Commit Graph

40 Commits

Author SHA1 Message Date
Gyorgy Sarvari 48b2ed255f postgresql: upgrade 14.21 -> 14.22
This is a bugfix release.

Changelog: https://www.postgresql.org/docs/release/14.22/

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2026-03-16 14:41:51 +01:00
Hitendra Prajapati 631e0ac2f0 postgresql: upgrade 14.20 -> 14.21
It contains Security fixes for CVE-2026-2003, CVE-2026-2004,
CVE-2026-2005, CVE-2026-2006 and CVE-2026-2007.
It also contains other bug fixes and for more details refer Release note.

0001-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for 14.21

Release notes: https://www.postgresql.org/docs/release/14.21/

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2026-02-26 13:36:29 +01:00
Gyorgy Sarvari 94f3cecaae postgresql: upgrade 14.19 -> 14.20
Beside other bugfixes, it contains fixes for CVE-2025-12817 and CVE-2025-12818.

Release notes: https://www.postgresql.org/docs/release/14.20/

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-12-17 15:37:58 +01:00
Vijay Anusuri 28798fac9f postgresql: upgrade 14.18 -> 14.19
Includes fix for CVE-2025-8713, CVE-2025-8714, CVE-2025-8715

License-Update: Align organization wording in copyright statement

Changelog:
https://www.postgresql.org/docs/release/14.19/

0001-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for 14.19

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:27:30 +02:00
Yogita Urade cec6410b0c postgresql: upgrade 14.17 -> 14.18
Upgrade includes fix for CVE-2025-4207

Release notes:
https://www.postgresql.org/docs/release/14.18/

0001-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for 14.18

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-07-02 20:31:21 -04:00
Vijay Anusuri 62473559da postgresql: upgrade 14.14 -> 14.17
License-Update: Update license year to 2025

Includes fix for CVE-2025-1094

Changelog:
https://www.postgresql.org/docs/release/14.17/

Refreshed 0003-configure.ac-bypass-autoconf-2.69-version-check.patch for
14.17

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-03-06 09:45:52 -05:00
Yogita Urade 8fb0186a91 postgresql: upgrade 14.13 -> 14.14
Includes fix for CVE-2024-10976, CVE-2024-10977, CVE-2024-10978
and CVE-2024-10979

Changelog:
https://www.postgresql.org/docs/release/14.14/

0001-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for 14.14

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
2024-12-31 09:00:05 -05:00
Vijay Anusuri d4a4e8b281 postgresql: upgrade 14.11 -> 14.13
Addresses CVEs CVE-2024-4317 & CVE-2024-7348 and other bug fixes.

Release notes are available at:
https://www.postgresql.org/docs/release/14.13/
https://www.postgresql.org/docs/release/14.12/

0001-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for new version.

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-08-25 18:11:33 -04:00
Soumya Sambu 938a3ff43c postgresql: Upgrade to 14.11
Addresses CVEs and other bug fixes. Remove patches that are fixed
in this release. Release notes are available at:

https://www.postgresql.org/docs/release/14.10/
https://www.postgresql.org/docs/release/14.11/

0001-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for new version.

License-Update: Copyright year updated

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-03-25 07:11:05 -04:00
Yogita Urade 1117be8983 postgresql: fix CVE-2023-5868 CVE-2023-5869 CVE-2023-5870
CVE-2023-5868:
postgresql: Compute aggregate argument types correctly in
transformAggregateCall()

CVE-2023-5869:
postgresql: Detect integer overflow while computing new
array dimensions

CVE-2023-5870:
postgresql: Ban role pg_signal_backend from more superuser
backend types.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-5868
https://nvd.nist.gov/vuln/detail/CVE-2023-5869
https://nvd.nist.gov/vuln/detail/CVE-2023-5870

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-12-13 13:35:51 -05:00
Robert Joslyn 4aeca7b2b3 postgresql: Update to 14.9
This is a minor release to address CVEs and other bug fixes without new
features. Remove patches that are fixed in this release. Release notes
are available at:

https://www.postgresql.org/docs/release/14.6/
https://www.postgresql.org/docs/release/14.7/
https://www.postgresql.org/docs/release/14.8/
https://www.postgresql.org/docs/release/14.9/

License-Update: Copyright year updated

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
[Fixup patch fuzzy]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-08-30 13:40:19 -04:00
vkumbhar d57b6c0002 postgresql: fix CVE-2023-2454 & CVE-2023-2455
fixed Below security CVE:
1)CVE-2023-2454 postgresql: schema_element defeats protective search_path changes.
2)CVE-2023-2455 postgresql: row security policies disregard user ID changes after inlining.

Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-06-23 11:01:38 -04:00
Manoj Saun 0a19e27595 postgresql: fix ptest failure of sysviews test
In postgresql sysview ptest are failing due to hidden debug info in pg_config table.
The information is hidden due to existing patch 0001-config_info.c-not-expose-build-info.patch
So for passing the test we need to reduce the row count in the sysviews test.
Also for test results to be shown as pass we need to reduce the row count for
the expected count in the sysviews.out file.

Signed-off-by: Manoj Saun <manojsingh.saun@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-04-13 08:23:13 -04:00
Changqing Li 6623bf1ca8 postgresql: fix CVE-2022-41862
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-03-05 07:53:18 -05:00
Steffen Olsen 088eaf9ea9 postgreql: Fix pg_config not working after buildpaths patch
The patch for removing 'QA issues' with pg_config was incomplete, it did not
change the number of items supposed to be in the configdata stucture. This leads to
get_configdata function asserting, and pg_config command does not work

Signed-off-by: Steffen Olsen <steffen.olsen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 730c85613e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-09-22 09:45:09 -04:00
Wang Mingyu 73e66e5ea3 postgresql: upgrade 14.4 -> 14.5
0001-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for new version.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c484ec1300)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-09-22 09:44:41 -04:00
Mingli Yu fe7250a321 postgresql: Fix the buildpaths issue
Fixes:
  WARNING: postgresql-14.4-r0 do_package_qa: QA Issue: File /usr/bin/postgres in package postgresql contains reference to TMPDIR
  File /usr/bin/pg_config in package postgresql contains reference to TMPDIR [buildpaths]
  WARNING: postgresql-14.4-r0 do_package_qa: QA Issue: File /usr/include/pg_config.h in package libpq-dev contains reference to TMPDIR [buildpaths]
  WARNING: postgresql-14.4-r0 do_package_qa: QA Issue: File /usr/include/postgresql/server/pg_config.h in package postgresql-server-dev contains reference to TMPDIR
  File /usr/lib/postgresql/pgxs/src/Makefile.global in package postgresql-server-dev contains reference to TMPDIR [buildpaths]
  WARNING: postgresql-14.4-r0 do_package_qa: QA Issue: File /usr/lib/libpgcommon.a in package postgresql-staticdev contains reference to TMPDIR
  File /usr/lib/libpgcommon_shlib.a in package postgresql-staticdev contains reference to TMPDIR [buildpaths]

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 59eff6269c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-08-07 14:58:13 -07:00
wangmy e4c5f5b359 postgresql: upgrade 14.3 -> 14.4
0001-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for new version.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a9db38fa9a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-04 09:23:13 -04:00
wangmy 133d2c2003 postgresql: upgrade 14.2 -> 14.3
0001-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for new version.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b3aa90d11d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-05-30 13:13:22 -07:00
Zheng Ruoqin eb62c5af59 postgresql: upgrade 14.1 -> 14.2
refresh 0001-configure.ac-bypass-autoconf-2.69-version-check.patch
License-Update: year updated to 2022

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-23 09:25:19 -08:00
Khem Raj aa22894fa3 postgresql: Fix build on riscv
Remove duplicate code

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 21:03:16 -08:00
Robert Joslyn 4cf47b8325 postgresql: Update to 14.1
Refresh patches, since upstream moved from configure.in to configure.ac.
Remove CVE backports that no longer apply to the new version.

Update SRC_URI to use https. Upstream redirects http to https anyway.

Rework PACKAGECONFIG:
 * Reorder PACKAGECONFIG to be the same as the `./configure --help` output
   to make future updates easier.
 * Move zlib to a PACKAGECONFIG. Upstream enables it by default, so keep it
   enabled to preserve existing behavior.
 * Add PACKAGECONFIGs for ldap, systemd, gssapi, xslt, and lz4
 * Update openssl to use `--with-ssl=openssl` because the `--with-openssl`
   form is deprecated.
 * Remove the nls config because gettext.bbclass already appends the
   desired option to EXTRA_OECONF based on the value of USE_NLS.

Enable spinlocks on aarch64. Support was added in version 9.2.5 and
should provide much better performance.

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-18 09:01:51 -08:00
Changqing Li 8e57fb9b1e postgresql: fix CVE-2021-23214,CVE-2021-23222
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-12-23 00:21:30 -08:00
Changqing Li fea2b1ef77 postgresql: upgrade 13.3 -> 13.4
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-09-14 19:16:26 -07:00
zangrc 48cb359db2 postgresql: upgrade 13.2 -> 13.3
Refresh the following patch:
0001-configure.in-bypass-autoconf-2.69-version-check.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 18:39:35 -07:00
zhengruoqin cb3f4cffe9 postgresql: upgrade 13.1 -> 13.2
-License-Update: Copyright year updated to 2021.

Upgrade patches to fix

ERROR: postgresql-13.2-r0 do_patch: Fuzz detected:

Applying patch 0001-configure.in-bypass-autoconf-2.69-version-check.patch
patching file configure.in
Hunk #1 succeeded at 19 with fuzz 2.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-22 09:14:39 -08:00
Yi Fan Yu e6b08a15d9 postgresql: bypass autoconf version check
allowing autoconf to be upgraded 2.69->2.71.

Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-05 18:06:33 -08:00
changqing.li@windriver.com 615a9d6334 postgresql: upgrade 12.4 -> 13.1
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-29 22:03:27 -08:00
Wang Mingyu 04dc1ffc16 postgresql: 12.2 -> 12.3
0001-Use-pkg-config-for-libxml2-detection.patch
removed since it is not available in 12.3

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-05 18:42:45 -07:00
Zheng Ruoqin 0e88ca24d6 postgresql: upgrade 11.5 -> 12.0
Update 0001-Use-pkg-config-for-libxml2-detection.patch for new version.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-07 17:43:44 -08:00
Hongxu Jia 6a160e340d postgresql: improve reproducibility
- Make pg_config not record var-CC, var-CFLAGS, and configure
  which contains build paths

- Split pgxs in which Makefile.global contains build path from
  package postgresql to postgresql-server-dev, it refers ubuntu
Here is we got from Ubuntu 18.04
$ dpkg -c /var/cache/apt/archives/postgresql-server-dev-10_10.8-0ubuntu0.18.04.1_amd64.deb
-rwxr-xr-x root/root     30792 2019-05-07 17:20 ./usr/lib/postgresql/10/bin/pg_config
drwxr-xr-x root/root         0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/
drwxr-xr-x root/root         0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/
drwxr-xr-x root/root         0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/config/
drwxr-xr-x root/root         0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/src/
-rw-r--r-- root/root     31309 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/src/Makefile.global

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:33 -07:00
Khem Raj 319789e47c postgresql: Fix build for RISC-V
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-15 17:15:05 -07:00
Akram Hameed a368821c96 postgresql: Update the regex to determine PGMAJORVERSION to match v10+ database clusters
Older versions of postgresql would generate MAJVER.MINVER in new clusters. 10+ do not. Update the regex to determine PGMAJORVERSION as a single int.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-15 22:08:47 -08:00
Changqing Li 6f1d9e2a7f postgresql: upgrade to 11.1
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-29 18:44:56 -08:00
Otavio Salvador 103939fecd postgresql: Allow successful run of postgresql-setup
The postgresql-setup utility log-in on postgres user to create the
database, however, the shell was set to bash and it wasn't being
installed as runtime dependency.

This rework this expectation to use busybox ash as shell and avoid the
new dependency

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
Armin Kuster 805e74d00c postgresql: Fix build issue with timezone 2018f update
Sync our copy of the timezone library with IANA release tzcode2018f.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-22 14:44:30 -07:00
Changqing Li a6b72344a2 postgresql: upgrade 9.4.18 -> 10.4
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-11 20:16:53 -07:00
Jackie Huang a4c8d9d03a postgresql: update to 9.4.17
* Release notes:
  https://www.postgresql.org/docs/9.4/static/release-9-4-17.html

* Drop the patch emove.autoconf.version.check.patch since the
  required autoconf version is used in oe-core.

* LICENSE checksum updated since the copyright year is changed.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
[fixup for master-next context]
Signed-off-by: Armin Kuster <akuster808@gmail.com>

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 12:43:44 -07:00
Armin Kuster a03645865e postgresql: refresh patches
WARNING: postgresql-9.4.15-r0 do_patch:
Some of the context lines in patches were ignored. This can lead to incorrectly applied patches.
The context lines in the patches can be updated with devtool:

    devtool modify <recipe>
    devtool finish --force-patch-refresh <recipe> <layer_path>

Then the updated patches and the source tree (in devtool's workspace)
should be reviewed to make sure the patches apply in the correct place
and don't introduce duplicate lines (which can, and does happen
when some of the context is ignored). Further information:
http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html
https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450
Details:
Applying patch remove.autoconf.version.check.patch
patching file configure.in
Hunk #1 succeeded at 19 with fuzz 2.

Now at patch remove.autoconf.version.check.patch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 12:43:42 -07:00
Armin Kuster 742404cc8a postgres: move to recipes-dbs
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01 16:10:38 -08:00