Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package postgresql-pgagent for openSUSE:Factory checked in at 2025-09-30 17:40:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/postgresql-pgagent (Old) and /work/SRC/openSUSE:Factory/.postgresql-pgagent.new.11973 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "postgresql-pgagent" Tue Sep 30 17:40:36 2025 rev:11 rq:1308190 version:4.2.3 Changes: -------- --- /work/SRC/openSUSE:Factory/postgresql-pgagent/postgresql-pgagent.changes 2025-02-14 19:23:27.329048311 +0100 +++ /work/SRC/openSUSE:Factory/.postgresql-pgagent.new.11973/postgresql-pgagent.changes 2025-09-30 17:41:39.211400920 +0200 @@ -1,0 +2,30 @@ +Tue Sep 30 12:43:47 UTC 2025 - Ana Guerrero <[email protected]> + +- Add patch boost.patch to not look for boost system. + +------------------------------------------------------------------- +Thu Sep 25 16:45:31 UTC 2025 - Marcus Rueckert <[email protected]> + +- Drop unused BuildRequires for boost system + +------------------------------------------------------------------- +Thu Sep 25 16:05:58 UTC 2025 - Marcus Rueckert <[email protected]> + +- enable pg 18 + +------------------------------------------------------------------- +Thu Sep 25 16:01:49 UTC 2025 - Marcus Rueckert <[email protected]> + +- Update to 4.2.3 (CVE-2025-0218 boo#1235477) + When batch jobs are executed by pgAgent, a script is created in a + temporary directory and then executed. In versions of pgAgent + prior to 4.2.3, an insufficiently seeded random number generator + is used when generating the directory name, leading to the + possibility for a local attacker to pre-create the directory and + thus prevent pgAgent from executing jobs, disrupting scheduled + tasks. + + The pgAdmin project thanks Wolfgang Frisch from SUSE for + reporting this issue. + +------------------------------------------------------------------- @@ -67 +97 @@ --Fri Aug 7 13:16:29 UTC 2020 - Antonio Larrosa <[email protected]> +Fri Aug 7 13:16:29 UTC 2020 - Antonio Larrosa <[email protected]> Old: ---- pgagent-4.2.2.tar.gz New: ---- boost.patch pgagent-4.2.3.tar.gz ----------(New B)---------- New: - Add patch boost.patch to not look for boost system. ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ postgresql-pgagent.spec ++++++ --- /var/tmp/diff_new_pack.htRoKD/_old 2025-09-30 17:41:40.519455986 +0200 +++ /var/tmp/diff_new_pack.htRoKD/_new 2025-09-30 17:41:40.523456154 +0200 @@ -1,7 +1,7 @@ # # spec file for package postgresql-pgagent # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2025 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -56,7 +56,7 @@ %define pg_version %(pg_config --version | sed -e 's/.*[[:space:]]//' -e 's/\\.[0-9]*$//' -e 's/\\.//') Name: %{pgname}-%{sname} -Version: 4.2.2 +Version: 4.2.3 Release: 0 Summary: Job scheduler for PostgreSQL License: PostgreSQL @@ -67,6 +67,7 @@ Source3: %{sname}.logrotate.in Source4: %{sname}.conf.in Source5: README.SUSE +Patch0: boost.patch BuildRequires: %{pgname}-server BuildRequires: %{pgname}-server-devel BuildRequires: boost-devel @@ -75,7 +76,6 @@ BuildRequires: libboost_date_time-devel BuildRequires: libboost_filesystem-devel BuildRequires: libboost_regex-devel -BuildRequires: libboost_system-devel BuildRequires: libboost_thread-devel BuildRequires: systemd-rpm-macros Requires(pre): shadow @@ -88,7 +88,7 @@ using pgAdmin. %prep -%autosetup -n %{sname}-%{sname}-%{version} +%autosetup -p1 -n %{sname}-%{sname}-%{version} cp %{SOURCE2} %{name}.service cp %{SOURCE3} %{name}.logrotate ++++++ _multibuild ++++++ --- /var/tmp/diff_new_pack.htRoKD/_old 2025-09-30 17:41:40.619460196 +0200 +++ /var/tmp/diff_new_pack.htRoKD/_new 2025-09-30 17:41:40.635460869 +0200 @@ -4,5 +4,6 @@ <package>postgresql15</package> <package>postgresql16</package> <package>postgresql17</package> + <package>postgresql18</package> </multibuild> ++++++ boost.patch ++++++ --- pgagent-pgagent-4.2.3/CMakeLists.txt +++ pgagent-pgagent-4.2.3/CMakeLists.txt @@ -105,7 +105,7 @@ SET (Boost_USE_MULTITHREADED ${BOOST_MULTITHREADED_BUILD}) SET (Boost_USE_STATIC_LIBS ${BOOST_STATIC_BUILD}) -FIND_PACKAGE(Boost COMPONENTS filesystem regex date_time thread system) +FIND_PACKAGE(Boost COMPONENTS filesystem regex date_time thread) if(Boost_FOUND) INCLUDE_DIRECTORIES(${Boost_INCLUDE_DIRS}) ++++++ pgagent-4.2.2.tar.gz -> pgagent-4.2.3.tar.gz ++++++ ++++ 3479 lines of diff (skipped)
