Package Release Info

postgresql17-17.10-160000.1.1

Update Info: Base Release
Available in Package Hub : 16.0

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

postgresql17-llvmjit
postgresql17-llvmjit-devel
postgresql17-test

Change Logs

Version: 17.10-150600.13.27.1
* Wed May 13 2026 max@suse.com
- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/
* Thu Apr 30 2026 max@suse.com
- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.
* Mon Mar 30 2026 max@suse.com
- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)