e42d1e758f
postgresql: refresh patches
...
fixes:
WARNING: postgresql-12.16-r0 do_patch: Fuzz detected:
Applying patch 0001-Add-support-for-RISC-V.patch
patching file src/include/storage/s_lock.h
Hunk #2 succeeded at 339 with fuzz 1.
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2023-09-09 12:52:03 -04:00
d96f8c4853
postgresql: Update to 12.16
...
This is a minor release to address CVEs and other bug fixes without new
features. Remove patches that are fixed in this release. Release notes are
available at:
https://www.postgresql.org/docs/release/12.10/
https://www.postgresql.org/docs/release/12.11/
https://www.postgresql.org/docs/release/12.12/
https://www.postgresql.org/docs/release/12.13/
https://www.postgresql.org/docs/release/12.14/
https://www.postgresql.org/docs/release/12.15/
https://www.postgresql.org/docs/release/12.16/
License-Update: Copyright year updated
Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2023-09-04 09:05:03 -04:00
5f94e67479
postgresql: fix CVE-2023-2454 & CVE-2023-2455
...
fixed Below security CVE:
1)CVE-2023-2454 postgresql: schema_element defeats protective search_path changes.
2)CVE-2023-2455 postgresql: row security policies disregard user ID changes after inlining.
Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2023-07-14 07:08:54 -04:00
4f78732be2
postgresql: CVE-2022-41862 Client memory disclosure when connecting with Kerberos to modified server
...
Upstream-Status: Backport from https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=3f7342671341a7a137f2d8b06ab3461cdb0e1d88
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2023-04-06 07:32:11 -04:00
7952135f65
postgresql: Fix CVE-2022-2625
...
Upstream-Status: Backport from https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=5579726bd60a6e7afb04a3548bced348cd5ffd89
Description:
CVE-2022-2625 postgresql: Extension scripts replace objects not belonging to the extension.
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2022-12-11 16:01:15 -05:00
62842aac98
postgresql: CVE-2022-1552 Autovacuum, REINDEX, and others omit "security restricted operation" sandbox
...
Source: https://git.postgresql.org/gitweb/?p=postgresql.git ;
MR: 121822
Type: Security Fix
Disposition: Backport from https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=ab49ce7c3414ac19e4afb386d7843ce2d2fb8bda && https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=677a494789062ca88e0142a17bedd5415f6ab0aa
ChangeID: 5011e2e09f30f76fc27dc4cb5fa98a504d1aaec9
Description:
CVE-2022-1552 postgresql: Autovacuum, REINDEX, and others omit "security restricted operation" sandbox.
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com >
2022-10-30 14:47:35 -04:00
8ff12bfffc
postgresql: Fix build on riscv
...
Remove duplicate code
Signed-off-by: Khem Raj <raj.khem@gmail.com >
(cherry picked from commit aa22894fa3akuster808@gmail.com >
2022-04-19 10:15:37 -07:00
197453e127
postgresql: Update to 12.9
...
Bug and security fixes. Fix patch fuzz as well to remove bitbake
warning. Release notes available at:
https://www.postgresql.org/docs/release/12.8/
https://www.postgresql.org/docs/release/12.9/
12.8 fixes:
CVE-2021-3677
12.9 fixes:
CVE-2021-23214
CVE-2021-23222
Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2021-12-27 11:50:07 -08:00
666cc4c332
postgresql: 12.2 -> 12.3
...
0001-Use-pkg-config-for-libxml2-detection.patch
removed since it is not available in 12.3
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
(cherry picked from commit 04dc1ffc16akuster808@gmail.com >
2020-07-01 08:00:22 -07:00
0e88ca24d6
postgresql: upgrade 11.5 -> 12.0
...
Update 0001-Use-pkg-config-for-libxml2-detection.patch for new version.
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2019-11-07 17:43:44 -08:00
6a160e340d
postgresql: improve reproducibility
...
- Make pg_config not record var-CC, var-CFLAGS, and configure
which contains build paths
- Split pgxs in which Makefile.global contains build path from
package postgresql to postgresql-server-dev, it refers ubuntu
Here is we got from Ubuntu 18.04
$ dpkg -c /var/cache/apt/archives/postgresql-server-dev-10_10.8-0ubuntu0.18.04.1_amd64.deb
-rwxr-xr-x root/root 30792 2019-05-07 17:20 ./usr/lib/postgresql/10/bin/pg_config
drwxr-xr-x root/root 0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/
drwxr-xr-x root/root 0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/
drwxr-xr-x root/root 0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/config/
drwxr-xr-x root/root 0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/src/
-rw-r--r-- root/root 31309 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/src/Makefile.global
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2019-06-15 16:45:33 -07:00
319789e47c
postgresql: Fix build for RISC-V
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2019-03-15 17:15:05 -07:00
a368821c96
postgresql: Update the regex to determine PGMAJORVERSION to match v10+ database clusters
...
Older versions of postgresql would generate MAJVER.MINVER in new clusters. 10+ do not. Update the regex to determine PGMAJORVERSION as a single int.
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2019-01-15 22:08:47 -08:00
6f1d9e2a7f
postgresql: upgrade to 11.1
...
Signed-off-by: Changqing Li <changqing.li@windriver.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2018-11-29 18:44:56 -08:00
103939fecd
postgresql: Allow successful run of postgresql-setup
...
The postgresql-setup utility log-in on postgres user to create the
database, however, the shell was set to bash and it wasn't being
installed as runtime dependency.
This rework this expectation to use busybox ash as shell and avoid the
new dependency
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2018-11-26 09:38:14 -08:00
805e74d00c
postgresql: Fix build issue with timezone 2018f update
...
Sync our copy of the timezone library with IANA release tzcode2018f.
Signed-off-by: Armin Kuster <akuster808@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2018-10-22 14:44:30 -07:00
a6b72344a2
postgresql: upgrade 9.4.18 -> 10.4
...
Signed-off-by: Changqing Li <changqing.li@windriver.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2018-08-11 20:16:53 -07:00
a4c8d9d03a
postgresql: update to 9.4.17
...
* Release notes:
https://www.postgresql.org/docs/9.4/static/release-9-4-17.html
* Drop the patch emove.autoconf.version.check.patch since the
required autoconf version is used in oe-core.
* LICENSE checksum updated since the copyright year is changed.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com >
[fixup for master-next context]
Signed-off-by: Armin Kuster <akuster808@gmail.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2018-04-13 12:43:44 -07:00
a03645865e
postgresql: refresh patches
...
WARNING: postgresql-9.4.15-r0 do_patch:
Some of the context lines in patches were ignored. This can lead to incorrectly applied patches.
The context lines in the patches can be updated with devtool:
devtool modify <recipe>
devtool finish --force-patch-refresh <recipe> <layer_path>
Then the updated patches and the source tree (in devtool's workspace)
should be reviewed to make sure the patches apply in the correct place
and don't introduce duplicate lines (which can, and does happen
when some of the context is ignored). Further information:
http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html
https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450
Details:
Applying patch remove.autoconf.version.check.patch
patching file configure.in
Hunk #1 succeeded at 19 with fuzz 2.
Now at patch remove.autoconf.version.check.patch
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2018-04-13 12:43:42 -07:00
742404cc8a
postgres: move to recipes-dbs
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2018-03-01 16:10:38 -08:00
Armin Kuster
Robert Joslyn
vkumbhar
Hitendra Prajapati
Khem Raj
Wang Mingyu
Zheng Ruoqin
Hongxu Jia
Akram Hameed
Changqing Li
Otavio Salvador
Jackie Huang