postgresql18-mini-18.6-160100.1.1

- Let llvmjit-devel require the llc and clang binaries to fix
  build of extensions on SLE-16 and newer.
- Use LLVM 15 on SLE-15 up to SP5 and LLVM 17 on SP6 and SP7.

- Update to version 18.6:
  https://www.postgresql.org/docs/18/release-18-6.html
  https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
  Security Fixes:
  - bsc#1275046, CVE-2026-6464: psql COPY FROM STDIN early failure
    processes data lines as psql commands (CVSS v3.1: 8.1)
  - bsc#1275044, CVE-2026-6469: ALTER TABLE ALTER TYPE resets
    extended statistics ownership (CVSS v3.1: 3.8)
  - bsc#1275043, CVE-2026-6470: Fails to check type USAGE privilege
    (CVSS v3.1: 4.3)
  - bsc#1275042, CVE-2026-6471: Logical decoding can dlopen
    arbitrary file (CVSS v3.1: 7.2)
  - bsc#1275001, CVE-2026-14662: tsvector and tsquery undersize
    allocations, via integer wraparound (CVSS v3.1: 8.8)
  - bsc#1275002, CVE-2026-14663: pgcrypto, for OpenSSL-disabled
    ciphers, silently encrypts to and decrypts from cleartext (CVSS
    v3.1: 6.5)
  - bsc#1275068, CVE-2026-14664: Regexp heap buffer overflow
    executes arbitrary code (CVSS v3.1: 8.8)
  - bsc#1275067, CVE-2026-14666: Row security caching disregards
    role modifications (CVSS v3.1: 4.2)
  - bsc#1275066, CVE-2026-14668: ctid type confusion in selectivity
    estimator discloses derivative of arbitrary read (CVSS v3.1:
    8.1)
  - bsc#1275065, CVE-2026-14669: to_char heap buffer overflow
    executes arbitrary code (CVSS v3.1: 8.8)
  - bsc#1275064, CVE-2026-14670: plperl tied object heap buffer
    overflow executes arbitrary code (CVSS v3.1: 8.8)
  - bsc#1275063, CVE-2026-14671: refint plan cache type confusion
    executes arbitrary code (CVSS v3.1: 8.8)
  - bsc#1275062, CVE-2026-14672: Observable response discrepancy
    with non-default scram_iterations provides user existence
    oracle (CVSS v3.1: 5.3)
  - bsc#1275061, CVE-2026-14673: amcheck does not clear untrusted
    search path (CVSS v3.1: 3.8)
  - bsc#1275060, CVE-2026-14676: pg_stat_statements heap buffer
    overflow executes arbitrary code (CVSS v3.1: 8.8)
  - bsc#1275059, CVE-2026-14677: 32-bit pltcl and plperl undersize
    allocations, via integer wraparound (CVSS v3.1: 8.8)
  - bsc#1275058, CVE-2026-14678: pg_trgm picksplit reads past end
    of buffer (CVSS v3.1: 4.3)
  - bsc#1275057, CVE-2026-14679: Stack buffer overflow in argument
    match writes 0x0 and 0x1 to server memory (CVSS v3.1: 8.2)
  - bsc#1275056, CVE-2026-14680: Type confusion via "internal"
    arguments (CVSS v3.1: 8.8)
  - bsc#1275055, CVE-2026-14681: Improper enforcement of GSSAPI
    encryption when coupled with SSL (CVSS v3.1: 4.2)
  - bsc#1275054, CVE-2026-15741: Expression deparse allows SQL
    injection via EXTRACT argument (CVSS v3.1: 8.8)
  - bsc#1275053, CVE-2026-15742: fuzzystrmatch writes
    effectively-arbitrary addresses, via integer wraparound (CVSS
    v3.1: 8.8)
  - bsc#1275052, CVE-2026-16238: Type confusion in
    pg_restore_attribute_stats() executes arbitrary code (CVSS
    v3.1: 8.8)
  - bsc#1275051, CVE-2026-16239: Type confusion in cursor CLOSE +
    DECLARE executes arbitrary code (CVSS v3.1: 8.8)
  - bsc#1275050, CVE-2026-16241: ECPG integer underflow can crash
    the client (CVSS v3.1: 3.8)
  - bsc#1275049, CVE-2026-18024: ascii() function reads past end of
    buffer (CVSS v3.1: 4.3)
  - bsc#1275048, CVE-2026-18408: psql \unrestrict lets superuser of
    pg_dump origin server execute arbitrary code in psql client
    (CVSS v3.1: 8.8)
  - bsc#1275047, CVE-2026-19385: pg_dump heap buffer overflow
    executes arbitrary code (CVSS v3.1: 8.8)

- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-<N>.

- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/

- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.

- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)

- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".

- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.

- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch

- Fix build with uring for post SLE15 code streams.