IABSD.fr/ports/databases/postgresql

Branch :


Log

Author Commit Date CI Message
92a47b40 2026-07-09 07:31:35 Update README-server to create configuration diff before upgrading This ensures it compares the current configuration to the base configuration for the same version. OK sthen@
6b453a91 2026-07-08 12:41:58 fix some issues in DESCR found by codespell
af78d200 2026-05-25 00:36:13 Update to PostgreSQL 18.4 Fixes: * CVE-2026-6472: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege * CVE-2026-6473: PostgreSQL server undersizes allocations, via integer wraparound * CVE-2026-6474: PostgreSQL timeofday() can disclose portions of server memory * CVE-2026-6475: PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice * CVE-2026-6476: PostgreSQL pg_createsubscriber allows SQL injection via subscription name * CVE-2026-6477: PostgreSQL libpq lo_* functions let server superuser overwrite client stack * CVE-2026-6478: PostgreSQL discloses MD5-hashed passwords via covert timing channel * CVE-2026-6479: PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion * CVE-2026-6575: PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array * CVE-2026-6637: PostgreSQL refint allows stack buffer overflow and SQL injection * CVE-2026-6638: PostgreSQL REFRESH PUBLICATION allows SQL injection via table name From Mark Patruck
f72fbbd4 2026-02-27 06:38:52 Update to PostgreSQL 18.3 Fixes: CVE-2026-2003: PostgreSQL oidvector discloses a few bytes of memory CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code CVE-2026-2007: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory OK landry@
99b7e3bf 2026-02-23 08:46:47 databases/postgresql{,-previous}: drop ftp://ftp.postgresql.org from SITES per https://www.postgresql.org/message-id/97b844f2-1d0b-2afa-c08b-afe4b1b7e29c%40joeconway.com ftp service was shut down in august 2017
a2dad311 2026-01-22 01:24:20 Update pkg README to add data checksum step to upgrade guide PostgreSQL 17 defaulted to data checksums being off. PostgreSQL 18 defaults to data checksums being on. Due to this, pg_upgrade doesn't work directly. pg_checksums exists to add data checksums to an existing installation without data checksums, so have the pkg README use that to update the PostgreSQL 17 data before upgrading to PostgreSQL 18. Issue discovered by and fix from florian@ OK florian@
3a2fae3f 2025-12-06 22:15:29 Reword Tuning for busy servers README-server section The default kernel semmns limits are too low to work with PostgreSQL 18. Reword the section to reflect that. OK sthen@
42170c4f 2025-11-23 03:05:13 Update to PostgreSQL 18.1 Bulk testing by tb@ OK sthen@
b256b7b0 2025-11-15 19:08:04 Update to PostgreSQL 17.7 OK sthen@
706b60a9 2025-11-01 11:16:40 Bump after textproc/libxml,-main => textproc/libxml