openbsd/ports
1
0
Fork 0
mirror of https://github.com/openbsd/ports.git synced 2026-06-18 15:33:55 +02:00
Code Issues Packages Projects Releases Wiki Activity
209,716 Commits 1 Branch 0 Tags
14df1d3debbed1869d531396e7b0dc59fb96cd19
Commit Graph

376 Commits

Author SHA1 Message Date
jeremy af78d2007e Update to PostgreSQL 18.4 
Fixes:

* CVE-2026-6472: PostgreSQL CREATE TYPE does not check multirange schema
  CREATE privilege
* CVE-2026-6473: PostgreSQL server undersizes allocations, via integer
  wraparound
* CVE-2026-6474: PostgreSQL timeofday() can disclose portions of server
  memory
* CVE-2026-6475: PostgreSQL pg_basebackup and pg_rewind can overwrite
  unrelated files of origin superuser choice
* CVE-2026-6476: PostgreSQL pg_createsubscriber allows SQL injection via
  subscription name
* CVE-2026-6477: PostgreSQL libpq lo_* functions let server superuser
  overwrite client stack
* CVE-2026-6478: PostgreSQL discloses MD5-hashed passwords via covert
  timing channel
* CVE-2026-6479: PostgreSQL SSL/GSS init causes denial of service, via
  uncontrolled recursion
* CVE-2026-6575: PostgreSQL pg_restore_attribute_stats accepts values
  that cause query planning to read past end of stats array
* CVE-2026-6637: PostgreSQL refint allows stack buffer overflow and SQL
  injection
* CVE-2026-6638: PostgreSQL REFRESH PUBLICATION allows SQL injection via
  table name

From Mark Patruck
 2026-05-25 00:36:13 +00:00
jeremy f72fbbd4f6 Update to PostgreSQL 18.3 
Fixes:

CVE-2026-2003: PostgreSQL oidvector discloses a few bytes of memory

CVE-2026-2004: PostgreSQL intarray missing validation of type of input
to selectivity estimator executes arbitrary code

CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes
arbitrary code

CVE-2026-2006: PostgreSQL missing validation of multibyte character
length executes arbitrary code

CVE-2026-2007: PostgreSQL pg_trgm heap buffer overflow writes pattern
onto server memory

OK landry@
 2026-02-27 06:38:52 +00:00
landry 99b7e3bf56 databases/postgresql{,-previous}: drop ftp://ftp.postgresql.org from SITES 
per https://www.postgresql.org/message-id/97b844f2-1d0b-2afa-c08b-afe4b1b7e29c%40joeconway.com
ftp service was shut down in august 2017
 2026-02-23 08:46:47 +00:00
jeremy a2dad311bd Update pkg README to add data checksum step to upgrade guide 
PostgreSQL 17 defaulted to data checksums being off. PostgreSQL 18 defaults
to data checksums being on. Due to this, pg_upgrade doesn't work directly.
pg_checksums exists to add data checksums to an existing installation
without data checksums, so have the pkg README use that to update the
PostgreSQL 17 data before upgrading to PostgreSQL 18.

Issue discovered by and fix from florian@
OK florian@
 2026-01-22 01:24:20 +00:00
jeremy 3a2fae3fb4 Reword Tuning for busy servers README-server section 
The default kernel semmns limits are too low to work with
PostgreSQL 18. Reword the section to reflect that.

OK sthen@
 2025-12-06 22:15:29 +00:00
jeremy 42170c4fe4 Update to PostgreSQL 18.1 
Bulk testing by tb@
OK sthen@
 2025-11-23 03:05:13 +00:00
jeremy b256b7b04c Update to PostgreSQL 17.7 
OK sthen@
 2025-11-15 19:08:04 +00:00
ajacoutot 706b60a9ce Bump after textproc/libxml,-main => textproc/libxml 2025-11-01 11:16:40 +00:00
jeremy f460618b16 Update to PostgreSQL 17.6 2025-08-19 04:50:48 +00:00
jeremy 4f7c018110 Update to PostgreSQL 17.5 
Fixes CVE-2025-4207: PostgreSQL GB18030 encoding validation can read one
byte past end of allocation for text that fails validation
 2025-05-13 01:19:35 +00:00
jeremy 1e7a37710f Update to PostgreSQL 17.4 
Fixes CVE-2025-1094

OK sthen@
 2025-02-22 03:15:44 +00:00
sthen f538075c64 add BDEP on bison to avoid "configure: error: bison not found" 2024-11-24 12:29:26 +00:00
jeremy 53dbd018d5 Update to PostgreSQL 17.2 
Bulk testing by tb@
OK tb@
 2024-11-23 06:54:15 +00:00
tb dced168092 postgresql: enable DEBUG_PACKAGES and tests (they work with non-broken libc) 
ok jeremy (maintainer)
 2024-08-27 06:51:18 +00:00
jeremy d5e1a06b9f Update to PostgreSQL 16.4 
Fixes CVE-2024-7348: PostgreSQL relation replacement during pg_dump
executes arbitrary SQL
 2024-08-12 17:32:01 +00:00
landry cae2746438 databases/postgresql: drop mention of pgadmin3, was removed a year ago 2024-06-01 05:36:58 +00:00
jeremy 96d54f1366 Update to PostgreSQL 16.3 
Fixes CVE-2024-4317
 2024-05-20 19:14:05 +00:00
sthen b980bb5574 bump REVISION for py3.10 -> py3.11 switch 2024-05-06 12:22:30 +00:00
jeremy 150dbd716c Update to PostgreSQL 16.2 
Fixes CVE-2024-0985: PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY
executes arbitrary SQL
 2024-02-10 19:18:10 +00:00
jeremy e18d6ac6e8 Update to PostgreSQL 16.1 
This adds textproc/icu4c as a dependency, since PostgreSQL 16 requires
that by default.  This allows additional collations to work.

Bulk testing by tb@

Input from tb@ and sthen@

OK tb@, sthen@
 2023-11-29 23:41:15 +00:00
sthen 14edb0c50b Following the update to LLVM 16 in base, change PostgreSQL to building 
with clang, gcc is no longer necessary.  ok jeremy@
 2023-11-17 17:46:55 +00:00
espie a56cd77418 -> SITES, no fetch change 2023-09-20 13:30:05 +00:00
jeremy eb3f6212bf Have initdb recommend use of rcctl if appropriate 
Requested by espie@
OK sthen@, espie@
 2023-09-11 20:04:47 +00:00
jeremy 147439efcd Update to PostgreSQL 15.4 
Use UPDATE_PLIST_ARGS to avoid unnecessary changes by update-plist.

OK sthen@
 2023-08-13 20:23:27 +00:00
jeremy 07f39fda04 Update to PostgreSQL 15.3 2023-05-19 17:10:09 +00:00
jeremy 4961e498bb Update recommended kern.seminfo.semmn{i,s} sysctl values in README 
Based on ports@ discussion with vtamara.

OK sthen@
 2023-02-21 20:14:36 +00:00
jeremy ff4ef95c17 Update to PostgreSQL 15.2 2023-02-11 20:07:27 +00:00
jeremy 105ddce147 Update to PostgreSQL 15.1 
Bulk testing and help tb@

OK tb@
 2022-11-16 02:59:22 +00:00
sthen 81d581665c bump for MODPY_DEFAULT_VERSION_3 change 2022-11-13 15:27:35 +00:00
ajacoutot f50fdd748e Stop using the daemon class in @newuser. 
If we need to make an exception we can do it and properly document the
reason but by default we should just use the default login class.
rc.d uses daemon or the login class provided in login.conf.d so this has
no impact there.

discussed with sthen@, tb@ and robert@

praying that my grep/sed skills did not break anything and still
believing in portbump :-)
 2022-11-08 11:14:43 +00:00
jeremy ee5f673c7c Update to PostgreSQL 14.5 2022-08-15 18:07:16 +00:00
ajacoutot 28c1ab6219 Add comment as to why we use rc_exec() for other actions than "start". 2022-05-21 15:36:16 +00:00
ajacoutot 9e45440fb2 Use the rc_exec function instead of ${rcexec}. 2022-05-21 10:50:49 +00:00
jeremy 60aeb449b1 Update to PostgreSQL 14.3 
OK danj@
 2022-05-14 17:51:54 +00:00
naddy 7a958849ed drop RCS Ids 2022-03-11 18:31:17 +00:00
robert 9658a18f5b set tc back to daemon now that it is limited 2022-02-21 12:51:50 +00:00
robert 2ec574abe3 ship a default login class configuration for postgresql and also remove the 
_postgresql user's login class so that it defaults to 'default' instead of
daemon

ok jeremy@
 2022-02-17 21:26:30 +00:00
jeremy e369262d2e Update to PostgreSQL 14.2 2022-02-12 21:10:34 +00:00
sthen 51683c6405 register @conflict on old postgresql-docs; errcodes.txt moved 
to -main in 12.1.  ok jeremy@
 2022-02-04 23:29:30 +00:00
jeremy 8368d58199 Update to PostgreSQL 14.1 
Take MAINTAINER.

OK pea@ (previous MAINTAINER), sthen@
 2022-01-13 15:59:34 +00:00
espie 737fb8bb76 zap a few PKGNAME-sub which are now default 
(and also duplicated EPOCH-sub which make little sense in db/{v3,v4}
 2021-11-22 13:55:54 +00:00
robert 0940bd958a set daemon timeout to 300 by default; 
databases can take a long time to gracefully shutdown
especially if you have a lot of cached data or you are
swapping and we do not want to kill these processes to
avoid potential dataloss
 2021-11-07 14:27:44 +00:00
sthen 8ad2bb9a3a bump REVISION for switch from Python 3.8 -> 3.9 2021-11-02 00:00:12 +00:00
sthen cf1ee95c1f bump to keep -current version above -stable due to difference in deps 2021-09-10 14:10:43 +00:00
sthen 089f5a9a63 update to postgresql-13.4, from Mark Patruck, ok pea@ 
https://www.postgresql.org/docs/13/release-13-4.html
 2021-09-10 14:07:45 +00:00
jca b4aabb96cb Work around the lack of a native spinlock implementation on riscv64 2021-07-11 23:05:06 +00:00
sthen 350cf40556 remove ports libexecinfo, we now have a libunwind-based libexecinfo in base 2021-06-09 19:50:06 +00:00
jeremy 7dacf44dc3 Update to PostgreSQL 13.3 
Fixes CVE-2021-32029, CVE-2021-32028, CVE-2021-32027.

From Mark Patruck <mark@wrapped.cx>

MAINTAINER (pea@) timeout
 2021-06-07 15:14:27 +00:00
sthen 761161322d move postgresql-plsql to python 3, ok jeremy@ daniel@ kn@ pea@ 2021-03-02 15:22:32 +00:00
sthen 68a4d4f55a postgresql tweaks: 
- add hidden dep on libexecinfo, which i hadn't disabled as well as i had hoped
- add missing -D in initdb command line in pkg-readme for some use cases
- put back the @ask-update warning as people using some pgsql extensions can't
use pg_upgrade
 2021-03-01 13:40:08 +00:00