Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pgbackrest for openSUSE:Factory checked in at 2026-10-05 12:57:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pgbackrest (Old) and /work/SRC/openSUSE:Factory/.pgbackrest.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pgbackrest" Mon Oct 5 12:57:05 2026 rev:27 rq:1382332 version:2.59.3 Changes: -------- --- /work/SRC/openSUSE:Factory/pgbackrest/pgbackrest.changes 2026-09-28 10:48:08.010177882 +0200 +++ /work/SRC/openSUSE:Factory/.pgbackrest.new.3698736/pgbackrest.changes 2026-10-05 12:58:16.493402014 +0200 @@ -1,0 +2,16 @@ +Sun Oct 4 14:46:39 UTC 2026 - Marcus Rueckert <[email protected]> + +- update to 2.59.3 + IMPORTANT NOTE: In prior versions it was possible for weak + encryption subkeys and salts to be generated if there was an + error accessing system random data. See Weak Encryption Subkeys + and Salts for more information. + + - Bug Fixes: + - Fix possible checksum error loading encrypted info and + manifest files. (Fixed by j0uinim. Reviewed by David Steele.) + - Fix possible weak encryption subkeys/salts. (Fixed by + j0uinim. Reviewed by David Steele, Stefan Fercot, Douglas J + Hunley.) + +------------------------------------------------------------------- Old: ---- pgbackrest-2.59.2.tar.gz New: ---- pgbackrest-2.59.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pgbackrest.spec ++++++ --- /var/tmp/diff_new_pack.eA0NoJ/_old 2026-10-05 12:58:17.455442368 +0200 +++ /var/tmp/diff_new_pack.eA0NoJ/_new 2026-10-05 12:58:17.458442494 +0200 @@ -19,7 +19,7 @@ %define services pgbackrest.target [email protected] [email protected] [email protected] pgbackrest.service [email protected] [email protected] [email protected] Name: pgbackrest -Version: 2.59.2 +Version: 2.59.3 Release: 0 Summary: Reliable PostgreSQL Backup & Restore License: MIT ++++++ pgbackrest-2.59.2.tar.gz -> pgbackrest-2.59.3.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/dist new/pgbackrest-2.59.3/dist --- old/pgbackrest-2.59.2/dist 2026-09-27 13:17:13.529786000 +0200 +++ new/pgbackrest-2.59.3/dist 2026-10-04 09:31:15.899998400 +0200 @@ -1 +1 @@ -2.59.2 +2.59.3 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/doc/html/command.html new/pgbackrest-2.59.3/doc/html/command.html --- old/pgbackrest-2.59.2/doc/html/command.html 2026-09-27 13:17:13.527605000 +0200 +++ new/pgbackrest-2.59.3/doc/html/command.html 2026-10-04 09:31:15.898125600 +0200 @@ -15667,5 +15667,5 @@ <pre class="code-block">default: text example: --output=num</pre> </div></div></div></div></div></div></div><div class="page-footer"> -Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated September 27, 2026 +Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated October 4, 2026 </div></body></html> \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/doc/html/configuration.html new/pgbackrest-2.59.3/doc/html/configuration.html --- old/pgbackrest-2.59.2/doc/html/configuration.html 2026-09-27 13:17:13.527993700 +0200 +++ new/pgbackrest-2.59.3/doc/html/configuration.html 2026-10-04 09:31:15.898515200 +0200 @@ -2191,5 +2191,5 @@ </div> <pre class="code-block">example: pg1-user=backupuser</pre> </div></div></div></div></div><div class="page-footer"> -Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated September 27, 2026 +Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated October 4, 2026 </div></body></html> \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/doc/html/faq.html new/pgbackrest-2.59.3/doc/html/faq.html --- old/pgbackrest-2.59.2/doc/html/faq.html 2026-09-27 13:17:13.528116000 +0200 +++ new/pgbackrest-2.59.3/doc/html/faq.html 2026-10-04 09:31:15.898640000 +0200 @@ -153,5 +153,5 @@ </div><div class="section-body-text"> Please note that recovering this backup will not result in a timeline switch, which means that this cluster should not push WAL to the original repository that it was exported from. If the new cluster is in a network-isolated environment this should not be a problem. </div></div></div></div><div class="page-footer"> -Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated September 27, 2026 +Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated October 4, 2026 </div></body></html> \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/doc/html/index.html new/pgbackrest-2.59.3/doc/html/index.html --- old/pgbackrest-2.59.2/doc/html/index.html 2026-09-27 13:17:13.528155000 +0200 +++ new/pgbackrest-2.59.3/doc/html/index.html 2026-10-04 09:31:15.898680400 +0200 @@ -27,7 +27,7 @@ </div></div><div class="section-body"><div class="section-body-text"> <span class="backrest">pgBackRest</span> is a reliable backup and restore solution for <span class="postgres">PostgreSQL</span> that seamlessly scales up to the largest databases and workloads. </div><div class="section-body-text"> -<span class="backrest">pgBackRest</span> <a href="https://github.com/pgbackrest/pgbackrest/releases/tag/release/2.59.2";>v2.59.2</a> is the current stable release. Release notes are on the <a href="release.html">Releases</a> page. +<span class="backrest">pgBackRest</span> <a href="https://github.com/pgbackrest/pgbackrest/releases/tag/release/2.59.3";>v2.59.3</a> is the current stable release. Release notes are on the <a href="release.html">Releases</a> page. </div><div class="section-body-text"> Please give us a star on <a href="https://github.com/pgbackrest/pgbackrest";>GitHub</a> if you like <span class="backrest">pgBackRest</span>! </div></div></div><div class="section1"><a id="features"></a><div class="section1-header"><div class="section1-title"> @@ -137,5 +137,5 @@ </div><div class="section-body-text"> Creating a robust disaster recovery policy with proper replication and backup strategies can be a very complex and daunting task. You may find that you need help during the architecture phase and ongoing support to ensure that your enterprise continues running smoothly. </div></div></div></div><div class="page-footer"> -Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated September 27, 2026 +Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated October 4, 2026 </div></body></html> \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/doc/html/release.html new/pgbackrest-2.59.3/doc/html/release.html --- old/pgbackrest-2.59.2/doc/html/release.html 2026-09-27 13:17:13.528193000 +0200 +++ new/pgbackrest-2.59.3/doc/html/release.html 2026-10-04 09:31:15.898719000 +0200 @@ -26,8 +26,8 @@ Introduction </a></div></div><div class="section1-toc"><div class="section1-toc-title"><a href="#current"> Current Stable Release -</a></div><div class="section2-toc"><div class="section2-toc-title"><a href="#2.59.2"> -v2.59.2 Release Notes +</a></div><div class="section2-toc"><div class="section2-toc-title"><a href="#2.59.3"> +v2.59.3 Release Notes </a></div></div></div><div class="section1-toc"><div class="section1-toc-title"><a href="#supported"> Stable Releases </a></div></div><div class="section1-toc"><div class="section1-toc-title"><a href="#unsupported"> @@ -42,6 +42,22 @@ The notes for a release may also contain <q>Additional Notes</q> but changes in this section are only to documentation or the test suite and have no direct impact on the <span class="backrest">pgBackRest</span> codebase. </div><div class="section-body"></div></div><div class="section1"><a id="current"></a><div class="section1-header"><div class="section1-title"> Current Stable Release +</div></div><div class="section-body"><div class="section2"><a id="2.59.3"></a><div class="section2-header"><div class="section2-title"> +v2.59.3 Release Notes +</div></div><div class="section-body"><div class="section2-subtitle"> +Weak Encryption Subkey Bug +</div><div class="section2-subsubtitle"> +Released October 4, 2026 +</div><div class="section-body-text"> +<b>IMPORTANT NOTE</b>: In prior versions it was possible for weak encryption subkeys and salts to be generated if there was an error accessing system random data. See <a href="https://pgbackrest.org/news.html#weak-encryption";>Weak Encryption Subkeys and Salts</a> for more information. +</div><div class="section-body-text"> +<b> Bug Fixes:</b> +</div><ul class="list-unordered"><li class="list-unordered"> +Fix possible checksum error loading encrypted info and manifest files. (<i>Fixed by j0uinim. Reviewed by David Steele.</i>) +</li><li class="list-unordered"> +Fix possible weak encryption subkeys/salts. (<i>Fixed by j0uinim. Reviewed by David Steele, Stefan Fercot, Douglas J Hunley.</i>) +</li></ul></div></div></div></div><div class="section1"><a id="supported"></a><div class="section1-header"><div class="section1-title"> +Stable Releases </div></div><div class="section-body"><div class="section2"><a id="2.59.2"></a><div class="section2-header"><div class="section2-title"> v2.59.2 Release Notes </div></div><div class="section-body"><div class="section2-subtitle"> @@ -66,9 +82,7 @@ <b> Features:</b> </div><ul class="list-unordered"><li class="list-unordered"> <span class="host">PostgreSQL 19beta4</span> support. -</li></ul></div></div></div></div><div class="section1"><a id="supported"></a><div class="section1-header"><div class="section1-title"> -Stable Releases -</div></div><div class="section-body"><div class="section2"><a id="2.59.1"></a><div class="section2-header"><div class="section2-title"> +</li></ul></div></div><div class="section2"><a id="2.59.1"></a><div class="section2-header"><div class="section2-title"> v2.59.1 Release Notes </div></div><div class="section-body"><div class="section2-subtitle"> PostgreSQL 19beta3 Support @@ -3453,5 +3467,5 @@ </div><ul class="list-unordered"><li class="list-unordered"> Absolutely no documentation (outside the code). Well, excepting these release notes. </li></ul></div></div></div></div></div><div class="page-footer"> -Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated September 27, 2026 +Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated October 4, 2026 </div></body></html> \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/doc/html/user-guide-index.html new/pgbackrest-2.59.3/doc/html/user-guide-index.html --- old/pgbackrest-2.59.2/doc/html/user-guide-index.html 2026-09-27 13:17:13.528400000 +0200 +++ new/pgbackrest-2.59.3/doc/html/user-guide-index.html 2026-10-04 09:31:15.898929600 +0200 @@ -29,5 +29,5 @@ </li><li class="list-unordered"> <a href="user-guide-rhel.html">RHEL</a> </li></ul></div></div></div><div class="page-footer"> -Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated September 27, 2026 +Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated October 4, 2026 </div></body></html> \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/doc/html/user-guide-rhel.html new/pgbackrest-2.59.3/doc/html/user-guide-rhel.html --- old/pgbackrest-2.59.2/doc/html/user-guide-rhel.html 2026-09-27 13:17:13.528307700 +0200 +++ new/pgbackrest-2.59.3/doc/html/user-guide-rhel.html 2026-10-04 09:31:15.898836100 +0200 @@ -223,11 +223,11 @@ </div><div class="section-body-text"> When building from source it is best to use a build host rather than building on production. Many of the tools required for the build should generally not be installed in production. <span class="backrest">pgBackRest</span> consists of a single executable so it is easy to copy to a new host once it is built. </div><div class="execute"><div class="execute-title"> -<span class="host">build</span> <b>⇒</b> Download version <span class="id">2.59.2</span> of <span class="backrest">pgBackRest</span> to <span class="path">/build</span> path +<span class="host">build</span> <b>⇒</b> Download version <span class="id">2.59.3</span> of <span class="backrest">pgBackRest</span> to <span class="path">/build</span> path </div><div class="execute-body"> <pre class="execute-body-cmd">mkdir -p /build</pre> <pre class="execute-body-cmd">curl -fsSL \ - https://github.com/pgbackrest/pgbackrest/releases/download/release%2F2.59.2/pgbackrest-2.59.2.tar.gz | \ + https://github.com/pgbackrest/pgbackrest/releases/download/release%2F2.59.3/pgbackrest-2.59.3.tar.gz | \ tar zx -C /build</pre> </div></div><div class="execute"><div class="execute-title"> <span class="host">build</span> <b>⇒</b> Install build dependencies @@ -237,7 +237,7 @@ </div></div><div class="execute"><div class="execute-title"> <span class="host">build</span> <b>⇒</b> Configure and compile <span class="backrest">pgBackRest</span> </div><div class="execute-body"> -<pre class="execute-body-cmd">meson setup /build/pgbackrest /build/pgbackrest-2.59.2</pre> +<pre class="execute-body-cmd">meson setup /build/pgbackrest /build/pgbackrest-2.59.3</pre> <pre class="execute-body-cmd">ninja -C /build/pgbackrest</pre> </div></div><div class="execute"><div class="execute-title"> <span class="host">build</span> <b>⇒</b> Optionally run smoke tests to verify <span class="backrest">pgBackRest</span> was built correctly @@ -1982,5 +1982,5 @@ </div><div class="config-body"><div class="config-body-output"> Config suppressed for testing </div></div></div></div></div></div><div class="page-footer"> -Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated September 27, 2026 +Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated October 4, 2026 </div></body></html> \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/doc/html/user-guide.html new/pgbackrest-2.59.3/doc/html/user-guide.html --- old/pgbackrest-2.59.2/doc/html/user-guide.html 2026-09-27 13:17:13.527422700 +0200 +++ new/pgbackrest-2.59.3/doc/html/user-guide.html 2026-10-04 09:31:15.897938700 +0200 @@ -229,11 +229,11 @@ </div><div class="section-body-text"> When building from source it is best to use a build host rather than building on production. Many of the tools required for the build should generally not be installed in production. <span class="backrest">pgBackRest</span> consists of a single executable so it is easy to copy to a new host once it is built. </div><div class="execute"><div class="execute-title"> -<span class="host">build</span> <b>⇒</b> Download version <span class="id">2.59.2</span> of <span class="backrest">pgBackRest</span> to <span class="path">/build</span> path +<span class="host">build</span> <b>⇒</b> Download version <span class="id">2.59.3</span> of <span class="backrest">pgBackRest</span> to <span class="path">/build</span> path </div><div class="execute-body"> <pre class="execute-body-cmd">mkdir -p /build</pre> <pre class="execute-body-cmd">curl -fsSL \ - https://github.com/pgbackrest/pgbackrest/releases/download/release%2F2.59.2/pgbackrest-2.59.2.tar.gz | \ + https://github.com/pgbackrest/pgbackrest/releases/download/release%2F2.59.3/pgbackrest-2.59.3.tar.gz | \ tar zx -C /build</pre> </div></div><div class="execute"><div class="execute-title"> <span class="host">build</span> <b>⇒</b> Install build dependencies @@ -243,7 +243,7 @@ </div></div><div class="execute"><div class="execute-title"> <span class="host">build</span> <b>⇒</b> Configure and compile <span class="backrest">pgBackRest</span> </div><div class="execute-body"> -<pre class="execute-body-cmd">meson setup /build/pgbackrest /build/pgbackrest-2.59.2</pre> +<pre class="execute-body-cmd">meson setup /build/pgbackrest /build/pgbackrest-2.59.3</pre> <pre class="execute-body-cmd">ninja -C /build/pgbackrest</pre> </div></div><div class="execute"><div class="execute-title"> <span class="host">build</span> <b>⇒</b> Optionally run smoke tests to verify <span class="backrest">pgBackRest</span> was built correctly @@ -2092,5 +2092,5 @@ </div><div class="config-body"><div class="config-body-output"> Config suppressed for testing </div></div></div></div></div></div><div class="page-footer"> -Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated September 27, 2026 +Copyright © 2015-2026, The PostgreSQL Global Development Group, <a href="https://github.com/pgbackrest/pgbackrest/blob/main/LICENSE";>MIT License</a>. Updated October 4, 2026 </div></body></html> \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/meson.build new/pgbackrest-2.59.3/meson.build --- old/pgbackrest-2.59.2/meson.build 2026-09-27 13:15:45.000000000 +0200 +++ new/pgbackrest-2.59.3/meson.build 2026-10-04 09:29:49.000000000 +0200 @@ -4,7 +4,7 @@ project( 'pgbackrest', ['c'], - version: '2.59.2', + version: '2.59.3', license: 'MIT', meson_version: '>=0.47', default_options: [ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/src/common/crypto/common.c new/pgbackrest-2.59.3/src/common/crypto/common.c --- old/pgbackrest-2.59.2/src/common/crypto/common.c 2026-09-27 13:15:45.000000000 +0200 +++ new/pgbackrest-2.59.3/src/common/crypto/common.c 2026-10-04 09:29:49.000000000 +0200 @@ -81,7 +81,8 @@ ASSERT(buffer != NULL); ASSERT(size > 0); - RAND_bytes(buffer, (int)size); + // A failure must not go unnoticed since the caller would be left with bytes that are not random + cryptoError(RAND_bytes(buffer, (int)size) != 1, "unable to generate random bytes"); FUNCTION_LOG_RETURN_VOID(); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/src/common/io/read.c new/pgbackrest-2.59.3/src/common/io/read.c --- old/pgbackrest-2.59.2/src/common/io/read.c 2026-09-27 13:15:45.000000000 +0200 +++ new/pgbackrest-2.59.3/src/common/io/read.c 2026-10-04 09:29:49.000000000 +0200 @@ -144,12 +144,13 @@ // Process the input buffer (or flush if NULL) if (this->input == NULL || !bufEmpty(this->input)) ioFilterGroupProcess(this->pub.filterGroup, this->input, buffer); - - // Stop if not blocking -- we don't need to fill the buffer as long as we got some data - if (!block && bufUsed(buffer) > bufferUsedBegin) - break; } + // Stop if not blocking -- we don't need to fill the buffer as long as we got some data. Eof is set on a later read that + // gets no data. + if (!block && bufUsed(buffer) > bufferUsedBegin) + break; + // Eof when no more input and the filter group is done this->pub.eofAll = ioReadEofDriver(this) && ioFilterGroupDone(this->pub.filterGroup); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pgbackrest-2.59.2/src/version.h new/pgbackrest-2.59.3/src/version.h --- old/pgbackrest-2.59.2/src/version.h 2026-09-27 13:15:45.000000000 +0200 +++ new/pgbackrest-2.59.3/src/version.h 2026-10-04 09:29:49.000000000 +0200 @@ -35,10 +35,10 @@ ***********************************************************************************************************************************/ #define PROJECT_VERSION_MAJOR 2 #define PROJECT_VERSION_MINOR 59 -#define PROJECT_VERSION_PATCH 2 +#define PROJECT_VERSION_PATCH 3 #define PROJECT_VERSION_SUFFIX "" -#define PROJECT_VERSION "2.59.2" -#define PROJECT_VERSION_NUM 2059002 +#define PROJECT_VERSION "2.59.3" +#define PROJECT_VERSION_NUM 2059003 #endif
