Changelog for postgresql11-llvmjit-11.22-2.4.x86_64.rpm :

* Thu Feb 29 2024 Dominique Leuenberger - Use %patch -P N instead of deprecated %patchN.
* Thu Nov 09 2023 Reinhard Max - Update to 11.22:
* bsc#1216962, CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT \"any\" aggregate functions. This error led to a text-type value being interpreted as an unknown-type value (that is, a zero-terminated string) at runtime. This could result in disclosure of server memory following the text value.
* bsc#1216961, CVE-2023-5869: Detect integer overflow while computing new array dimensions. When assigning new elements to array subscripts that are outside the current array bounds, an undetected integer overflow could occur in edge cases. Memory stomps that are potentially exploitable for arbitrary code execution are possible, and so is disclosure of server memory.
* bsc#1216960, CVE-2023-5870: Prevent the pg_signal_backend role from signalling background workers and autovacuum processes. The documentation says that pg_signal_backend cannot issue signals to superuser-owned processes. It was able to signal these background processes, though, because they advertise a role OID of zero. Treat that as indicating superuser ownership. The security implications of cancelling one of these process types are fairly small so far as the core code goes (we\'ll just start another one), but extensions might add background workers that are more vulnerable. Also ensure that the is_superuser parameter is set correctly in such processes. No specific security consequences are known for that oversight, but it might be significant for some extensions.
* Add support for LLVM 16 and 17
* https://www.postgresql.org/about/news/2749
* https://www.postgresql.org/docs/11/release-11-22.html
* Tue Oct 31 2023 Reinhard Max - boo#1216734: Revert the last change and make the devel package independend of all other subpackages except for the libs.
* Tue Oct 10 2023 Reinhard Max - boo#1216022: Call install-alternatives from the devel subpackage as well, otherwise the symlink for ecpg might be missing.
* Mon Sep 18 2023 Dominique Leuenberger - Also buildignore the postgresql
*-implementation symbols: this is needed in order to bootstrap when no postgresql version currently has valid symbols provided. Once the packages are built, OBS could translate this to the pgname-
* packages and accept the ignores; during bootstrap though, there is nothing providing the symbol and the existing buildignores do not suffice.
* Thu Aug 10 2023 Reinhard Max - Update to 11.21:
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or owner name into an extension script if the name contains a quote, backslash, or dollar sign.
* https://www.postgresql.org/docs/11/release-11-21.html
* Fri May 26 2023 Reinhard Max - Restore the independence of mini builds from the main build after the -mini name change from April 4, 2023.- Adjust icu handling to prepare for PostgreSQL 16.
* Mon May 15 2023 Reinhard Max - Overhaul postgresql-README.SUSE and move it from the binary package to the noarch wrapper package.- Change the unix domain socket location from /var/run to /run.
* Thu May 11 2023 Reinhard Max - Update to 11.20:
* bsc#1211228, CVE-2023-2454: Prevent CREATE SCHEMA from defeating changes in search_path
* bsc#1211229, CVE-2023-2455: Enforce row-level security policies correctly after inlining a set-returning function
* https://www.postgresql.org/about/news/2637/
* https://www.postgresql.org/docs/11/release-11-20.html
* Tue Apr 18 2023 Reinhard Max - bsc#1210303: Stop using the obsolete internal %_restart_on_update macro and drop support for sysv init to simplify the scriptlets.
* Thu Feb 09 2023 Reinhard Max - Update to 11.19:
* https://www.postgresql.org/about/news/2592/
* https://www.postgresql.org/docs/15/release-15-2.html- Bump latest_supported_llvm_ver to 15.
* Thu Nov 10 2022 Reinhard Max - bsc#1205300: Update to 11.18:
* https://www.postgresql.org/about/news/2543/
* https://www.postgresql.org/docs/11/release-11-18.html- Sync spec file with postgresql15.
* Thu Sep 22 2022 Aaron Puchert - Create mechanism to specify the latest supported LLVM version. Automatically pin to that version if the distribution has a newer unsupported default version.
* Tue Sep 13 2022 Reinhard Max - Sync spec file with postgresql15.
* Mon Sep 12 2022 Andreas Schwab - Disable LLVM JIT on riscv64
* Fri Aug 12 2022 Reinhard Max - Update to 11.17:
* bsc#1202368, CVE-2022-2625: Extension scripts replace objects not belonging to the extension.
* https://www.postgresql.org/docs/release/11.17/
* Thu May 12 2022 Reinhard Max - Upgrade to 11.16:
* bsc#1199475, CVE-2022-1552: Confine additional operations within \"security restricted operation\" sandboxes.
* https://www.postgresql.org/docs/11/release-11-16.html
* Wed Apr 13 2022 Reinhard Max - bsc#1198166: Pin to llvm13 until the next patchlevel update.
* Tue Feb 08 2022 Reinhard Max - bsc#1195680: Upgrade to 11.15:
* https://www.postgresql.org/docs/11/release-11-15.html
* Reindexing might be needed after applying this upgrade, so please read the release notes carefully.- boo#1190740: Add constraints file with 12GB of memory for s390x as a workaround
* Thu Nov 25 2021 Reinhard Max - Add a llvmjit-devel subpackage to pull in the right versions of clang and llvm for building extensions.- Fix some mistakes in the interdependencies between the implementation packages and their noarch counterpart.- Update the BuildIgnore section.
* Thu Nov 11 2021 Reinhard Max - bsc#1192516: Upgrade to version 11.14:
* Make the server reject extraneous data after an SSL or GSS encryption handshake (CVE-2021-23214).
* Make libpq reject extraneous data after an SSL or GSS encryption handshake (CVE-2021-23222).
* https://www.postgresql.org/docs/11/release-11-14.html
* Tue Oct 05 2021 Reinhard Max - Let genlists skip non-existing binaries to avoid lots of version conditionals in the file lists.- Remove postgresql-testsuite-int8.sql.patch, because its purpose is unclear. This affects only the test subpackage.
* Tue Aug 31 2021 Reinhard Max - bsc#1185952: fix build with llvm12 on s390x. 0001-jit-Workaround-potential-datalayout-mismatch-on-s390.patch- bsc#1179945: Re-enable icu for PostgreSQL 10.
* Tue Aug 24 2021 Marcus Rueckert - Upgrade to version 11.13:
* https://www.postgresql.org/docs/11/release-11-13.html
* CVE-2021-3677 (boo#1189748) The planner could create an incorrect plan in cases where two ProjectionPaths were stacked on top of each other. The only known way to trigger that situation involves parallel sort operations, but there may be other instances. The result would be crashes or incorrect query results. Disclosure of server memory contents is also possible.
* Fri Jul 02 2021 Reinhard Max - bsc#1187751: Make the dependency of postgresqlXX-server-devel on llvm and clang optional (postgresql-llvm-optional.patch).
* Tue May 11 2021 Reinhard Max - Upgrade to version 11.12:
* https://www.postgresql.org/docs/11/release-11-12.html
* CVE-2021-32027, bsc#1185924: Prevent integer overflows in array subscripting calculations.
* CVE-2021-32028, bsc#1185925: Fix mishandling of “junk” columns in INSERT ... ON CONFLICT ... UPDATE target lists.
* CVE-2021-32029, bsc#1185926: Fix possibly-incorrect computation of UPDATE ... RETURNING \"pg_psql_temporary_savepoint\" does not exist”.- Don\'t use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).
* Mon Mar 15 2021 Reinhard Max - Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (boo#1183118).
* Tue Mar 09 2021 Reinhard Max - Remove leftover PreReq on chkconfig, we stopped using it long time ago.
* Fri Feb 19 2021 Reinhard Max - boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.
* Wed Feb 10 2021 Reinhard Max Upgrade to version 11.11:
* https://www.postgresql.org/docs/11/release-11-11.html
* Reindexing might be needed after applying this update.
* CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages.
* Obsoletes postgresql-icu68.patch.