@d,@c@clcGc>@c6@c5c,N@c @c@cb@b@b@b@b|bV@b[@aaza@apa\>@aUaQ@aO@`@```q`OL@`Gc@`/@`#_S__@_F@_mmax@suse.com max@suse.com max@suse.com antonio.teixeira@suse.com max@suse.com mrueckert@suse.de max@suse.com aaronpuchert@alice-dsl.net sarah.kriesch@opensuse.org dimstar@opensuse.org max@suse.com max@suse.com max@suse.com max@suse.com dimstar@opensuse.org max@suse.com mrueckert@suse.de max@suse.com max@suse.com max@suse.com max@suse.com max@suse.com max@suse.com fvogt@suse.com max@suse.com max@suse.com max@suse.com max@suse.com fvogt@suse.com max@suse.com aaronpuchert@alice-dsl.net schwab@suse.de max@suse.com max@suse.com mrueckert@suse.de mrueckert@suse.de mrueckert@suse.de mrueckert@suse.de max@suse.com max@suse.com max@suse.com ada.lovelace@gmx.de max@suse.com max@suse.com max@suse.com max@suse.com mrueckert@suse.de max@suse.com mrueckert@suse.de mrueckert@suse.de mrueckert@suse.de max@suse.com max@suse.com max@suse.com max@suse.com max@suse.com max@suse.com gmbr3@opensuse.org max@suse.com max@suse.com max@suse.com max@suse.com - Upgrade to 16.6:
* Repair ABI break for extensions that work with struct
ResultRelInfo.
* Restore functionality of ALTER {ROLE|DATABASE} SET role.
* Fix cases where a logical replication slot's restart_lsn could
go backwards.
* Avoid deleting still-needed WAL files during pg_rewind.
* Fix race conditions associated with dropping shared statistics
entries.
* Count index scans in contrib/bloom indexes in the statistics
views, such as the pg_stat_user_indexes.idx_scan counter.
* Fix crash when checking to see if an index's opclass options
have changed.
* Avoid assertion failure caused by disconnected NFA sub-graphs
in regular expression parsing.
* https://www.postgresql.org/docs/release/16.6/ - Upgrade to 16.5:
* CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
dependent on the calling role when RLS applies to a
non-top-level table reference.
* CVE-2024-10977, bsc#1233325: Make libpq discard error messages
received during SSL or GSS protocol negotiation.
* CVE-2024-10978, bsc#1233326: Fix unintended interactions
between SET SESSION AUTHORIZATION and SET ROLE
* CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
changing environment variables.
* obsoletes postgresql-testsuite-timezone-fix.patch
* https://www.postgresql.org/about/news/p-2955/
* https://www.postgresql.org/docs/release/16.5/ - Sync spec file from postgresql17. - Pull upstream patch to fix tests with timezone 2024b
* postgresql-testsuite-timezone-fix.patch - Don't build the libs and mini flavor anymore to hand over to
PostgreSQL 17. - Upgrade to 16.4 (bsc#1229013):
* bsc#1229013, CVE-2024-7348 PostgreSQL relation replacement
during pg_dump executes arbitrary SQL
* https://www.postgresql.org/about/news/p-2910/
* https://www.postgresql.org/docs/release/16.4/ - Upgrade to 16.3 (bsc#1224051):
* bsc#1224038, CVE-2024-4317: Restrict visibility of pg_stats_ext
and pg_stats_ext_exprs entries to the table owner. See the
release notes for the steps that have to be taken to fix
existing PostgreSQL instances.
* Fix incompatibility with LLVM 18.
* https://www.postgresql.org/docs/release/16.3/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build. - Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work. - Remove constraints file because improved memory usage for s390x - Use %patch -P N instead of deprecated %patchN. - Upgrade to 16.2:
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
within REFRESH MATERIALIZED VIEW CONCURRENTLY.
One step of a concurrent refresh command was run under weak
security restrictions. If a materialized view's owner could
persuade a superuser or other high-privileged user to perform a
concurrent refresh on that view, the view's owner could control
code executed with the privileges of the user running REFRESH.
Fix things so that all user-determined code is run as the
view's owner, as expected
* If you use GIN indexes, you may need to reindex after updating
to this release.
* LLVM 18 is now supported.
* https://www.postgresql.org/docs/release/16.2/ - Upgrade to 16.1:
* bsc#1216962, CVE-2023-5868: Fix handling of unknown-type
arguments in DISTINCT "any" aggregate functions. This error led
to a text-type value being interpreted as an unknown-type value
(that is, a zero-terminated string) at runtime. This could
result in disclosure of server memory following the text value.
* bsc#1216961, CVE-2023-5869: Detect integer overflow while
computing new array dimensions. When assigning new elements to
array subscripts that are outside the current array bounds, an
undetected integer overflow could occur in edge cases. Memory
stomps that are potentially exploitable for arbitrary code
execution are possible, and so is disclosure of server memory.
* bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role
from signalling background workers and autovacuum processes.
The documentation says that pg_signal_backend cannot issue
signals to superuser-owned processes. It was able to signal
these background processes, though, because they advertise a
role OID of zero. Treat that as indicating superuser ownership.
The security implications of cancelling one of these process
types are fairly small so far as the core code goes (we'll just
start another one), but extensions might add background workers
that are more vulnerable.
Also ensure that the is_superuser parameter is set correctly in
such processes. No specific security consequences are known for
that oversight, but it might be significant for some extensions.
* Add support for LLVM 16 and 17
* https://www.postgresql.org/docs/16/release-16-1.html - boo#1216734: Revert the last change and make the devel package
independend of all other subpackages except for the libs. - boo#1216022: Call install-alternatives from the devel subpackage
as well, otherwise the symlink for ecpg might be missing. - Also buildignore the postgresql*-implementation symbols: this is
needed in order to bootstrap when no postgresql version currently
has valid symbols provided. Once the packages are built, OBS
could translate this to the pgname-* packages and accept the
ignores; during bootstrap though, there is nothing providing the
symbol and the existing buildignores do not suffice. - Upgrade to 16.0:
* https://www.postgresql.org/about/news/2715
* https://www.postgresql.org/docs/16/release-16.html - Upgrade to 16rc1:
* https://www.postgresql.org/about/news/2702/ - Upgrade too v16beta3. - Copy postgresql15 to postgresql16 and upgrade to v16beta2.
- Don't create a unix domain socket under /tmp anymore. - Restore the independence of mini builds from the main build after
the -mini name change from April 4, 2023.
- Adjust icu handling to prepare for PostgreSQL 16. - Overhaul postgresql-README.SUSE and move it from the binary
package to the noarch wrapper package.
- Change the unix domain socket location from /var/run to /run. - Update to 15.3:
* bsc#1211228, CVE-2023-2454:
Prevent CREATE SCHEMA from defeating changes in search_path
* bsc#1211229, CVE-2023-2455: Enforce row-level security
policies correctly after inlining a set-returning function
* https://www.postgresql.org/about/news/2637/
* https://www.postgresql.org/docs/15/release-15-3.html - bsc#1210303: Stop using the obsolete internal %_restart_on_update
macro and drop support for sysv init to simplify the scriptlets. - Include -mini in Name: to avoid conflicts in the source package
name and OBS internal dependency tracking. - Update to 15.2:
* CVE-2022-41862, bsc#1208102: memory leak in libpq
* https://www.postgresql.org/about/news/2592/
* https://www.postgresql.org/docs/15/release-15-2.html
- Bump latest_supported_llvm_ver to 15. - Update to 15.1:
* https://www.postgresql.org/about/news/2543/
* https://www.postgresql.org/docs/15/release-15-1.html - Update to 15.0:
* https://www.postgresql.org/about/news/p-2526/
* https://www.postgresql.org/docs/15/release-15.html
- Move pg_upgrade from *-contrib to *-server.
- Drop support for the 9.x versioning scheme. - Update to 15~rc2
* https://www.postgresql.org/about/news/p-2521/
* Reverting the "optimized order of GROUP BY keys" feature. - Fix source URLs - Update to 15~rc1
https://www.postgresql.org/about/news/p-2516/ - Create mechanism to specify the latest supported LLVM version.
Automatically pin to that version if the distribution has a newer
unsupported default version. - Disable LLVM JIT on riscv64 - Update to 15~beta4
https://www.postgresql.org/about/news/p-2507/ - Update to 15~beta3
https://www.postgresql.org/about/news/p-2496/ - use %version requires for the contrib package for now as
15~beta1 is actually smaller than 15. - Add proper conditionals for lz4 and zstd - Upgrade to 15~beta1
https://www.postgresql.org/about/news/postgresql-15-beta-1-released-2453/
https://www.postgresql.org/docs/15/release-15.html
- Refreshed patches to apply cleanly again:
0001-jit-Workaround-potential-datalayout-mismatch-on-s390.patch
postgresql-conf.patch
postgresql-llvm-optional.patch
postgresql-plperl-keep-rpath.patch
postgresql-testsuite-keep-results-file.patch
postgresql-var-run-socket.patch
- Add buildrequires for lz4 and zstd support - fork package for postgresql 15 - Upgrade to 14.3:
* bsc#1199475, CVE-2022-1552: Confine additional operations
within "security restricted operation" sandboxes.
* https://www.postgresql.org/docs/14/release-14-3.html - bsc#1198166: Pin to llvm13 until the next patchlevel update. - bsc#1195680: Upgrade to 14.2:
* https://www.postgresql.org/docs/14/release-14-2.html
* Reindexing might be needed after applying this upgrade, so
please read the release notes carefully. - boo#1190740: Add constraints file with 12GB of memory for s390x
as a workaround - Add a llvmjit-devel subpackage to pull in the right versions
of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
implementation packages and their noarch counterpart.
- Update the BuildIgnore section. - bsc#1192516: Upgrade to 14.1
* Make the server reject extraneous data after an SSL or GSS
encryption handshake (CVE-2021-23214).
* Make libpq reject extraneous data after an SSL or GSS
encryption handshake (CVE-2021-23222).
* https://www.postgresql.org/docs/14/release-14-1.html - boo#1191782: Let rpmlint ignore shlib-policy-name-error. - Remove postgresql-testsuite-int8.sql.patch, because its purpose
is unclear. This affects only the test subpackage. - Upgrade to 14.0
https://www.postgresql.org/about/news/postgresql-14-released-2318/
https://www.postgresql.org/docs/14/release-14.html - Let genlists skip non-existing binaries to avoid lots of version
conditionals in the file lists. - Upgrade to 14~rc1
https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
https://www.postgresql.org/docs/14/release-14.html
https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items - Upgrade to 14~beta2
https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
https://www.postgresql.org/docs/14/release-14.html
https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items - Upgrade to 14~beta1
https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
https://www.postgresql.org/docs/14/release-14.html
https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
it seems it is not needed anymore, need to be double checked. - bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
Use llvm11 as a workaround. - Upgrade to version 13.3:
* https://www.postgresql.org/docs/13/release-13-3.html
* CVE-2021-32027, bsc#1185924:
Prevent integer overflows in array subscripting calculations.
* CVE-2021-32028, bsc#1185925: Fix mishandling of “junk”
columns in INSERT ... ON CONFLICT ... UPDATE target lists.
* CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
computation of UPDATE ... RETURNING
"pg_psql_temporary_savepoint" does not exist”.
- Don't use %_stop_on_removal, because it was meant to be private
and got removed from openSUSE. %_restart_on_update is also
private, but still supported and needed for now (bsc#1183168). - Re-enable build of the llvmjit subpackage on SLE, but it will
only be delivered on PackageHub for now (boo#1183118). - Remove leftover PreReq on chkconfig, we stopped using it long
time ago. - boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW. - Upgrade to version 13.2:
* https://www.postgresql.org/docs/13/release-13-2.html
* Updating stored views and reindexing might be needed after
applying this update.
* CVE-2021-3393, bsc#1182040: Fix information leakage in
constraint-violation error messages.
* CVE-2021-20229, bsc#1182039: Fix failure to check per-column
SELECT privileges in some join queries.
* Obsoletes postgresql-icu68.patch. - Add postgresql-icu68.patch: fix build with ICU 68 - bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
them to avoid dangling symlinks in the devel package. - Upgrade to version 13.1:
* CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
and firing of deferred triggers within index expressions and
materialized view queries.
* CVE-2020-25694, bsc#1178667:
a) Fix usage of complex connection-string parameters in pg_dump,
pg_restore, clusterdb, reindexdb, and vacuumdb.
b) When psql's \connect command re-uses connection parameters,
ensure that all non-overridden parameters from a previous
connection string are re-used.
* CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
modifying specially-treated variables.
* Fix recently-added timetz test case so it works when the USA
is not observing daylight savings time.
(obsoletes postgresql-timetz.patch)
* https://www.postgresql.org/about/news/2111/
* https://www.postgresql.org/docs/13/release-13-1.html - Fix a DST problem in the test suite: postgresql-timetz.patch
https://postgr.es/m/16689-57701daa23b377bf@postgresql.org - Initial packaging of PostgreSQL 13:
* https://www.postgresql.org/about/news/2077/
* https://www.postgresql.org/docs/13/release-13.html h02-armsrv2 1732121546
cs de el es fr it ja ko pl pt ro ru sv tr uk vi zh zh 16.6-150600.16.10.1 16.6-150600.16.10.1 16.6-150600.16.10.1
plperl.so plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl-16.mo plperl--1.0.sql plperl.control plperlu--1.0.sql plperlu.control /usr/lib/postgresql16/lib64/ /usr/share/locale/cs/LC_MESSAGES/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/el/LC_MESSAGES/ /usr/share/locale/es/LC_MESSAGES/ /usr/share/locale/fr/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/ja/LC_MESSAGES/ /usr/share/locale/ko/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/ro/LC_MESSAGES/ /usr/share/locale/ru/LC_MESSAGES/ /usr/share/locale/sv/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/locale/uk/LC_MESSAGES/ /usr/share/locale/vi/LC_MESSAGES/ /usr/share/locale/zh_CN/LC_MESSAGES/ /usr/share/locale/zh_TW/LC_MESSAGES/ /usr/share/postgresql16/extension/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:36478/SUSE_SLE-15-SP6_Update/bc391bc779bbdc4eedf2c23959bae27b-postgresql16.SUSE_SLE-15-SP6_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=55d4d0757c950af9f731cff83e6c88e4dadb97ee, stripped ASCII text R R R R R R vBoc?>WD| uOwG s'! J:>fdx0-S,GOw})(7R\Ŗ-} D:V{Iݵ>w\e!|(ʨ4;0. KiC/e݅Dˡ -s\Nd9 CW]ft(YْN35
P/ƴ35Z|EH[(p# $H|ji b};]0jVnO4鏟N[3Cb: |.A1[D}W&q2=,;hTWv{Ύ ,\^zG.5TWX `FkԶfJ3> 0yib7tM@ 0M'dYdz0\Q h%_toO4<^l9eoqͨs X:~/xi bd@ ;U1ou1D5,B(DDŽ cDXXL_B/R5#a] w:.6xs$# [99CJi
!J'L0L#
1tľ+fFնfU9MSN;,!ro0 e/%/a$na K12К*k3DܻDSfXmę٢%a6osX `bzXC::>`+Aysj#uMXxc B0z&6𰌃Pn~@2A$&_@9Ce=QʭP
M߲H{ i l6i[ A6vsR k%m.orl/^Ӣ |(
T(Ht$)z葇ހ9 Rey\eBi@rhܑw_uSzXT[ h 7*}l
_< gq̫4D2'6.Qi*ak 儊ql&qLv:e&^"J!u߂S #N2ǎ d3$~̧~s ƪ7߱qC!~\h۳bNmQxN$Var&"a
}(0JJUTj6ė b|y7Ȳ$h#ۺ> AG֦c2W4c lёNAf%9 WK\l-B
(: 9#emY usǸ3"}+E_Nc3(;ʦ?@ȕ ;hקQӤU
uEP𭧗=E5fߔ['QTx~̗y.z
܁˚+%VfFϱ Zg;X x9P~}B҇\FYH DXPa"2WՃtuYw~:_5GߒsT*"t5Q r
1=;QSXmE`3b%u@3<z ?6SFREMEFKX
= =QtrQ &$@~̀A~ bTKE2H]UL5YŮg 9xbKٕZc\_VVH5s T4߱ڒ^iCN fGY;bM7i Lۄ,8
7ls
,.qG{6 ڇ ;(8t]f@9 LYdgeOHt@(Ut%] *^L4`Q(J$h ř=回L.u'c ȃŋ)fhcлuY"i{r} ֪%+nʷրiUM<s! +~ ]>^tAe3>Jz):-:cs & \$'g ngw#
5.Px/څ
?6z5O&f{͏ lgB1+nDok +qye]Wi ª`^{
|it .5ƳzaVt"Igaz_q;%Fll$Q @ȝwm,'oj"
ݝ~]1 #X¼O]
ZrگV" og.Zd.Д 1`]`Yf:yq&
KcS`IWgKH I +vǖ3fg] $Ƈ!k[}8⚆Ta Q'?c
c!F^c>O0^jc/&,x>:!eL"^W};8iFQGߒ|[O@ GD ^lez _@UPN [GM(l= IH#BQ{;}80=9|+i[
@hjSOvz9:J pr|DR{㻢s]7{ 2
HbK {,Pɏ*ٌ("0]L}#ɌQ<p Vm Yzr G^.@*/4ѿox哮qu )p+7l6=6oj.>\T?M+A; х.g3I]P[BG>
=^u7ӑQA!-Z
X"H\`99')' M"hdVa1wtԭ*E$ 4oZf7{.R653ʕz݇
Fzo 6s\ nѰuvN>MLo n Պjm. apWtZHּNf68e =BXn%\Ѐ.kDg/POҒ8$t iQ~(7'UwL|[[R5
Wu=s`^6,Igl0a.OqRNH2)Sݭ
پj>W&hsFp`XpmkdZM Z:_(lٲ;:#cldĿ;CATm;)~\D lb OIbOƁVw*4Z=n
9I
LgY8p xi
!o\.Il!,.g[ ~d-/$ qヤU$#y].M gS(]E%}"&o(=OvS]}J1}I(hP"/!)g9\ BbKhb3Mpς ؉5u0B 1uyxvgj&{>t^2Y|*!Uuzͥśe[_\s4'Hrڇ͂Q\ ^yP)nԃ{w~co\ ɝn.h MI).
l ]R
="RAƅn#m$ ijm^ɳ+qNy(ty$4Kx
Fߪ.mƗJܷ "IWQƿbr]y\` tċ)rjbJumHӯԺp5w&WH/C`MJbF u.ye hw2uJ{ "y3t zdǦUN`{2wiSv**Q|u%3#W[Yo*Vem N{J ˁM} 5RR{.5Sf2GNSrkqt : SV2=Ba3oR)^xoh*j-˿.4n F &KPyc|z/0Dg6 Z cG<)ݖ
-؝{Xb+H;P-ٛ۶wtgn*np#(ĵ|fS_ݱ ]oz Fdysseb5
aK 9;Ui`m=@E< 3I?쩰0/CL~ց]7قS@pJ'$3L{ٓX"Q\G @GN_K)4XKkܸK5V@ Է=9 f@zOk;Lҹnc̏z|ۆ̆ ~l Ck}M=mO X
mFY>L3fyP=T#R^ۛ:ǜe2 ";GJQ nGN6.3;T"dח@6mX'Yc+\ -6 =eo;F+R#]T]o+I ˄XX {YUl pX(.0ۀCc4X˪{|=- gſz
Xo-)ji2~"1ju=Ȧԇ 2b_lmaZ}U#|n6G
\0?
6"@3~Y(M
' ѲpP;*n=UqSrl. s`
{l@;3"4~~ שCθJ.G
eYM]qZ[x;(AX8G,Y賥c{hګ u0B3
y \NĞ)C%žd g!PޠxM`E b[+HthxTj*x3Xy P %4xrQ_-ܙxDBLSdE#gʐ5 ]_"31V\b
KUT>+WjOh[zYe`1:mɡVG2+ Iؗv0\?[NL>oW )e q( (ؘۏ]>J9bahp̐tDl|IaHWVRTPxVNbM/a_jʂ3 ib}IᕞZTU6ǫ%}VԪW|?vKNwꕛj |#1uvHc0D숸k)U : $Ӎ~ƣy2}po<6
7L{sƕΧzg$4
5KbzVz /e @E4
e'R"$
݆ͥ.-ݙJ}Fx9&`]W1K> }cYt Wĕ:0G}nrR|5uAybҵLެ0E#&Ed 5Q/p3\d8DjgƮ>@,fl
""* Fkۏ& \V
{