SHA256
1
0
forked from pool/postgresql14
Commit Graph

72 Commits

Author SHA256 Message Date
Dominique Leuenberger
8c1baa5b8d Accepting request 1172962 from server:database:postgresql
- Upgrade to 14.12 (bsc#1224051):
  * bsc#1224038, CVE-2024-4317: Restrict visibility of pg_stats_ext
    and pg_stats_ext_exprs entries to the table owner. See the
    release notes for the steps that have to be taken to fix
    existing PostgreSQL instances.
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/14.12/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.

- Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work.

- Remove constraints file because improved memory usage for s390x

OBS-URL: https://build.opensuse.org/request/show/1172962
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=18
2024-05-10 10:05:15 +00:00
Reinhard Max
afc973174f - Upgrade to 14.12 (bsc#1224051):
* bsc#1224038, CVE-2024-4317: Restrict visibility of pg_stats_ext
    and pg_stats_ext_exprs entries to the table owner. See the
    release notes for the steps that have to be taken to fix
    existing PostgreSQL instances.
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/14.12/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=69
2024-05-09 15:30:26 +00:00
393de042f2 CVE-2024-4317
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=68
2024-05-09 14:13:31 +00:00
Reinhard Max
2801a6304c Accepting request 1171158 from home:aaronpuchert:branches:server:database:postgresql
- Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work.

OBS-URL: https://build.opensuse.org/request/show/1171158
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=67
2024-05-02 07:15:38 +00:00
Reinhard Max
05bd1e4890 - Remove constraints file because improved memory usage for s390x
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=66
2024-03-11 09:16:34 +00:00
Ana Guerrero
4c1921e022 Accepting request 1154711 from server:database:postgresql
OBS-URL: https://build.opensuse.org/request/show/1154711
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=17
2024-03-04 20:25:53 +00:00
Reinhard Max
0daab0ee0e Accepting request 1153289 from home:dimstar:rpm4.20:p
Prepare for RPM 4.20

OBS-URL: https://build.opensuse.org/request/show/1153289
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=64
2024-03-04 14:16:16 +00:00
Ana Guerrero
9888a49a6a Accepting request 1145270 from server:database:postgresql
- Upgrade to 14.11:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/14.11/

OBS-URL: https://build.opensuse.org/request/show/1145270
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=16
2024-02-09 22:52:55 +00:00
Reinhard Max
ec32bc13e8 - Upgrade to 14.11:
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/14.11/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=62
2024-02-08 15:24:01 +00:00
Ana Guerrero
2e4128064b Accepting request 1124707 from server:database:postgresql
November 2023 Security Updates

OBS-URL: https://build.opensuse.org/request/show/1124707
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=15
2023-11-09 20:36:15 +00:00
Reinhard Max
a4bd8978d7 November 2023 Security Updates
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=60
2023-11-09 14:43:38 +00:00
Ana Guerrero
45c336c837 Accepting request 1121434 from server:database:postgresql
Revert last change and make the devel package independend

OBS-URL: https://build.opensuse.org/request/show/1121434
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=14
2023-10-31 19:26:33 +00:00
Reinhard Max
403cdbef99 - boo#1216734: Revert the last change and make the devel package
independend of all other subpackages except for the libs.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=58
2023-10-31 11:04:13 +00:00
Ana Guerrero
4386e8b344 Accepting request 1120251 from server:database:postgresql
- boo#1216022: Call install-alternatives from the devel subpackage
  as well, otherwise the symlink for ecpg might be missing.

- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.

- Update to 14.9:
  * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/14/release-14-9.html

- Restore the independence of mini builds from the main build after
  the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.

- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run.

OBS-URL: https://build.opensuse.org/request/show/1120251
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=13
2023-10-25 16:04:45 +00:00
Reinhard Max
274611f106 - boo#1216022: Call install-alternatives from the devel subpackage
as well, otherwise the symlink for ecpg might be missing.

- Also buildignore the postgresql*-implementation symbols: this is
  needed in order to bootstrap when no postgresql version currently
  has valid symbols provided. Once the packages are built, OBS
  could translate this to the pgname-* packages and accept the
  ignores; during bootstrap though, there is nothing providing the
  symbol and the existing buildignores do not suffice.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=56
2023-10-10 13:12:37 +00:00
Reinhard Max
84b35c2760 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=55 2023-08-10 16:07:19 +00:00
Reinhard Max
b5e33915b4 - Update to 14.9:
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
    owner name into an extension script if the name contains a
    quote, backslash, or dollar sign.
  * https://www.postgresql.org/docs/14/release-14-9.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=54
2023-08-10 13:28:03 +00:00
Reinhard Max
8ca724be4b - Restore the independence of mini builds from the main build after
the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=53
2023-05-26 12:03:04 +00:00
Reinhard Max
ab032128d6 - Change the unix domain socket location from /var/run to /run.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=52
2023-05-15 14:53:16 +00:00
Reinhard Max
26442ff27b - Overhaul postgresql-README.SUSE and move it from the binary
package to the noarch wrapper package.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=51
2023-05-15 14:21:23 +00:00
Dominique Leuenberger
e06d02b05d Accepting request 1086555 from server:database:postgresql
- Update to 14.8:
  * bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/14/release-14-8.html

OBS-URL: https://build.opensuse.org/request/show/1086555
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=12
2023-05-12 18:37:13 +00:00
Reinhard Max
851c8ab13b - Update to 14.8:
* bsc#1211228, CVE-2023-2454:
    Prevent CREATE SCHEMA from defeating changes in search_path
  * bsc#1211229, CVE-2023-2455: Enforce row-level security
    policies correctly after inlining a set-returning function
  * https://www.postgresql.org/about/news/2637/
  * https://www.postgresql.org/docs/14/release-14-8.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=49
2023-05-11 13:16:51 +00:00
Dominique Leuenberger
047c2512c3 Accepting request 1081146 from server:database:postgresql
- bsc#1210303: Stop using the obsolete internal %_restart_on_update
  macro and drop support for sysv init to simplify the scriptlets.

- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.

OBS-URL: https://build.opensuse.org/request/show/1081146
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=11
2023-04-21 12:17:45 +00:00
Reinhard Max
13e33675b7 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=47 2023-04-19 13:25:42 +00:00
Reinhard Max
a1ab1284eb - bsc#1210303: Stop using the obsolete internal %_restart_on_update
macro and drop support for sysv init to simplify the scriptlets.

- Include -mini in Name: to avoid conflicts in the source package
  name and OBS internal dependency tracking.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=46
2023-04-18 14:00:47 +00:00
Dominique Leuenberger
aa5a86e2bc Accepting request 1064055 from server:database:postgresql
- Update to 14.7:
  * CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/14/release-14-7.html
- Bump latest_supported_llvm_ver to 15.

OBS-URL: https://build.opensuse.org/request/show/1064055
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=10
2023-02-10 13:33:52 +00:00
Reinhard Max
0b7d93498a - Update to 14.7:
* CVE-2022-41862, bsc#1208102: memory leak in libpq
  * https://www.postgresql.org/about/news/2592/
  * https://www.postgresql.org/docs/14/release-14-7.html
- Bump latest_supported_llvm_ver to 15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=44
2023-02-09 14:31:39 +00:00
Dominique Leuenberger
00936dc457 Accepting request 1035222 from server:database:postgresql
- bsc#1205300: Update to 14.6:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/14/release-14-6.html
- Sync spec file with postgresql15.

OBS-URL: https://build.opensuse.org/request/show/1035222
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=9
2022-11-12 16:40:42 +00:00
Reinhard Max
d5ab306d62 - bsc#1205300: Update to 14.6:
* https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/14/release-14-6.html
- Sync spec file with postgresql15.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=42
2022-11-10 16:35:53 +00:00
Richard Brown
ee114d1fb1 Accepting request 1006977 from server:database:postgresql
- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.

- Sync spec file with postgresql15.

- Disable LLVM JIT on riscv64

OBS-URL: https://build.opensuse.org/request/show/1006977
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=8
2022-10-04 18:37:31 +00:00
Reinhard Max
a148fc98ec Accepting request 1006691 from home:aaronpuchert:branches:server:database:postgresql
- Remove accidentally committed patch.

OBS-URL: https://build.opensuse.org/request/show/1006691
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=40
2022-09-29 13:09:00 +00:00
Reinhard Max
8170a89340 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=39 2022-09-23 16:15:45 +00:00
Reinhard Max
66c4d04e6c - Sync spec file with postgresql15.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=38
2022-09-23 13:53:38 +00:00
Reinhard Max
554fe64b91 - Add generic mechanism to pin to latest supported LLVM version.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=37
2022-09-23 12:44:59 +00:00
Reinhard Max
288e197077 Accepting request 1002898 from openSUSE:Factory:RISCV
- Disable LLVM JIT on riscv64

OBS-URL: https://build.opensuse.org/request/show/1002898
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=36
2022-09-13 11:51:20 +00:00
Dominique Leuenberger
838f386501 Accepting request 995185 from server:database:postgresql
-  Update to 14.5:
  * bsc#1202368, CVE-2022-2625: Extension scripts replace objects
    not belonging to the extension.
  * https://www.postgresql.org/docs/release/14.5/

OBS-URL: https://build.opensuse.org/request/show/995185
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=7
2022-08-16 15:06:44 +00:00
Reinhard Max
976939335e - Update to 14.5:
* bsc#1202368, CVE-2022-2625: Extension scripts replace objects
    not belonging to the extension.
  * https://www.postgresql.org/docs/release/14.5/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=34
2022-08-15 09:44:27 +00:00
Dominique Leuenberger
c35c2e5188 Accepting request 983858 from server:database:postgresql
- bsc#1200437: Upgrade to 14.4:
  * Prevent possible corruption of indexes created or rebuilt with 
    the CONCURRENTLY option.
  * https://www.postgresql.org/docs/release/14.4/
  * https://www.postgresql.org/about/news/p-2470/

OBS-URL: https://build.opensuse.org/request/show/983858
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=6
2022-06-21 15:15:05 +00:00
Reinhard Max
dc8697e41a - bsc#1200437: Upgrade to 14.4:
* Prevent possible corruption of indexes created or rebuilt with 
    the CONCURRENTLY option.
  * https://www.postgresql.org/docs/release/14.4/
  * https://www.postgresql.org/about/news/p-2470/

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=32
2022-06-17 06:44:37 +00:00
Dominique Leuenberger
910c88c121 Accepting request 977049 from server:database:postgresql
- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html

OBS-URL: https://build.opensuse.org/request/show/977049
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=5
2022-05-14 20:54:47 +00:00
Reinhard Max
0a5275e3ae - Upgrade to 14.3:
* bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=30
2022-05-12 14:53:37 +00:00
Dominique Leuenberger
76fadae400 Accepting request 969861 from server:database:postgresql
- bsc#1198166: Pin to llvm13 until the next patchlevel update.

- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.

- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround

OBS-URL: https://build.opensuse.org/request/show/969861
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=4
2022-04-14 15:22:57 +00:00
Reinhard Max
520352f47a - bsc#1198166: Pin to llvm13 until the next patchlevel update.
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=28
2022-04-13 12:19:14 +00:00
Reinhard Max
13446b31ca OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=27 2022-02-10 15:29:32 +00:00
Reinhard Max
073807a82f - bsc#1195680: Upgrade to 14.2:
* https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=26
2022-02-10 15:26:36 +00:00
Reinhard Max
9592d75205 Accepting request 941425 from home:AdaLovelace:branches:openSUSE:Factory:zSystems
- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround

OBS-URL: https://build.opensuse.org/request/show/941425
OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=25
2022-02-08 13:45:49 +00:00
Dominique Leuenberger
950fbf9cda Accepting request 935204 from server:database:postgresql
- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.

OBS-URL: https://build.opensuse.org/request/show/935204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postgresql14?expand=0&rev=3
2021-12-06 22:59:24 +00:00
Reinhard Max
3b6638a0f6 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=24 2021-12-02 13:42:39 +00:00
Reinhard Max
65f594bd07 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=23 2021-11-30 19:03:38 +00:00
Reinhard Max
bb2e482ca2 OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql14?expand=0&rev=22 2021-11-30 18:29:32 +00:00