Commit Graph

70 Commits

Author SHA1 Message Date
Rosen Penev 58dfc350a8 postgesql: update to 15.6
Fixes CVE-2023-39417 and CVE-2023-39418

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-12 00:17:23 +00:00
Daniel Golle 8639893b8c postgresql: update to version 15.3
Fixes security issues:
 * CVE-2023-2454
 * CVE-2023-2455

See release notes for details:
https://www.postgresql.org/about/news/postgresql-153-148-1311-1215-and-1120-released-2637/

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2023-08-05 12:18:20 +01:00
Nick Hainke ad98bf5d50 postgresql: update to 15.2
Release Notes:
https://www.postgresql.org/docs/release/15.2/

Fixes: CVE-2022-41862
Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-05-25 17:21:00 +01:00
Andre Heider 565866a472 treewide: refactor to use PKG_BUILD_FLAGS:=no-mips16
See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.

Signed-off-by: Andre Heider <a.heider@gmail.com>
2023-04-08 08:38:54 +02:00
Daniel Golle bb300f0635 postgresql: update to version 15.1
https://www.postgresql.org/docs/release/15.0/
https://www.postgresql.org/docs/release/15.1/

A dump/restore using pg_dumpall or use of pg_upgrade or logical
replication is required for those wishing to migrate data from any
previous release.

Do not backport to release branch which should remain on version 14.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2023-01-14 01:47:56 +00:00
Daniel Golle db78ead572 postgresql: update to version 14.6
This release contains a variety of fixes from 14.5.

See https://www.postgresql.org/docs/release/14.6/ for details.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-12-20 01:45:18 +00:00
Daniel Golle ead096d6dd
postgresql: update to version 14.5
Release date: 2022-08-11
Adresses CVE-2022-2625.
For more details, please see the release notes[1].

[1]: https://www.postgresql.org/docs/release/14.5/
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-09-07 22:56:35 +01:00
Daniel Golle e88747ef90 postgresql: update to 14.2
Minor release with a large number of fixes and small changes.
See release notes[1] for details.

[1]: https://www.postgresql.org/docs/release/14.2/
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-18 23:47:14 +00:00
Daniel Golle dbae7fda6d
postgresql: update to version 14.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-15 02:16:52 +00:00
Daniel Golle 30dabb07ae
postgresql: update to version 14.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-10-09 17:02:37 +01:00
Daniel Golle 3f846f9242
postgresql: update to version 13.4
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-16 14:34:51 +01:00
Daniel Golle f518cfb250
postgresql: improve init script
Use newly introduced procd_add_restart_mount_trigger to make sure
postmaster gets started only once PGDATA becomes available.
Relocate socket directory to /var/lib/postgresql to make it possible
to run postgresql inside a ujail.
Use signal for shutdown, so it works nicely with jail.
Allow multiple script in UCI 'config postgres-db' to be a list and
run them in order listed.
User more silent methods to check for db or role existence and make
it easy to create several databases owned by the same user by passing
the same credentials multiple times.
Remove disfunctional reload handler.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-12 03:11:09 +01:00
Daniel Golle 1b85a30731
postgresql: update to version 13.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-01 04:15:12 +01:00
Sebastian Kemper 9ba7d16a1e postgresql: prevent addition of ARM target flag
configure.in checks for "ARMv8 CRC32C intrinsics" and goes as far as
adding "-march=armv8-a+crc" to the target flags if the compiler allows
it. This can clash with the OpenWrt target flags in
CONFIG_TARGET_OPTIMIZATION. If for example the latter is set to
"-mcpu=cortex-a9" the following warning is issued:

  cc1: warning: switch '-mcpu=cortex-a9' conflicts with '-march=armv5t' switch

This commit prevents configure.in from adding the mentioned flag. The
addition is unwanted when cross-compiling.

An issue was raised for this recently, see [1].

[1] https://github.com/openwrt/packages/issues/16034

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-07-07 01:12:53 +01:00
Daniel Golle e7caf1f2ba
postgresql: update to version 13.2
Adresses CVE-2021-20229 (Incorrect Authorization)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-25 23:31:24 +00:00
Daniel Golle 58721b218d
postgresql: update to 13.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-11-15 22:25:57 +00:00
Daniel Golle e5fc9bedcc
postgresql: update to version 13.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-27 22:51:59 +01:00
Daniel Golle 98b09ec89e
postgresql: update to version 12.4
Fixes CVE-2020-14349 and CVE-2020-14350.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-08-30 18:54:48 +01:00
Daniel Golle b4a507d3b7 postgresql: update to version 12.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-06-07 18:19:18 +01:00
Rosen Penev 068b5642bf
postgresql: fix compilation with GCC4
The minimum version of GCC according to prereq-build.mk is 4.8 which
defaults to gnu89. This breaks the host build when the host GCC is less
than 5, which defaults to gnu99. Add a simple CFLAG to fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-23 19:15:52 -07:00
Huangbin Zhan 0ec746ccb6 treewide: add conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2020-05-09 06:06:43 +08:00
Sebastian Kemper 00882ebb36 postgresql: fix pkg-config file
Currently the pc file has includedir hard coded to "/usr/include" and
libdir to "/usr/lib". This commit changes this so they can be controlled
via the "prefix" variable.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-03-05 22:41:21 +01:00
Daniel Golle c2d15517ab postgresql: fix PKG_HASH
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-01-07 09:40:58 +02:00
Daniel Golle af420515be postgresql: update to version 12.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-01-07 01:27:16 +02:00
Petr Štetiar 8383c19b90 treewide: fix service status command in procd compatible services
Fix breaking change introduced in the main tree with a commit
7519a36774ca ("base-files,procd: add generic service status") where the
old service `status` callback function doesn't work anymore and needs to
be renamed to `status_service`.  This name was chosen for consistency
with start and stop function callbacks, which are using `start_service`
and `stop_service` naming schemes.

While at it, fix whitespace issues in the status_service as well.

Ref: http://lists.infradead.org/pipermail/openwrt-devel/2019-September/019035.html
Reported-by: Dirk Brenken <dev@brenken.org>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2019-11-18 06:28:57 +01:00
Jan Pavlinec 299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Eneas U de Queiroz 2593eabd6b treewide: Capitalize submenus
Fixed a typo in tcpreplay.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-25 09:35:40 +08:00
Daniel Danzberger d9bd0c19e4 postgresql: Update to version 11.3
Version 11.3 is the current stable relase.

Changes between 9.3 and 11.3:
- pg_receivexlog, pg_resetxlog and pg_xlogdump have been replaced with pg_resetwal
- ZIC config variable must be set when cross compiling
- disable systemd support
- ecpg is no longer needed for building
- MAKELEVEL must be set to 0 when called from another makefile
- Setting AC_CONFIG_AUX_DIR([config]) is no longer requried
- Decrease build time by removing unnecessary configure checks

Signed-off-by: Daniel Danzberger <daniel@dd-wrt.com>
2019-06-18 20:00:57 +02:00
Daniel Golle 6a8bf63004 postgresql: update ot version 9.6.13
Fixes CVE-2019-10129: Memory disclosure in partition routing
Does **NOT** fix CVE-2019-9193 which PostgreSQL doesn't consider a
security issue, see [1].

[1]: https://www.postgresql.org/about/news/1935/

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-05-18 19:09:21 +02:00
Hannu Nyman d8e61d49da postgresql: Revert adding build dependency to zlib/host
Revert the addition of build dependency in commit 2d1694ff7
to a non-existent host build of zlib.

The host build of zlib was removed already in April 2018 by
8dcd941d8b (diff-1ed408c61d79f9c6c5d197333e94ce8d)
which made zlib a build tool defined in /tools

The newly introduced build dependency causes always a warning like:
   WARNING: Makefile 'package/feeds/packages/postgresql/Makefile'
   has a build dependency on 'zlib/host', which does not exist

Not sure what was the error that 2d1694ff7 tried to fix,
but reference to a non-existent host build is not the solution.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-03-17 10:33:25 +02:00
Daniel Golle 2d1694ff7c postgresql: add HOST_BUILD_DEPENDS:=zlib/host
spotted on buildbot trying postgresql/host build:
configure: error: zlib library not found

Fix this by adding zlib/host to HOST_BUILD_DEPENDS.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-03-07 13:06:26 +01:00
Daniel Golle fe6597dd76 postgresql: update to version 9.6.12
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-03-02 20:42:58 +01:00
Rosen Penev 845aab78a9 postgresql: Update to 9.6.11
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-16 17:32:00 -08:00
Sebastian Kemper 43ec390bd7 postgresql: security bump to 9.6.10
This update includes fixes for the following CVEs:

- CVE-2018-1115
- CVE-2018-10925
- CVE-2018-10915

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-08-15 16:55:22 +02:00
Sebastian Kemper b86d9028d1 postgresql: update to version 9.6.8
This update addresses:

CVE-2018-1052
CVE-2018-1053
CVE-2018-1058

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-03-19 23:56:59 +01:00
Sebastian Kemper be07e031d0 postgresql: fix build for ARC arch
When building for ARC the compile fails with:

  /var/lib/buildbot/slaves/dave-builder/arc_arc700/build/sdk/build_dir/target-arc_arc700_uClibc/postgresql-9.6.5/src/include/storage/s_lock.h:899:2: error: #error PostgreSQL does not have native spinlock support on this platform. To continue the compilation, rerun configure using --disable-spinlocks. However, performance will be poor. Please report this to pgsql-bugs@postgresql.org.
   #error PostgreSQL does not have native spinlock support on this platform.  To continue the compilation, rerun configure using --disable-spinlocks.  However, performance will be poor.  Please report this to pgsql-bugs@postgresql.org.

So disable spinlocks when compiling for this arch. This was done
likewise for the avr32 target, which is not supported anymore, so this
can be deleted.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-03-19 23:54:56 +01:00
Sebastian Kemper 74d15bdb98 postgresql: clean up DEPENDS
Currently the DEPENDS do not reflect reality. Fix this.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-03-19 23:49:18 +01:00
Sebastian Kemper 8e9ad7bb51 postgresql: clean up CFLAGS
- The extra include is removed; the postgresql build system adds this
  include by itself.

- '-lpthread' is removed; the postgresql build system is able to detect
  how to access pthread features by itself.

- '$(FPIC)' is removed; adding this to CFLAGS is not recommendable:

  a) The postgresql build system adds its own PIC flag behind OpenWrt's
  CFLAGS when compiling shared objects, overriding OpenWrt's setting.
  b) Forcing applications into PIC mode will just slow them down.
  c) This leads to build failures on aarch64:

    access/transam/commit_ts.o: In function `CommitTsPagePrecedes':
    commit_ts.c:(.text+0x14): relocation truncated to fit: R_AARCH64_LD64_GOTPAGE_LO15 against symbol `TransactionIdPrecedes' defined in .text section in access/transam/transam.o
    commit_ts.c:(.text+0x14): warning: Too many GOT entries for -fpic, please recompile with -fPIC
    /var/lib/buildbot/slaves/dave-builder/aarch64_generic/build/sdk/staging_dir/toolchain-aarch64_generic_gcc-7.3.0_musl/bin/../lib/gcc/aarch64-openwrt-linux-musl/7.3.0/../../../../aarch64-openwrt-linux-musl/bin/ld: final link failed: Symbol needs debug section which does not exist
    collect2: error: ld returned 1 exit status

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-03-19 23:38:48 +01:00
Daniel Golle cf296664fe postgresql: update to version 9.6.6
Fixes CVE-2017-12172, CVE-2017-15098 and CVE-2017-15099.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-01-05 02:12:24 +01:00
Daniel Golle 395d5ece4f postgresql: update to version 9.6.5
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-11-07 01:30:02 +01:00
Daniel Golle 4cbd03a097 postgresql: update to version 9.6.4
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-08-14 17:27:30 +02:00
Daniel Golle 9a5e39ba7c Merge pull request #4180 from michael-dev/features/libpq-pkgconfig-files
postgresql: InstallDev pkg-config files for libpq
2017-08-01 17:01:00 +02:00
Michael Braun 3b82cf5419 postgresql: InstallDev pkg-config files for libpq
Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
2017-08-01 15:48:28 +02:00
Daniel Golle c709189de4
postgresql: allow populating required DB using script
Extend UCI mechanics to allow pre-populating a newly created
database by executing SQL statements from a scripts file.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-07-02 19:57:31 +02:00
Daniel Golle 04e71645c7 postgresql: update to version 9.6.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-07-01 18:13:23 +02:00
Daniel Golle 66afa3c3ea postgresql: fix host build and correctly apply NLS
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-06-24 15:05:59 +02:00
Daniel Golle d0c3f8b967 postgresql: properly handle pg_config host build
pg_config needs to be build for each target which creates some
extra complications...

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-06-23 20:58:34 +02:00
Daniel Golle c2d1bc7ae7 postgresql: set include path to fix building contribs
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-06-20 23:21:43 +02:00
Daniel Golle d619064f8e postgresql: disable parallel build
It seems to break things (occasionally)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-06-20 22:19:38 +02:00
Daniel Golle 2135991f51 postgresql: fix build and improve packaging
* make sure contrib stuff gets built and installed
* refresh patches and improve Makefile while at it

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-06-19 20:49:40 +02:00