Package Release Info

postgresql15-15.14-150200.5.44.1

Update Info: SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2025-3030
Available in Package Hub : 15 SP4 Subpackages Updates

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

postgresql15-llvmjit
postgresql15-llvmjit-devel
postgresql15-test

Change Logs

* Thu Aug 14 2025 mrueckert@suse.de
- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)
* Fri May 09 2025 max@suse.com
- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.
* Tue Feb 18 2025 max@suse.com
- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/
* Tue Feb 11 2025 max@suse.com
- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64
* Tue Jan 28 2025 max@suse.com
- Fix build, add postgresql-tzdata2025a.patch
* Tue Nov 19 2024 max@suse.com
- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/
* Wed Nov 13 2024 max@suse.com
- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/
* Tue Nov 05 2024 max@suse.com
- Sync spec file from postgresql17.
* Sat Aug 10 2024 mrueckert@suse.de
- Upgrade to 15.8 (bsc#1229013):
  * bsc#1229013, CVE-2024-7348 PostgreSQL relation replacement
    during pg_dump executes arbitrary SQL
  * https://www.postgresql.org/about/news/p-2910/
  * https://www.postgresql.org/docs/release/15.8/
* Wed May 08 2024 max@suse.com
- Upgrade to 15.7 (bsc#1224051):
  * bsc#1224038, CVE-2024-4317: Restrict visibility of pg_stats_ext
    and pg_stats_ext_exprs entries to the table owner. See the
    release notes for the steps that have to be taken to fix
    existing PostgreSQL instances.
  * Fix incompatibility with LLVM 18.
  * https://www.postgresql.org/docs/release/15.7/
- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.
* Tue Mar 12 2024 aaronpuchert@alice-dsl.net
- Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work.
* Thu Mar 07 2024 sarah.kriesch@opensuse.org
- Remove constraints file because improved memory usage for s390x
* Thu Feb 29 2024 dimstar@opensuse.org
- Use %patch -P N instead of deprecated %patchN.
* Thu Feb 08 2024 max@suse.com
- Upgrade to 15.6:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/15.6/
Version: 15.1-150200.5.3.2
* Thu Nov 10 2022 max@suse.com
- Update to 15.1:
  * https://www.postgresql.org/about/news/2543/
  * https://www.postgresql.org/docs/15/release-15-1.html
* Thu Oct 13 2022 max@suse.com
- Update to 15.0:
  * https://www.postgresql.org/about/news/p-2526/
  * https://www.postgresql.org/docs/15/release-15.html
- Move pg_upgrade from *-contrib to *-server.
- Drop support for the 9.x versioning scheme.
* Thu Oct 06 2022 max@suse.com
- Update to 15~rc2
  * https://www.postgresql.org/about/news/p-2521/
  * Reverting the "optimized order of GROUP BY keys" feature.
* Fri Sep 30 2022 fvogt@suse.com
- Fix source URLs
* Thu Sep 29 2022 max@suse.com
- Update to 15~rc1
  https://www.postgresql.org/about/news/p-2516/
* Thu Sep 22 2022 aaronpuchert@alice-dsl.net
- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.
* Mon Sep 12 2022 schwab@suse.de
- Disable LLVM JIT on riscv64
* Thu Sep 08 2022 max@suse.com
- Update to 15~beta4
  https://www.postgresql.org/about/news/p-2507/
* Mon Sep 05 2022 max@suse.com
- Update to 15~beta3
  https://www.postgresql.org/about/news/p-2496/
* Sat May 21 2022 mrueckert@suse.de
- use %version requires for the contrib package for now as
  15~beta1 is actually smaller than 15.
* Sat May 21 2022 mrueckert@suse.de
- Add proper conditionals for lz4 and zstd
* Sat May 21 2022 mrueckert@suse.de
- Upgrade to 15~beta1
  https://www.postgresql.org/about/news/postgresql-15-beta-1-released-2453/
  https://www.postgresql.org/docs/15/release-15.html
- Refreshed patches to apply cleanly again:
  0001-jit-Workaround-potential-datalayout-mismatch-on-s390.patch
  postgresql-conf.patch
  postgresql-llvm-optional.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- Add buildrequires for lz4 and zstd support
* Sat May 21 2022 mrueckert@suse.de
- fork package for postgresql 15
* Thu May 12 2022 max@suse.com
- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html
* Wed Apr 13 2022 max@suse.com
- bsc#1198166: Pin to llvm13 until the next patchlevel update.
* Tue Feb 08 2022 max@suse.com
- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.
* Sat Dec 11 2021 ada.lovelace@gmx.de
- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround
* Thu Nov 25 2021 max@suse.com
- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.
* Wed Nov 10 2021 max@suse.com
- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html
* Wed Oct 20 2021 max@suse.com
- boo#1191782: Let rpmlint ignore shlib-policy-name-error.