Hello community, here is the log from the commit of package postgresql93 for openSUSE:Factory checked in at 2014-03-01 21:20:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/postgresql93 (Old) and /work/SRC/openSUSE:Factory/.postgresql93.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "postgresql93" Changes: -------- --- /work/SRC/openSUSE:Factory/postgresql93/postgresql93-libs.changes 2014-02-03 08:52:37.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.postgresql93.new/postgresql93-libs.changes 2014-03-01 21:20:16.000000000 +0100 @@ -1,0 +2,39 @@ +Fri Feb 21 08:56:10 UTC 2014 - [email protected] + +- Security and bugfix release 9.3.3: + * Shore up GRANT ... WITH ADMIN OPTION restrictions + (CVE-2014-0060, bnc#864845) + * Prevent privilege escalation via manual calls to PL validator + functions (CVE-2014-0061, bnc#864846) + * Avoid multiple name lookups during table and index DDL + (CVE-2014-0062, bnc#864847) + * Prevent buffer overrun with long datetime strings + (CVE-2014-0063, bnc#864850) + * Prevent buffer overrun due to integer overflow in size + calculations (CVE-2014-0064, bnc#864851) + * Prevent overruns of fixed-size buffers (CVE-2014-0065, + bnc#864852) + * Avoid crashing if crypt() returns NULL (CVE-2014-0066, + bnc#864853) + * Document risks of make check in the regression testing + instructions (CVE-2014-0067) + + * Rework tuple freezing protocol. The logic for tuple freezing + was unable to handle some cases involving freezing of + multixact IDs, with the practical effect that shared row-level + locks might be forgotten once old enough. Fixing this required + changing the WAL record format for tuple freezing. While this + is no issue for standalone servers, when using replication it + means that STANDBY SERVERS MUST BE UPGRADED TO 9.3.3 OR LATER + BEFORE THEIR MASTERS ARE. + + * For the other (many!) bug fixes, see the release notes: + http://www.postgresql.org/docs/9.3/static/release-9-3-3.html + /usr/share/doc/packages/postgresql93/HISTORY + +------------------------------------------------------------------- +Wed Feb 12 12:01:06 UTC 2014 - [email protected] + +- remove postgresql-tas-aarch64.patch: Fix build for aarch64 + +------------------------------------------------------------------- --- /work/SRC/openSUSE:Factory/postgresql93/postgresql93.changes 2014-02-15 17:17:44.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.postgresql93.new/postgresql93.changes 2014-03-01 21:20:16.000000000 +0100 @@ -1,0 +2,34 @@ +Fri Feb 21 08:56:10 UTC 2014 - [email protected] + +- Security and bugfix release 9.3.3: + * Shore up GRANT ... WITH ADMIN OPTION restrictions + (CVE-2014-0060, bnc#864845) + * Prevent privilege escalation via manual calls to PL validator + functions (CVE-2014-0061, bnc#864846) + * Avoid multiple name lookups during table and index DDL + (CVE-2014-0062, bnc#864847) + * Prevent buffer overrun with long datetime strings + (CVE-2014-0063, bnc#864850) + * Prevent buffer overrun due to integer overflow in size + calculations (CVE-2014-0064, bnc#864851) + * Prevent overruns of fixed-size buffers (CVE-2014-0065, + bnc#864852) + * Avoid crashing if crypt() returns NULL (CVE-2014-0066, + bnc#864853) + * Document risks of make check in the regression testing + instructions (CVE-2014-0067) + + * Rework tuple freezing protocol. The logic for tuple freezing + was unable to handle some cases involving freezing of + multixact IDs, with the practical effect that shared row-level + locks might be forgotten once old enough. Fixing this required + changing the WAL record format for tuple freezing. While this + is no issue for standalone servers, when using replication it + means that STANDBY SERVERS MUST BE UPGRADED TO 9.3.3 OR LATER + BEFORE THEIR MASTERS ARE. + + * For the other (many!) bug fixes, see the release notes: + http://www.postgresql.org/docs/9.3/static/release-9-3-3.html + /usr/share/doc/packages/postgresql93/HISTORY + +------------------------------------------------------------------- Old: ---- postgresql-9.3.2.tar.bz2 New: ---- postgresql-9.3.3.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ postgresql93-libs.spec ++++++ --- /var/tmp/diff_new_pack.HTZh7j/_old 2014-03-01 21:20:17.000000000 +0100 +++ /var/tmp/diff_new_pack.HTZh7j/_new 2014-03-01 21:20:17.000000000 +0100 @@ -69,7 +69,7 @@ Summary: Basic Clients and Utilities for PostgreSQL License: PostgreSQL Group: Productivity/Databases/Tools -Version: 9.3.2 +Version: 9.3.3 Release: 0 %define pg_minor_version %(echo %version | sed -r 's/^([0-9]+\\.[0-9]+).*/\\1/') Source0: postgresql-%version.tar.bz2 @@ -360,15 +360,15 @@ %endif --with-system-tzdata=/usr/share/zoneinfo %if !%buildmain -make -C src/backend %{?jobs:-j%jobs} libpq-recursive +make -C src/backend %{?_smp_mflags} libpq-recursive %if %builddevel -make -C src/port %{?jobs:-j%jobs} libpgport.a -make -C src/common %{?jobs:-j%jobs} libpgcommon.a -make -C src/interfaces/ecpg/preproc %{?jobs:-j%jobs} -make -C src/bin/pg_config %{?jobs:-j%jobs} pg_config +make -C src/port %{?_smp_mflags} libpgport.a +make -C src/common %{?_smp_mflags} libpgcommon.a +make -C src/interfaces/ecpg/preproc %{?_smp_mflags} +make -C src/bin/pg_config %{?_smp_mflags} pg_config %endif %if %buildlibs -make -C src/interfaces %{?jobs:-j%jobs} +make -C src/interfaces %{?_smp_mflags} %endif %else # {{{ build the test package @@ -635,6 +635,7 @@ %dir %pgdocdir %pgdocdir/extension %dir %pgdatadir +%ghost /etc/alternatives/postgresql %files server -f server.files %defattr(-,root,root) @@ -646,7 +647,7 @@ %pgdatadir/tsearch_data %exclude %pgdatadir/tsearch_data/*.rules %dir %pgdatadir - +%ghost /etc/alternatives/postgresql %pgdatadir/timezone* %pgdatadir/*.* %if %buildlibs postgresql93.spec: same change ++++++ postgresql-9.3.2.tar.bz2 -> postgresql-9.3.3.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/postgresql93/postgresql-9.3.2.tar.bz2 /work/SRC/openSUSE:Factory/.postgresql93.new/postgresql-9.3.3.tar.bz2 differ: char 11, line 1 -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
