]; then %if %{with systemd} - %define stop %_stop_on_removal postgresql.service - eval $(systemctl show postgresql --property=MainPID) + %define stop systemctl stop postgresql.service + eval $(systemctl show postgresql.service --property=MainPID) %else %define stop /sbin/init.d postgresql stop MainPID=$(pidof -s postgres) || :