Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package postgresql14 for openSUSE:Factory checked in at 2026-08-19 17:57:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/postgresql14 (Old) and /work/SRC/openSUSE:Factory/.postgresql14.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "postgresql14" Wed Aug 19 17:57:54 2026 rev:35 rq:1371813 version:14.24 Changes: -------- --- /work/SRC/openSUSE:Factory/postgresql14/postgresql14.changes 2026-06-16 13:59:59.665689719 +0200 +++ /work/SRC/openSUSE:Factory/.postgresql14.new.1258/postgresql14.changes 2026-08-19 17:58:24.527187707 +0200 @@ -1,0 +2,61 @@ +Sat Aug 15 14:53:13 UTC 2026 - Marcus Rueckert <[email protected]> + +- Update to version 14.24: + https://www.postgresql.org/docs/14/release-14-24.html + https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/ + + Security Fixes: + - bsc#1275046, CVE-2026-6464: psql COPY FROM STDIN early failure + processes data lines as psql commands (CVSS v3.1: 8.1) + - bsc#1275044, CVE-2026-6469: ALTER TABLE ALTER TYPE resets + extended statistics ownership (CVSS v3.1: 3.8) + - bsc#1275043, CVE-2026-6470: Fails to check type USAGE privilege + (CVSS v3.1: 4.3) + - bsc#1275042, CVE-2026-6471: Logical decoding can dlopen + arbitrary file (CVSS v3.1: 7.2) + - bsc#1275001, CVE-2026-14662: tsvector and tsquery undersize + allocations, via integer wraparound (CVSS v3.1: 8.8) + - bsc#1275002, CVE-2026-14663: pgcrypto, for OpenSSL-disabled + ciphers, silently encrypts to and decrypts from cleartext (CVSS + v3.1: 6.5) + - bsc#1275068, CVE-2026-14664: Regexp heap buffer overflow + executes arbitrary code (CVSS v3.1: 8.8) + - bsc#1275067, CVE-2026-14666: Row security caching disregards + role modifications (CVSS v3.1: 4.2) + - bsc#1275066, CVE-2026-14668: ctid type confusion in selectivity + estimator discloses derivative of arbitrary read (CVSS v3.1: + 8.1) + - bsc#1275065, CVE-2026-14669: to_char heap buffer overflow + executes arbitrary code (CVSS v3.1: 8.8) + - bsc#1275064, CVE-2026-14670: plperl tied object heap buffer + overflow executes arbitrary code (CVSS v3.1: 8.8) + - bsc#1275063, CVE-2026-14671: refint plan cache type confusion + executes arbitrary code (CVSS v3.1: 8.8) + - bsc#1275061, CVE-2026-14673: amcheck does not clear untrusted + search path (CVSS v3.1: 3.8) + - bsc#1275059, CVE-2026-14677: 32-bit pltcl and plperl undersize + allocations, via integer wraparound (CVSS v3.1: 8.8) + - bsc#1275058, CVE-2026-14678: pg_trgm picksplit reads past end + of buffer (CVSS v3.1: 4.3) + - bsc#1275057, CVE-2026-14679: Stack buffer overflow in argument + match writes 0x0 and 0x1 to server memory (CVSS v3.1: 8.2) + - bsc#1275056, CVE-2026-14680: Type confusion via "internal" + arguments (CVSS v3.1: 8.8) + - bsc#1275054, CVE-2026-15741: Expression deparse allows SQL + injection via EXTRACT argument (CVSS v3.1: 8.8) + - bsc#1275053, CVE-2026-15742: fuzzystrmatch writes + effectively-arbitrary addresses, via integer wraparound (CVSS + v3.1: 8.8) + - bsc#1275051, CVE-2026-16239: Type confusion in cursor CLOSE + + DECLARE executes arbitrary code (CVSS v3.1: 8.8) + - bsc#1275050, CVE-2026-16241: ECPG integer underflow can crash + the client (CVSS v3.1: 3.8) + - bsc#1275049, CVE-2026-18024: ascii() function reads past end of + buffer (CVSS v3.1: 4.3) + - bsc#1275048, CVE-2026-18408: psql \unrestrict lets superuser of + pg_dump origin server execute arbitrary code in psql client + (CVSS v3.1: 8.8) + - bsc#1275047, CVE-2026-19385: pg_dump heap buffer overflow + executes arbitrary code (CVSS v3.1: 8.8) + +------------------------------------------------------------------- @@ -9,0 +71,5 @@ + +------------------------------------------------------------------- +Fri Jun 12 20:10:04 UTC 2026 - Marcus Rueckert <[email protected]> + +- bump packaging level to 19 Old: ---- postgresql-14.23.tar.bz2 postgresql-14.23.tar.bz2.sha256 New: ---- postgresql-14.24.tar.bz2 postgresql-14.24.tar.bz2.sha256 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ postgresql14.spec ++++++ --- /var/tmp/diff_new_pack.kUXC6u/_old 2026-08-19 17:58:27.748303122 +0200 +++ /var/tmp/diff_new_pack.kUXC6u/_new 2026-08-19 17:58:27.753303301 +0200 @@ -17,7 +17,7 @@ %define pgmajor 14 -%define pgminor 23 +%define pgminor 24 ### CUT HERE ### %define pgname postgresql%pgmajor @@ -73,7 +73,7 @@ %bcond_without alts Requires: pg_alts %else -%define packaging_level 18 +%define packaging_level 19 %bcond_with alts %define install_alternatives /usr/share/postgresql/install-alternatives %pgmajor %endif ++++++ postgresql-14.23.tar.bz2 -> postgresql-14.24.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/postgresql14/postgresql-14.23.tar.bz2 /work/SRC/openSUSE:Factory/.postgresql14.new.1258/postgresql-14.24.tar.bz2 differ: char 11, line 1 ++++++ postgresql-14.23.tar.bz2.sha256 -> postgresql-14.24.tar.bz2.sha256 ++++++ --- /work/SRC/openSUSE:Factory/postgresql14/postgresql-14.23.tar.bz2.sha256 2026-05-18 17:50:16.357895672 +0200 +++ /work/SRC/openSUSE:Factory/.postgresql14.new.1258/postgresql-14.24.tar.bz2.sha256 2026-08-19 17:58:24.338180935 +0200 @@ -1 +1 @@ -cc7216822b546330e29c2f91e123c8734a4c41795082145bb962aa712e8c94a5 postgresql-14.23.tar.bz2 +a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897 postgresql-14.24.tar.bz2
