aboutsummaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-dbs/postgresql
AgeCommit message (Collapse)Author
2024-04-02postgresql: Update to 12.18Matthias Schmitz
Minor security and bugfix release. Fixes CVE-2024-0985: PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL Additional information is available in the release notes: https://www.postgresql.org/docs/release/12.18/ Signed-off-by: Matthias Schmitz <matthias.schmitz@port4949.net> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-01-16postgresql: Update to 12.17Robert Joslyn
Minor security and bugfix release. Addresses the following CVEs: CVE-2023-5868: Memory disclosure in aggregate function calls CVE-2023-5869: Buffer overrun from integer overflow in array modification CVE-2023-5870: Role pg_signal_backend can signal certain superuser processes Additional information is available in the release notes: https://www.postgresql.org/docs/release/12.17/ Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-09-09postgresql: refresh patchesArmin Kuster
fixes: WARNING: postgresql-12.16-r0 do_patch: Fuzz detected: Applying patch 0001-Add-support-for-RISC-V.patch patching file src/include/storage/s_lock.h Hunk #2 succeeded at 339 with fuzz 1. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-09-04postgresql: Update to 12.16Robert Joslyn
This is a minor release to address CVEs and other bug fixes without new features. Remove patches that are fixed in this release. Release notes are available at: https://www.postgresql.org/docs/release/12.10/ https://www.postgresql.org/docs/release/12.11/ https://www.postgresql.org/docs/release/12.12/ https://www.postgresql.org/docs/release/12.13/ https://www.postgresql.org/docs/release/12.14/ https://www.postgresql.org/docs/release/12.15/ https://www.postgresql.org/docs/release/12.16/ License-Update: Copyright year updated Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-07-14postgresql: fix CVE-2023-2454 & CVE-2023-2455vkumbhar
fixed Below security CVE: 1)CVE-2023-2454 postgresql: schema_element defeats protective search_path changes. 2)CVE-2023-2455 postgresql: row security policies disregard user ID changes after inlining. Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-04-06postgresql: CVE-2022-41862 Client memory disclosure when connecting with ↵Hitendra Prajapati
Kerberos to modified server Upstream-Status: Backport from https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=3f7342671341a7a137f2d8b06ab3461cdb0e1d88 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-12-11postgresql: Fix CVE-2022-2625Hitendra Prajapati
Upstream-Status: Backport from https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=5579726bd60a6e7afb04a3548bced348cd5ffd89 Description: CVE-2022-2625 postgresql: Extension scripts replace objects not belonging to the extension. Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-10-30postgresql: CVE-2022-1552 Autovacuum, REINDEX, and others omit "security ↵Hitendra Prajapati
restricted operation" sandbox Source: https://git.postgresql.org/gitweb/?p=postgresql.git; MR: 121822 Type: Security Fix Disposition: Backport from https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=ab49ce7c3414ac19e4afb386d7843ce2d2fb8bda && https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=677a494789062ca88e0142a17bedd5415f6ab0aa ChangeID: 5011e2e09f30f76fc27dc4cb5fa98a504d1aaec9 Description: CVE-2022-1552 postgresql: Autovacuum, REINDEX, and others omit "security restricted operation" sandbox. Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
2022-04-19postgresql: Fix build on riscvKhem Raj
Remove duplicate code Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit aa22894fa352986a62c4530ad8facd8868b2e535) [Fixup for Dunfell context] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-27postgresql: Update to 12.9Robert Joslyn
Bug and security fixes. Fix patch fuzz as well to remove bitbake warning. Release notes available at: https://www.postgresql.org/docs/release/12.8/ https://www.postgresql.org/docs/release/12.9/ 12.8 fixes: CVE-2021-3677 12.9 fixes: CVE-2021-23214 CVE-2021-23222 Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-17postgresql: update to 12.7Armin kuster
Source: MontaVista Software, LLC MR: 111582, 111965, 111974, 110084 Type: Security Fix Disposition: Backport from postgres.org ChangeID: f1e8c58bedd5dd60404e3a0eb120888ad83fdc42 Description: Bug fix only update. https://www.postgresql.org/docs/12/release-12-7.html LIC_FILES_CHKSUM changed do to yr update Includes these CVEs: CVE-2021-32027 CVE-2021-32028 CVE-2021-32029 12.6: CVE-2021-3393 Signed-off-by: Armin kuster <akuster@mvista.com>
2021-02-19postgresql: Inherit python3targetconfigKhem Raj
it now ends up searching native python shared libraries and tries to link with it and fails on non-host architectures recipe-sysroot-native/usr/lib/libpython3.9.so: file not recognized: file format not recognized collect2: error: ld returned 1 exit status Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c499aaeef80b5af8d20521658449c4148f3d0806) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 572d4148267c6ff1b43dd3498020349cb0aa77c7) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-18postgresql: Update to 12.5Robert Joslyn
Fixes the following CVEs: CVE-2020-25694 CVE-2020-25695 CVE-2020-25696 Full release notes at: https://www.postgresql.org/docs/12/release-12-5.html Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 6ff4bd4f345b4e8030b9197d13097308df521576) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-19postgresql: Update to 12.4Robert Joslyn
createlang, droplang, and the tsearch2 module were all removed in the 10.0 release. More details are in the release notes: https://www.postgresql.org/docs/10/release-10.html The update from 12.3 to 12.4 is a minor release with bug and security fixes: https://www.postgresql.org/docs/current/release-12-4.html Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01postgresql: 12.2 -> 12.3Wang Mingyu
0001-Use-pkg-config-for-libxml2-detection.patch removed since it is not available in 12.3 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 04dc1ffc16eaa2eca6299341b2a86e56b9e98367) [Bug fix only update] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-13postgresql: 12.1 -> 12.2Wang Mingyu
-License-Update: Copyright year updated to 2020. Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-24postgresql: Add python3 to dependsKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-22meta-oe: Remove using python2Khem Raj
This change makes the parsing go though, we still might have build issues, which will be reported in world builds seprately Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-05postgresql: 12.0 -> 12.1Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-07postgresql: upgrade 11.5 -> 12.0Zheng Ruoqin
Update 0001-Use-pkg-config-for-libxml2-detection.patch for new version. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-25postgresql: Clarify BSD license variantChristophe PRIOUZEAU
The License of postgresql is BSD-0-Clause. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-02postgresql: 11.4 -> 11.5Changqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10postgresql: upgrade 11.3 -> 11.4Zang Ruochen
-Upgrade from postgresql_11.3.bb to postgresql_11.4.bb. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15postgresql: improve reproducibilityHongxu Jia
- Make pg_config not record var-CC, var-CFLAGS, and configure which contains build paths - Split pgxs in which Makefile.global contains build path from package postgresql to postgresql-server-dev, it refers ubuntu Here is we got from Ubuntu 18.04 $ dpkg -c /var/cache/apt/archives/postgresql-server-dev-10_10.8-0ubuntu0.18.04.1_amd64.deb -rwxr-xr-x root/root 30792 2019-05-07 17:20 ./usr/lib/postgresql/10/bin/pg_config drwxr-xr-x root/root 0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/ drwxr-xr-x root/root 0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/ drwxr-xr-x root/root 0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/config/ drwxr-xr-x root/root 0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/src/ -rw-r--r-- root/root 31309 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/src/Makefile.global Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-10postgresql: Upgrade 11.2 -> 11.3Adrian Bunk
Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-02postgresql: fix compile errorChangqing Li
configuration: MULTILIB_GLOBAL_VARIANTS_append = " libn32" MULTILIBS ?= "multilib:lib32 multilib:libn32" DEFAULTTUNE_virtclass-multilib-lib32 ?= "mips" DEFAULTTUNE_virtclass-multilib-libn32 ?= "mips64-n32" require conf/multilib.conf SELECTED_OPTIMIZATION = "${DEBUG_OPTIMIZATION}" DEBUG_BUILD = "1" EXTRA_IMAGE_FEATURES += "dbg-pkgs" with above configuration and option -Og, postgresql compile failed with: | make[4]: Nothing to be done for 'all'. | make[4]: Leaving directory '/tmp/work/mips-pokymllib32-linux/lib32-postgresql/11.2-r0/build/src/fe_utils' | {standard input}: Assembler messages: | {standard input}:58887: Error: branch out of range | <builtin>: recipe for target 'tab-complete.o' failed | make[3]: *** [tab-complete.o] Error 1 | make[3]: Leaving directory '/tmp/work/mips-pokymllib32-linux/lib32-postgresql/11.2-r0/build/src/bin/psql' | Makefile:41: recipe for target 'all-psql-recurse' failed | make[2]: *** [all-psql-recurse] Error 2 replace -Og with -O to fix this error Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-15postgresql: Fix build for RISC-VKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-22postgresql: upgrade 1.11.1 -> 1.11.2Changqing Li
License-Update: Copyright Year Update Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-15postgresql: Update the regex to determine PGMAJORVERSION to match v10+ ↵Akram Hameed
database clusters Older versions of postgresql would generate MAJVER.MINVER in new clusters. 10+ do not. Update the regex to determine PGMAJORVERSION as a single int. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-11postgresql: correctly build against target perlAlexander Kanavin
Previously perl-native headers were erroneously included, which was causing issues with the new perl recipe. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-29postgresql: upgrade to 11.1Changqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26postgresql: Allow successful run of postgresql-setupOtavio Salvador
The postgresql-setup utility log-in on postgres user to create the database, however, the shell was set to bash and it wasn't being installed as runtime dependency. This rework this expectation to use busybox ash as shell and avoid the new dependency Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-22postgresql: Fix build issue with timezone 2018f updateArmin Kuster
Sync our copy of the timezone library with IANA release tzcode2018f. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-18postgresql: split one dpg packageHongxu Jia
Multiple -dbg packages per recipe is not encouraged, and only one is recommended and the code only works properly in some cases for one. Add RPROVIDES_${PN}-dbg to be compatiable with previous dbg packages requiring. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-22postgresql: Upgrade 10.4 -> 10.5Changqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-11postgresql: upgrade 9.4.18 -> 10.4Changqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-27postgresql: use util-linux's uuidRoss Burton
Postgreqsql was configured to use ossp-uuid but ossp-uuid is dead and everyone will be building util-linux anyway, so use the libuuid.so from there. Confusing the option is called e2fs because the library originated in e2fsprogs. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-29postgresql: upgrade 9.4.17 -> 9.4.18changqing.li@windriver.com
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-26postgresql: remove *_config from SSTATE_SCAN_FILESKai Kang
It fails to run command pg_config with segment fault. The root cause is function sstate_hardcode_path takes elf file pg_config as a configure file and edits it with 'sed'. And then file pg_config is corrupt: $ readelf -a package/usr/bin/pg_config >/dev/null readelf: Error: Unable to read in 0x700 bytes of section headers readelf: Error: Section headers are not available! There is not other '*_config' file installed by postgresql except pg_config, so remove '*_config' from SSTATE_SCAN_FILES for postgresql. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-17postgresql: Depend on external libnslKhem Raj
glibc has dropped libnsl support Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13postgresql: update to 9.4.17Jackie Huang
* Release notes: https://www.postgresql.org/docs/9.4/static/release-9-4-17.html * Drop the patch emove.autoconf.version.check.patch since the required autoconf version is used in oe-core. * LICENSE checksum updated since the copyright year is changed. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> [fixup for master-next context] Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13postgresql: refresh patchesArmin Kuster
WARNING: postgresql-9.4.15-r0 do_patch: Some of the context lines in patches were ignored. This can lead to incorrectly applied patches. The context lines in the patches can be updated with devtool: devtool modify <recipe> devtool finish --force-patch-refresh <recipe> <layer_path> Then the updated patches and the source tree (in devtool's workspace) should be reviewed to make sure the patches apply in the correct place and don't introduce duplicate lines (which can, and does happen when some of the context is ignored). Further information: http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450 Details: Applying patch remove.autoconf.version.check.patch patching file configure.in Hunk #1 succeeded at 19 with fuzz 2. Now at patch remove.autoconf.version.check.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01postgres: move to recipes-dbsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>