From unknown Sat Jun 21 10:44:24 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#74038 <74038@debbugs.gnu.org> To: bug#74038 <74038@debbugs.gnu.org> Subject: Status: [PATCH 0/3] Update postgresql packages. Reply-To: bug#74038 <74038@debbugs.gnu.org> Date: Sat, 21 Jun 2025 17:44:24 +0000 retitle 74038 [PATCH 0/3] Update postgresql packages. reassign 74038 guix-patches submitter 74038 Nicolas Graves severity 74038 normal tag 74038 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Sat Oct 26 18:37:36 2024 Received: (at submit) by debbugs.gnu.org; 26 Oct 2024 22:37:36 +0000 Received: from localhost ([127.0.0.1]:42867 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pPc-0006Kc-EU for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:37:36 -0400 Received: from lists.gnu.org ([209.51.188.17]:44162) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pPa-0006KU-HN for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:37:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pP2-0007EE-5P for guix-patches@gnu.org; Sat, 26 Oct 2024 18:37:00 -0400 Received: from 12.mo584.mail-out.ovh.net ([178.33.104.253]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pP0-00069p-Lx for guix-patches@gnu.org; Sat, 26 Oct 2024 18:36:59 -0400 Received: from director8.ghost.mail-out.ovh.net (unknown [10.109.176.161]) by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XbZJl2Vv6z1MGC for ; Sat, 26 Oct 2024 22:36:55 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-z975m (unknown [10.110.188.144]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 2187B1FDC3; Sat, 26 Oct 2024 22:36:55 +0000 (UTC) Received: from ngraves.fr ([37.59.142.99]) by ghost-submission-5b5ff79f4f-z975m with ESMTPSA id hBO1NwZvHWdEmRYALPVG/g (envelope-from ); Sat, 26 Oct 2024 22:36:55 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-99G003bfd8d68f-0536-45b0-b8fc-031340d6dab2, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves To: guix-patches@gnu.org Subject: [PATCH 0/3] Update postgresql packages. Date: Sun, 27 Oct 2024 00:36:07 +0200 Message-ID: <20241026223653.27927-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8000363263330804450 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedguddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffogggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeetveehffevvdfgtddthedvhfeguefggeffteetueeliedvhffhjeegudehleegheenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleelnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopehguhhigidqphgrthgthhgvshesghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekgedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=c7jWs0V5AtsyXn85uMe0KorwmOO1BwTWlOPCne784dU=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982215; v=1; b=Nz5iaLq9jTnw09oeP5cEuVxxJWc+VFs1ELNTTQ9vW8uTaaixYEn7ho0ZeVlPmiDGwZFtMa4e ztie6Fwq4mJ25wCHKxtwcV8g1QLzPB/WQ6E1MpfERaRawP7p2GJWNDTmI8w3sJA9fRJT7/1EMa8 iWJqdueGTtCVF1yBXFnSP1MNSlLBQ1ki2Jhhra4qdN2TLlAS0nsDQi8rRofxbu+dNTzYu/8r56e Uyx+f2ap6ku1Pqj5HoPL7pguboQe+OwPvC1lYDxnmgtu0hjB9s+yIjS0atCQmrVNPaVBxmi/wz6 a6GXvoeeJ9k9JD0YZJ/AI2cRKteKYYfamia9L1pLg4lyA== Received-SPF: pass client-ip=178.33.104.253; envelope-from=ngraves@ngraves.fr; helo=12.mo584.mail-out.ovh.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit Cc: Nicolas Graves X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) This patch series updates all postgresql packages. Nicolas Graves (3): gnu: postgresql-13: Update to 13.16. [security fixes] gnu: postgresql-14: Update to 14.13. gnu: postgresql-15/16: Add and update packages. [security fixes] gnu/local.mk | 1 + gnu/packages/databases.scm | 42 ++++++++++++++----- ...stgresql-disable-normalize_exec_path.patch | 22 ++++++++++ 3 files changed, 55 insertions(+), 10 deletions(-) create mode 100644 gnu/packages/patches/postgresql-disable-normalize_exec_path.patch -- 2.46.0 From debbugs-submit-bounces@debbugs.gnu.org Sat Oct 26 18:48:14 2024 Received: (at 74038) by debbugs.gnu.org; 26 Oct 2024 22:48:14 +0000 Received: from localhost ([127.0.0.1]:43136 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pZu-00074E-5A for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:48:14 -0400 Received: from 5.mo581.mail-out.ovh.net ([178.32.120.239]:56019) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pZr-00073w-CJ for 74038@debbugs.gnu.org; Sat, 26 Oct 2024 18:48:12 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.108.9.32]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZY420Ckz1Hck for <74038@debbugs.gnu.org>; Sat, 26 Oct 2024 22:47:36 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-ct7rr (unknown [10.110.168.168]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 2036C1FDF4; Sat, 26 Oct 2024 22:47:36 +0000 (UTC) Received: from ngraves.fr ([37.59.142.99]) by ghost-submission-5b5ff79f4f-ct7rr with ESMTPSA id UjcsAYhxHWfa4xkAGqIz+w (envelope-from ); Sat, 26 Oct 2024 22:47:36 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-99G003fef56634-efe6-4e68-8493-53acdd2676b0, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves To: 74038@debbugs.gnu.org Subject: [PATCH 1/3] gnu: postgresql-13: Update to 13.16. [security fixes] Date: Sun, 27 Oct 2024 00:47:22 +0200 Message-ID: <20241026224730.981-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8180788726355124962 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudegucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeelhfffudfhkeetkeetkeetvedvveehffehkeejtefgfeffkeeugeefvedvueehnecuffhomhgrihhnpehpohhsthhgrhgvshhqlhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleelnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeekseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=05hRRDxWtQUXLABzVtZ115OdZIz1PbdTKFQCsanRY4I=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982856; v=1; b=j1q5Tf/ohhS4rkG+W+tYpJt2UHOEGxLD9HBZcyyt3q6uRrJawQ6INEuLVWzaly+/omVTU6Jv 4IXu2d9/rJVonkdqjZPOnVlctX+9sU1JWlbN1HkmzJkKvaqVF0NVsiq9siLUmjTjZ9mCJRphczf 0XzIvvte4w6bdI6qYCYoptwNK5/wKF7Oqvp0UMIFNRHa/h0VgIaM6cIac7lxlpwKQh2urTkztdS hZEWaPRNg9vIaIQdcSEz4x6nW9D8vRRSfS72wf3svTb5/Ey9YkGKoxwfCc8bp6clMT1Dl8yu6+D 4GFr+aFqcnbwR2OWX5eloa5SWrxNZ5Pn3a6V9isX60JtQ== X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 74038 Cc: Nicolas Graves X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2024-7348. * gnu/packages/databases.scm (postgresql-13): Update to 13.16. --- gnu/packages/databases.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm index 06158f19e7..f2eb58649a 100644 --- a/gnu/packages/databases.scm +++ b/gnu/packages/databases.scm @@ -1367,14 +1367,14 @@ (define-public postgresql-14 (define-public postgresql-13 (package (inherit postgresql-14) - (version "13.15") + (version "13.16") (source (origin (inherit (package-source postgresql-14)) (uri (string-append "https://ftp.postgresql.org/pub/source/v" version "/postgresql-" version ".tar.bz2")) (sha256 (base32 - "09f99rp5q1xp769r71if9ckb4cbm0nnx2xmy8b1bhcvd8hax9va2")))))) + "0rc8rpsw2lwa5af35zd8iifah02wg2rnn1i890h2h8zh55hvpjy9")))))) (define-deprecated/public postgresql-11 #f (package -- 2.46.0 From debbugs-submit-bounces@debbugs.gnu.org Sat Oct 26 18:48:14 2024 Received: (at 74038) by debbugs.gnu.org; 26 Oct 2024 22:48:14 +0000 Received: from localhost ([127.0.0.1]:43138 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pZu-00074G-Fh for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:48:14 -0400 Received: from 7.mo575.mail-out.ovh.net ([46.105.63.230]:48965) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pZr-00073y-TI for 74038@debbugs.gnu.org; Sat, 26 Oct 2024 18:48:12 -0400 Received: from director7.ghost.mail-out.ovh.net (unknown [10.109.139.3]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZY46KkHz1jVR for <74038@debbugs.gnu.org>; Sat, 26 Oct 2024 22:47:36 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-dk7fm (unknown [10.110.101.166]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 9AF451FD65; Sat, 26 Oct 2024 22:47:36 +0000 (UTC) Received: from ngraves.fr ([37.59.142.104]) by ghost-submission-5b5ff79f4f-dk7fm with ESMTPSA id kT3VH4hxHWewlxYAbQeWaQ (envelope-from ); Sat, 26 Oct 2024 22:47:36 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-104R005ce6b6007-7164-4349-9a47-cc204854a744, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves To: 74038@debbugs.gnu.org Subject: [PATCH 2/3] gnu: postgresql-14: Update to 14.13. Date: Sun, 27 Oct 2024 00:47:23 +0200 Message-ID: <20241026224730.981-2-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224730.981-1-ngraves@ngraves.fr> References: <20241026224730.981-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8180788726919979746 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudegucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepteevtdethfehtedtgedvieekkeeffffgiedtvddvkeetvdevuedtudehgeejleefnecuffhomhgrihhnpehpohhsthhgrhgvshhqlhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtgeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefkeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=mOebHZ4/wAEAxtxRQX2S6PG15AdeUr8YZCcx/8vy5zw=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982856; v=1; b=Lo9+jaq2Aw5uX1w253R2y2mKeWQKSsBeJPfo5TKvYHd2NGFhJaXM7VFOgNQxEr3Z+yXUw0yI fEv5/tJbUf4rCwhyzo1MYQa1RbTeQ12OCFKwHd+j7+do2QDanwn7GENnXLTxZ1dDfemVpyuxWi0 pJeYHV+whOfjxfiHFJGzgyowWhnJAT96l7dRyPhoX4LDtHByUBkV8IY8sBpLup7nqV56gKrxHIl KMTCBO6578wNeOasXoIiDfSfs5pU5TmvC9+peeRa3WG9hv5Lq4nnvcxrZ92RIiFYtDrVuZyA5M9 HyI7Zh1DqZLnsKMAG+47IXSRrVtXsE/F09AcW/NvVEwRA== X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 74038 Cc: Nicolas Graves X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/packages/databases.scm (postgresql-14): Update to 14.13. --- gnu/packages/databases.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm index f2eb58649a..17b7a97f87 100644 --- a/gnu/packages/databases.scm +++ b/gnu/packages/databases.scm @@ -1355,14 +1355,14 @@ (define-public postgresql-14 (package (inherit postgresql-15) (name "postgresql") - (version "14.6") + (version "14.13") (source (origin (inherit (package-source postgresql-15)) (uri (string-append "https://ftp.postgresql.org/pub/source/v" version "/postgresql-" version ".tar.bz2")) (sha256 (base32 - "08nzkq321fzfi8ba8gck9zxxg7xvv8vz3mbl4avrmlq933y4122h")))))) + "0misc5yiklflz96n7wxcdzzg0lcc4ahd0flzqsg6mcjs955krajr")))))) (define-public postgresql-13 (package -- 2.46.0 From debbugs-submit-bounces@debbugs.gnu.org Sat Oct 26 18:48:22 2024 Received: (at 74038) by debbugs.gnu.org; 26 Oct 2024 22:48:22 +0000 Received: from localhost ([127.0.0.1]:43142 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pa1-00074j-RU for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:48:22 -0400 Received: from 7.mo584.mail-out.ovh.net ([178.33.253.54]:33393) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pZw-00074U-4u for 74038@debbugs.gnu.org; Sat, 26 Oct 2024 18:48:17 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.109.139.3]) by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XbZY93Kkrz1PD3 for <74038@debbugs.gnu.org>; Sat, 26 Oct 2024 22:47:41 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-r9hh7 (unknown [10.110.178.103]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 429861FE64; Sat, 26 Oct 2024 22:47:41 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-r9hh7 with ESMTPSA id H0q6B41xHWfZaBkANT5Cbw (envelope-from ); Sat, 26 Oct 2024 22:47:41 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R0016e4623e5-a8a5-40fb-8329-24169e4977b3, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves To: 74038@debbugs.gnu.org Subject: [PATCH 3/3] gnu: postgresql-15/16: Add and update packages. [security fixes] Date: Sun, 27 Oct 2024 00:47:24 +0200 Message-ID: <20241026224730.981-3-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224730.981-1-ngraves@ngraves.fr> References: <20241026224730.981-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8182196100965655266 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudegucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfgggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeevjeehuefghefhjedvtedtieegkedtjeetffegjeeuvddttefguddvhefghfeggeenucffohhmrghinhepphhoshhtghhrvghsqhhlrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefkeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekgedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=MvleLNQc473pQsDjh4F3DQVcoAJ3ewkvzcMrUxKE8ss=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982861; v=1; b=LCewX5PVt9nfSwAj323iYcinN3KYLOuo9NEEkbZDdyNw9gxOdX+t6LGNWQ0Ca03pJED8K3oJ v91LJQk8CA9z55Vv4V70Rn2u5yQVC4KsTKkJO0WNs0qM4AIhNZ1LIr835PbPHBlYYKfmMmv6aLC dlgSgFLHDqx0bD2fU9dAP2+q6TUiWun9IYGDVqp3i6K0ej9UrBhfRaJXYOTZiJqtUXF6uLI/BBl xjVIsiWNKVjy4y3vHgY+Yyk3GXi8Z0E652djHBViQaVoGhfBYSI0HtnuEWwODCYxf1xizT1oj5b ejPgLRa/jmi8CV3OKM+rFfTa4D8MZ5UrHSZoF8UwzYbcA== X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 74038 Cc: Nicolas Graves X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2024-7348. * /gnu/packages/databases.scm (postgresql-15): Move from here… (postgresql-16): …to here. [version]: Update to 16.4. [source]: Adapt source and add patch. [native-inputs]: Add pkg-config. [inputs]: Add icu4c. * gnu/packages/patches/postgresql-disable-normalize_exec_path.patch: Add patch here... * gnu/local.mk: ...and here. --- gnu/local.mk | 1 + gnu/packages/databases.scm | 34 +++++++++++++++---- ...stgresql-disable-normalize_exec_path.patch | 22 ++++++++++++ 3 files changed, 51 insertions(+), 6 deletions(-) create mode 100644 gnu/packages/patches/postgresql-disable-normalize_exec_path.patch diff --git a/gnu/local.mk b/gnu/local.mk index 1a69a22aba..9b6619a49e 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -1980,6 +1980,7 @@ dist_patch_DATA = \ %D%/packages/patches/portaudio-audacity-compat.patch \ %D%/packages/patches/portmidi-modular-build.patch \ %D%/packages/patches/postgresql-disable-resolve_symlinks.patch \ + %D%/packages/patches/postgresql-disable-normalize_exec_path.patch \ %D%/packages/patches/procmail-ambiguous-getline-debian.patch \ %D%/packages/patches/procmail-CVE-2014-3618.patch \ %D%/packages/patches/procmail-CVE-2017-16844.patch \ diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm index 17b7a97f87..96eb4b99b5 100644 --- a/gnu/packages/databases.scm +++ b/gnu/packages/databases.scm @@ -1289,18 +1289,19 @@ (define-public galera (license license:gpl2))) ;'COPYING' says "version 2" only ;; Don't forget to update the other postgresql packages when upgrading this one. -(define-public postgresql-15 +(define-public postgresql-16 (package (name "postgresql") - (version "15.7") + (version "16.4") (source (origin (method url-fetch) (uri (string-append "https://ftp.postgresql.org/pub/source/v" version "/postgresql-" version ".tar.bz2")) (sha256 (base32 - "1xwq1592k1r64ki9bmkcyw39416kymabdfxbkpiqaqxbhnaf8vx4")) - (patches (search-patches "postgresql-disable-resolve_symlinks.patch")))) + "0vvd73rzj0sl294v15bh8yslakqv412bxqzlkqxyjwxa8pb6c5wp")) + (patches (search-patches + "postgresql-disable-normalize_exec_path.patch")))) (build-system gnu-build-system) (arguments (list @@ -1338,8 +1339,10 @@ (define-public postgresql-15 (invoke "make" "postgres.info") (install-file "postgres.info" (string-append #$output "/share/info")))))))) - (native-inputs (list docbook-xml-4.5 docbook2x libxml2 perl texinfo)) - (inputs (list readline `(,util-linux "lib") openssl zlib)) + (native-inputs + (list docbook-xml-4.5 docbook2x libxml2 perl pkg-config texinfo)) + (inputs + (list icu4c readline `(,util-linux "lib") openssl zlib)) (home-page "https://www.postgresql.org/") (synopsis "Powerful object-relational database system") (description @@ -1351,6 +1354,25 @@ (define-public postgresql-15 pictures, sounds, or video.") (license (license:x11-style "file://COPYRIGHT")))) +(define-public postgresql-15 + (package + (inherit postgresql-16) + (name "postgresql") + (version "15.8") + (source (origin + (inherit (package-source postgresql-16)) + (uri (string-append "https://ftp.postgresql.org/pub/source/v" + version "/postgresql-" version ".tar.bz2")) + (sha256 + (base32 + "0snbxmlygf7m4cxjpscmz3yjn4lnqsw313y9xgpv7vk9k9gm20s4")) + (patches (search-patches + "postgresql-disable-resolve_symlinks.patch")))) + (native-inputs (modify-inputs (package-native-inputs postgresql-16) + (delete "pkg-config"))) + (inputs (modify-inputs (package-inputs postgresql-16) + (delete "icu4c"))))) + (define-public postgresql-14 (package (inherit postgresql-15) diff --git a/gnu/packages/patches/postgresql-disable-normalize_exec_path.patch b/gnu/packages/patches/postgresql-disable-normalize_exec_path.patch new file mode 100644 index 0000000000..0397bd5a35 --- /dev/null +++ b/gnu/packages/patches/postgresql-disable-normalize_exec_path.patch @@ -0,0 +1,22 @@ +diff --git a/src/common/exec.c b/src/common/exec.c +index f209b93..ed42202 100644 +--- a/src/common/exec.c ++++ b/src/common/exec.c +@@ -238,6 +238,14 @@ find_my_exec(const char *argv0, char *retpath) + static int + normalize_exec_path(char *path) + { ++ /* ++ * Guix specific patch: postgresql extensions need to be located in the ++ * same directory as postgresql. ++ * In Guix we currently use directory-unions to create extended postgresql ++ * packages. Directory unions use symlinks, that's why we need to be able ++ * to use symlinks. ++ */ ++ return 0; + /* + * We used to do a lot of work ourselves here, but now we just let + * realpath(3) do all the heavy lifting. +-- +2.46.0 + -- 2.46.0 From debbugs-submit-bounces@debbugs.gnu.org Tue Nov 12 12:06:16 2024 Received: (at control) by debbugs.gnu.org; 12 Nov 2024 17:06:16 +0000 Received: from localhost ([127.0.0.1]:39365 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAuLI-0002Dd-1H for submit@debbugs.gnu.org; Tue, 12 Nov 2024 12:06:16 -0500 Received: from 17.mo583.mail-out.ovh.net ([46.105.56.132]:43147) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAuLF-0002DU-KG for control@debbugs.gnu.org; Tue, 12 Nov 2024 12:06:14 -0500 Received: from director3.ghost.mail-out.ovh.net (unknown [10.109.176.128]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4Xnt9H4xqsz1R3t for ; Tue, 12 Nov 2024 17:06:11 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-4gzcs (unknown [10.111.174.115]) by director3.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 304A51FD39 for ; Tue, 12 Nov 2024 17:06:11 +0000 (UTC) Received: from ngraves.fr ([37.59.142.97]) by ghost-submission-5b5ff79f4f-4gzcs with ESMTPSA id /ndqMAKLM2dqNAEA/nL05w (envelope-from ) for ; Tue, 12 Nov 2024 17:06:10 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-97G002ed1d586b-9902-4353-87c5-203e09bb9a95, 0B7C747073764E4F408419E75FC43749CA20D107) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 90.92.117.144 From: Nicolas Graves To: control@debbugs.gnu.org Subject: control message for bug #74038 Date: Tue, 12 Nov 2024 18:06:07 +0100 Message-ID: <87ikss4c1s.fsf@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain X-Ovh-Tracer-Id: 10016849999790072421 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrudeggdelfecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvufffkfggtgesthdtredttddttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeeujeelieeljeffhfelteejtdeljeehveduffelvefgudefkeehgfdvvdevgeevfeenucfkphepuddvjedrtddrtddruddpledtrdelvddruddujedrudeggedpfeejrdehledrudegvddrleejnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopegtohhnthhrohhlseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeefmgdpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=qPcHUh3v6pLq5VhA20oOoRc3TLIokAB6DNr66Psjsx0=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1731431171; v=1; b=mL2btzBOvKLRfpTbIxE/22012redLwjtCPPAzd+4jPTqKcJgzGQdGbTqOV4WxTfZaiI/p73Z NzlZ1vGAY+VcYNqLEcN/A7Ec7GEomRB3a5IgvOhFduFFyVPMXfAAJnM5cw0X3X4vDv869VG+jbn tZHZpUu3uUY8ic1a/fvRdd2uEhyflMfI7VflO5/JttRPIn57WToaC/kPKVtd4yvpA+S2WNI1lcx p4JaiwNCftN0Z2m78XLjpFyEM/y57efYPI183HFrHkuG2tQKcrYtiSlN0zvezc1yr26OxD7Wsfc lUSyeSEwU0qeOSjnxtA4EuD4v5firWirg1W4lWHoE/Okg== X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) close 74038 quit Applied in 09bbdc3ead~3. -- Best regards, Nicolas Graves From unknown Sat Jun 21 10:44:24 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Wed, 11 Dec 2024 12:24:11 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator