Branch :
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
| 92a47b40 | 2026-07-09 07:31:35 | Update README-server to create configuration diff before upgrading This ensures it compares the current configuration to the base configuration for the same version. OK sthen@ | ||
| 6b453a91 | 2026-07-08 12:41:58 | fix some issues in DESCR found by codespell | ||
| af78d200 | 2026-05-25 00:36:13 | Update to PostgreSQL 18.4 Fixes: * CVE-2026-6472: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege * CVE-2026-6473: PostgreSQL server undersizes allocations, via integer wraparound * CVE-2026-6474: PostgreSQL timeofday() can disclose portions of server memory * CVE-2026-6475: PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice * CVE-2026-6476: PostgreSQL pg_createsubscriber allows SQL injection via subscription name * CVE-2026-6477: PostgreSQL libpq lo_* functions let server superuser overwrite client stack * CVE-2026-6478: PostgreSQL discloses MD5-hashed passwords via covert timing channel * CVE-2026-6479: PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion * CVE-2026-6575: PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array * CVE-2026-6637: PostgreSQL refint allows stack buffer overflow and SQL injection * CVE-2026-6638: PostgreSQL REFRESH PUBLICATION allows SQL injection via table name From Mark Patruck | ||
| f72fbbd4 | 2026-02-27 06:38:52 | Update to PostgreSQL 18.3 Fixes: CVE-2026-2003: PostgreSQL oidvector discloses a few bytes of memory CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code CVE-2026-2007: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory OK landry@ | ||
| 99b7e3bf | 2026-02-23 08:46:47 | databases/postgresql{,-previous}: drop ftp://ftp.postgresql.org from SITES per https://www.postgresql.org/message-id/97b844f2-1d0b-2afa-c08b-afe4b1b7e29c%40joeconway.com ftp service was shut down in august 2017 | ||
| a2dad311 | 2026-01-22 01:24:20 | Update pkg README to add data checksum step to upgrade guide PostgreSQL 17 defaulted to data checksums being off. PostgreSQL 18 defaults to data checksums being on. Due to this, pg_upgrade doesn't work directly. pg_checksums exists to add data checksums to an existing installation without data checksums, so have the pkg README use that to update the PostgreSQL 17 data before upgrading to PostgreSQL 18. Issue discovered by and fix from florian@ OK florian@ | ||
| 3a2fae3f | 2025-12-06 22:15:29 | Reword Tuning for busy servers README-server section The default kernel semmns limits are too low to work with PostgreSQL 18. Reword the section to reflect that. OK sthen@ | ||
| 42170c4f | 2025-11-23 03:05:13 | Update to PostgreSQL 18.1 Bulk testing by tb@ OK sthen@ | ||
| b256b7b0 | 2025-11-15 19:08:04 | Update to PostgreSQL 17.7 OK sthen@ | ||
| 706b60a9 | 2025-11-01 11:16:40 | Bump after textproc/libxml,-main => textproc/libxml |