mirror of
https://github.com/openbsd/ports.git
synced 2026-06-18 15:33:55 +02:00
jeremy
af78d2007e
Fixes: * CVE-2026-6472: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege * CVE-2026-6473: PostgreSQL server undersizes allocations, via integer wraparound * CVE-2026-6474: PostgreSQL timeofday() can disclose portions of server memory * CVE-2026-6475: PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice * CVE-2026-6476: PostgreSQL pg_createsubscriber allows SQL injection via subscription name * CVE-2026-6477: PostgreSQL libpq lo_* functions let server superuser overwrite client stack * CVE-2026-6478: PostgreSQL discloses MD5-hashed passwords via covert timing channel * CVE-2026-6479: PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion * CVE-2026-6575: PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array * CVE-2026-6637: PostgreSQL refint allows stack buffer overflow and SQL injection * CVE-2026-6638: PostgreSQL REFRESH PUBLICATION allows SQL injection via table name From Mark Patruck
148 lines
4.2 KiB
Makefile
148 lines
4.2 KiB
Makefile
COMMENT-main= PostgreSQL RDBMS (client)
|
|
COMMENT-server= PostgreSQL RDBMS (server)
|
|
COMMENT-docs= PostgreSQL RDBMS documentation
|
|
COMMENT-contrib=PostgreSQL RDBMS contributions
|
|
COMMENT-plpython=Python procedural language for PostgreSQL
|
|
COMMENT-pg_upgrade=Support for upgrading PostgreSQL data from previous version
|
|
|
|
VERSION= 18.4
|
|
PREV_MAJOR= 17
|
|
DISTNAME= postgresql-${VERSION}
|
|
PKGNAME-main= postgresql-client-${VERSION}
|
|
|
|
DPB_PROPERTIES= parallel
|
|
|
|
CATEGORIES= databases
|
|
SHARED_LIBS= ecpg 7.10 \
|
|
ecpg_compat 4.10 \
|
|
pgtypes 4.9 \
|
|
pq 6.17
|
|
|
|
HOMEPAGE= https://www.postgresql.org/
|
|
|
|
MAINTAINER= Jeremy Evans <jeremy@openbsd.org>
|
|
|
|
# BSD
|
|
PERMIT_PACKAGE= Yes
|
|
|
|
WANTLIB += c curses crypto m readline ssl z pthread
|
|
|
|
SITES= https://ftp.postgresql.org/pub/source/v${VERSION}/
|
|
MULTI_PACKAGES= -docs -main -server -contrib -pg_upgrade -plpython
|
|
|
|
MAKE_FILE= GNUmakefile
|
|
|
|
V_MAJOR= ${VERSION:R}
|
|
SUBST_VARS= VERSION V_MAJOR PREV_MAJOR
|
|
UPDATE_PLIST_ARGS= -i V_MAJOR
|
|
|
|
USE_GMAKE= Yes
|
|
|
|
DEBUG_PACKAGES= ${BUILD_PACKAGES}
|
|
|
|
CONFIGURE_STYLE=gnu
|
|
|
|
MODULES= lang/python
|
|
MODPY_RUNDEP= No
|
|
|
|
CONFIGURE_ENV= CPPFLAGS="-I${LOCALBASE}/include" \
|
|
LDFLAGS="-L${LOCALBASE}/lib" \
|
|
PYTHON=${MODPY_BIN}
|
|
|
|
CONFIGURE_ARGS= --disable-rpath \
|
|
--with-openssl=/usr \
|
|
--with-bsd-auth \
|
|
--with-perl \
|
|
--with-python \
|
|
--with-pam=no \
|
|
--with-uuid=bsd \
|
|
--enable-integer-datetimes \
|
|
--includedir="${PREFIX}/include/postgresql" \
|
|
--datadir="${PREFIX}/share/postgresql" \
|
|
--docdir="${PREFIX}/share/doc/postgresql" \
|
|
--with-includes="${INCLUDES}" \
|
|
--with-libraries="${LOCALBASE}/lib" \
|
|
--with-system-tzdata="/usr/share/zoneinfo" \
|
|
--with-openssl \
|
|
--with-libxml \
|
|
--disable-thread-safety
|
|
|
|
# There is no spinlock support for alpha or hppa yet. Until we have access to
|
|
# a system to get this working, disable them for now. There is
|
|
# (apparently) a serious performance hit doing this.
|
|
|
|
.if ${MACHINE_ARCH} == "alpha" || ${MACHINE_ARCH} == "hppa" || ${MACHINE_ARCH} == "riscv64"
|
|
CONFIGURE_ARGS+= --disable-spinlocks
|
|
.endif
|
|
|
|
MODGNU_CONFIG_GUESS_DIRS= ${WRKSRC}/config
|
|
|
|
ALL_TARGET= world
|
|
INSTALL_TARGET= install-world
|
|
|
|
BUILD_DEPENDS= devel/bison \
|
|
textproc/docbook \
|
|
textproc/docbook-xsl \
|
|
textproc/xmlto
|
|
|
|
LIB_DEPENDS-main= textproc/libxml
|
|
WANTLIB-main= ${WANTLIB} execinfo xml2
|
|
|
|
LIB_DEPENDS-server= databases/postgresql=${VERSION} \
|
|
textproc/icu4c \
|
|
${LIB_DEPENDS-main}
|
|
WANTLIB-server= ${WANTLIB-main} icudata icui18n icuuc perl pq
|
|
|
|
RUN_DEPENDS-contrib= databases/postgresql,-server=${VERSION}
|
|
LIB_DEPENDS-contrib= databases/postgresql=${VERSION} \
|
|
${LIB_DEPENDS-main}
|
|
WANTLIB-contrib= ${WANTLIB-main} perl pq
|
|
|
|
RUN_DEPENDS-pg_upgrade= databases/postgresql,-server=${VERSION} \
|
|
databases/postgresql-previous>=${PREV_MAJOR}
|
|
LIB_DEPENDS-pg_upgrade= databases/postgresql=${VERSION} \
|
|
${LIB_DEPENDS-main}
|
|
|
|
WANTLIB-pg_upgrade= ${WANTLIB-main} pq
|
|
|
|
LIB_DEPENDS-plpython= ${MODPY_LIB_DEPENDS}
|
|
WANTLIB-plpython= c intl m pthread util \
|
|
${MODPY_WANTLIB}
|
|
RUN_DEPENDS-plpython= databases/postgresql,-server=${VERSION}
|
|
|
|
WANTLIB-docs=
|
|
PKG_ARCH-docs= *
|
|
|
|
MAKE_ENV= LIBpq_MAJOR=${LIBpq_VERSION:R} \
|
|
LIBpq_MINOR=${LIBpq_VERSION:E} \
|
|
LIBecpg_MAJOR=${LIBecpg_VERSION:R} \
|
|
LIBecpg_MINOR=${LIBecpg_VERSION:E} \
|
|
LIBecpg_compat_MAJOR=${LIBecpg_compat_VERSION:R} \
|
|
LIBecpg_compat_MINOR=${LIBecpg_compat_VERSION:E} \
|
|
LIBpgtypes_MAJOR=${LIBpgtypes_VERSION:R} \
|
|
LIBpgtypes_MINOR=${LIBpgtypes_VERSION:E} \
|
|
XML_CATALOG_FILES="${LOCALBASE}/share/xml/docbook/4.5/catalog.xml \
|
|
${LOCALBASE}/share/xsl/docbook/catalog.xml"
|
|
|
|
DOCS= ${WRKSRC}/COPYRIGHT ${WRKSRC}/HISTORY \
|
|
${WRKSRC}/README.md ${WRKSRC}/doc/TODO
|
|
|
|
# Work around Makefile issue where it attempts to rebuild
|
|
# the documentation even if it is not necessary.
|
|
pre-build:
|
|
touch ${WRKSRC}/doc/src/sgml/*-stamp
|
|
|
|
INSTALL_REPLACE = 's/^install_bin = .*$$/ifdef BSD_INSTALL_SCRIPT\ninstall_bin
|
|
INSTALL_REPLACE += = \$$\(subst -m 755,,\$${BSD_INSTALL_SCRIPT}\)
|
|
INSTALL_REPLACE += \nelse\ninstall_bin = \/usr\/bin\/install -c -o ${BINOWN}
|
|
INSTALL_REPLACE += -g ${BINGRP}\nendif/'
|
|
post-install:
|
|
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/postgresql
|
|
${INSTALL_DATA} ${DOCS} ${PREFIX}/share/doc/postgresql
|
|
perl -i -pe ${INSTALL_REPLACE} \
|
|
${PREFIX}/lib/postgresql/pgxs/src/Makefile.global
|
|
${INSTALL_DATA} ${WRKSRC}/src/backend/utils/errcodes.txt \
|
|
${PREFIX}/share/postgresql
|
|
|
|
.include <bsd.port.mk>
|