Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=42.3&buil... https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&qu... When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3m... to record your testing efforts and use bugzilla to report bugs. Packages changed: aaa_base apache2 augeas bind boost cairo ceph (12.0.3+git.1497426468.6984d41b5d -> 12.1.0+git.1498654198.20d6a47cc9) cyrus-sasl dirmngr e2fsprogs installation-images-openSUSE (14.319 -> 14.320) kapptemplate (17.04.1 -> 17.04.2) kio kolourpaint (17.04.1 -> 17.04.2) kwidgetsaddons kyotocabinet libsemanage libxml2 libyui-qt-pkg (2.45.12 -> 2.45.13) libzypp-plugin-appdata (1.0.1 -> 1.0+git.20150408) mdadm nano (2.4.2 -> 2.8.5) obs-service-source_validator (0.6+git20160531.fbfe336 -> 0.6+git20170111.82ea590) php5 plasma5-workspace polkit-gnome postgresql94 (9.4.11 -> 9.4.12) postgresql94-libs (9.4.11 -> 9.4.12) python-PyICU (1.9.2 -> 1.9.7) python-ipaddress (1.0.16 -> 1.0.18) python-nose python-vobject (0.9.2 -> 0.9.4.1) release-notes-openSUSE (42.3.20170621 -> 42.3.20170704) vim virtualbox (5.1.18_k4.4.72_1 -> 5.1.22_k4.4.73_1) xfce4-session yast2-kdump (3.2.6 -> 3.2.7) yast2-network (3.2.28 -> 3.2.29) yast2-ntp-client (3.2.8 -> 3.2.9) yast2-trans (84.87.20170618.0f9396fd -> 84.87.20170703.c20fb749) === Details === ==== aaa_base ==== Subpackages: aaa_base-extras aaa_base-malloccheck - Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to 'default'; the pre-existing setting is overwritten by YaST on SLE during installation (kde-plasma is not even a valid option for SLE) (boo#1030873). ==== apache2 ==== Subpackages: apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-utils - security update * CVE-2017-7679 [bsc#1045060] + apache2-CVE-2017-7679.patch * CVE-2017-3169 [bsc#1045062] + apache2-CVE-2017-3169.patch * CVE-2017-3167 [bsc#1045065] + apache2-CVE-2017-3167.patch - remove /usr/bin/http2 symlink only during apache2 package uninstall, not upgrade [bsc#1041830] - gensslcert: use hostname when fqdn is too long [bsc#1035829] ==== augeas ==== Subpackages: augeas-lenses libaugeas0 - By error instead of the new ntp augeas lens the old one was used. Fixed adding the correct one (bsc#1023204) ==== bind ==== Subpackages: bind-chrootenv bind-doc bind-libs bind-utils - Added bind-CVE-2017-3142-and-3143.patch to fix a security issue where an attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into (1) providing an AXFR of a zone to an unauthorized recipient and (2) accepting bogus Notify packets. [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143] ==== boost ==== Subpackages: boost-license1_61_0 boost_1_61-devel libboost_atomic1_61_0 libboost_chrono1_61_0 libboost_container1_61_0 libboost_context1_61_0 libboost_coroutine1_61_0 libboost_date_time1_61_0 libboost_filesystem1_61_0 libboost_graph1_61_0 libboost_graph_parallel1_61_0 libboost_iostreams1_61_0 libboost_locale1_61_0 libboost_log1_61_0 libboost_math1_61_0 libboost_mpi1_61_0 libboost_program_options1_61_0 libboost_python1_61_0 libboost_python3-1_61_0 libboost_random1_61_0 libboost_regex1_61_0 libboost_serialization1_61_0 libboost_signals1_61_0 libboost_system1_61_0 libboost_test1_61_0 libboost_thread1_61_0 libboost_timer1_61_0 libboost_wave1_61_0 - Include conflict and provides in baselibs.conf. ==== cairo ==== Subpackages: cairo-devel libcairo-gobject2 libcairo-script-interpreter2 libcairo2 libcairo2-32bit - Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to fix a segfault when using >4GB images since int values were used for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082). - Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to fix a segfault in get_bitmap_surface due to malformed font (bsc#1036789, fdo#100763, CVE-2017-7475). ==== ceph ==== Version update (12.0.3+git.1497426468.6984d41b5d -> 12.1.0+git.1498654198.20d6a47cc9) Subpackages: librados2 librbd1 - Update to version 12.1.0+git.1498654198.20d6a47cc9: + build/ops: rpm: put mgr python build dependencies in make_check bcond N.B. this effectively eliminates the following build dependencies: python-Babel python-beautifulsoup4 python-CherryPy python-coverage python-flup python-Genshi python-html5lib python-logutils python-nose python-Paste python-PasteDeploy python-PasteDeploy python-pecan python-pyquery python-singledispatch python-waitress python-WebOb python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid - spec file: + removed BR libatomic_ops-devel as upstream replaced it with std:atomic + removed defattr as they are no longer needed on sle12 and newer - Update to version 12.1.0+git.1498478524.117b171715: + include 12.1.0 tag to make "ceph --version" happy + tests: drop hadoop-s3a tests - Update to version 12.1.0+git.1498309403.f4fc02fff4: + upstream 12.1.0 release; for details, see http://ceph.com/releases/v12-1-0-luminous-rc-released/ + revert several pre-release commits that are no longer needed because the issues have been fixed upstream in the meantime + build/ops: rpm: sane packaging of %{_docdir}/ceph directory - Update to version 12.0.3+git.1498202776.b806032985: + Integration testing changes: * add DeepSea integration suite test definitions for teuthology * re-enable several RGW tests that upstream only runs on Ubuntu + ceph_ver_hack.sh: use git describe --match + ReplicatedPG: add CHECKSUM->CMPEXT req translation ==== cyrus-sasl ==== Subpackages: cyrus-sasl-crammd5 cyrus-sasl-devel cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-plain libsasl2-3 libsasl2-3-32bit - added cyrus-sasl-issue-402.patch to fix SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402 (see https://github.com/cyrusimap/cyrus-sasl/issues/402) - bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5 - really use SASLAUTHD_PARAMS variable (bnc#938657) - bnc#908883 cyrus-sasl-scram refers to wrong RFC - Make sure /usr/sbin/rcsaslauthd exists ==== dirmngr ==== Subpackages: dirmngr-lang - Changed logrotate from Requires to Recommends [bsc#1045943] ==== e2fsprogs ==== Subpackages: e2fsprogs-devel libcom_err-devel libcom_err2 libcom_err2-32bit libext2fs-devel libext2fs2 - libext2fs-don-t-ignore-fsync-errors.patch: libext2fs: don't ignore fsync errors (bsc#1038194) - libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection (bsc#1038194) ==== installation-images-openSUSE ==== Version update (14.319 -> 14.320) - revert last change: it is vital that CAASP/SLES/SLED builds can all happen in the same project (sbehlert) - don't build SLED/SLES on CAASP - don't build SLES_SAP on CAASP - merge gh#openSUSE/installation-images#189 - Add new theme SLES_SAP (bsc#1032850) - 14.320 ==== kapptemplate ==== Version update (17.04.1 -> 17.04.2) Subpackages: kapptemplate-lang - Update to 17.04.2 * New bugfix release * For more details please see: * https://www.kde.org/announcements/announce-applications-17.04.2.php - Changes since 17.04.1: * Brush up and fix KF5-based app templates some more * Use FDL 1.2 for kde-frameworks5 template ==== kio ==== Subpackages: kio-core kio-devel kio-lang - Add upstream patches to prevent /tmp getting filled up because full directories are copied to it when generating folder previews for remote locations and the trash (kde#208625, boo#969768) * PreviewJob-clean-up-empty-temp-file-when-get-fails.patch * PreviewJob-skip-remote-directories.patch ==== kolourpaint ==== Version update (17.04.1 -> 17.04.2) Subpackages: kolourpaint-lang - Add GPL to the license (bg translation), until this is sorted with upstream - Update to 17.04.2 * New bugfix release * For more details please see: * https://www.kde.org/announcements/announce-applications-17.04.2.php - Changes since 17.04.1: * Adjust license to follow the rest of the headers ==== kwidgetsaddons ==== Subpackages: kwidgetsaddons-devel libKF5WidgetsAddons5 libKF5WidgetsAddons5-lang - Add patch to workaround scrollbars in systemsettings5: * kpageview_width.patch ==== kyotocabinet ==== - boo#1037914: Do not optimize for native cpu of the build system! - kyotocabinet-fix-debuginfo.patch: Fix debuginfo generation - gcc6-fix-errors.patch: return NULL instead, make GCC7 happy - Add gcc6-fix-errors.patch to remove errors seen by GCC6. ==== libsemanage ==== Subpackages: libsemanage1 libsemanage1-32bit - Added libsemanage-version-numbers.patch by Petr Lautrbach to show version numbers of modules where they are available (bsc#1043237) ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools Security fix: * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663] * Fix Heap buffer overflow in xmlAddID - Security fix: * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969] * Fix NULL pointer deref in xmlDumpElementContent * Deleted patch libxml2-NULL-deref-xmlDumpElementContent.patch ==== libyui-qt-pkg ==== Version update (2.45.12 -> 2.45.13) - Limit the number of displayed changes (the last 512 entries), rendering a huge change log might cause a freeze for long time (bsc#1044777) - 2.45.13 ==== libzypp-plugin-appdata ==== Version update (1.0.1 -> 1.0+git.20150408) - Update to version 1.0+git.20150408: + Drop the irrelevant LICENSE file from git. - Update License tag to be MIT (InstallAppdata.sh) AND CC0-1.0 (the appdata metafiles). - Provide 'appstream-provider': we might want to implement different methods of providing AppStream metadata to applications, and the frontends should not have to care about the technical details in the background. Software Centers like GNOME Software and Discover are supposed to use the new symbol. - Update InstallAppdata.sh: use appstreamcli refresh-cache instead of refresh-index (boo#1044114). - Drop GNOME software mention from the description. There are other frontends out there by now. ==== mdadm ==== - 0095-IMSM-Correct-examine-output-for-4k-disks.patch (bsc#1040191) - 0096-imsm-allow-drives-in-a-container-regardless-of-secto.patch (bsc#1040189) - 0097-imsm-allocate-buffer-to-support-maximum-sector-size.patch (bsc#1040189) - 0098-imsm-don-t-allow-disks-with-different-sector-size-in.patch (bsc#1040189) - 0099-Allow-more-spare-selection-criteria.patch (bsc#1040189) - 0100-Add-sector-size-as-spare-selection-criterion.patch (bsc#1040189) The following patches are unnecessary for SLE12-SP3 mdadm back port, remove them from mdadm package -DELETE 0004-mdadm-fix-typo-in-comment.patch -DELETE 0011-mdadm-fixed-some-trivial-typos-in-comments-of-mdadm..patch -DELETE 0013-mdadm-mdmon-deleted-the-abort_reshape-never-invoked.patch -DELETE 0037-util-Introduce-md_get_array_info.patch -DELETE 0038-Incremental-Remove-redundant-call-for-GET_ARRAY_INFO.patch -DELETE 0039-util-Introduce-md_get_disk_info.patch -DELETE 0040-util-Introduce-md_set_array_info.patch -DELETE 0041-md_u-Remove-some-unused-ioctl-declarations.patch -DELETE 0044-mdadm-grow-reshape-would-be-stuck-from-raid1-to-raid.patch -DELETE 0047-sysfs-Use-the-presence-of-sys-block-dev-md-as-indica.patch -DELETE 0048-sysfs-Make-sysfs_init-return-an-error-code.patch -DELETE 0049-mdadm-Create-declaring-an-existing-struct-within-sam.patch -DELETE 0052-util-must_be_container-Use-sysfs_read-GET_VERSION-to.patch -DELETE 0053-util-set_array_info-Simplify-code-since-md_get_versi.patch -DELETE 0054-Assemble-Assemble-Stop-checking-kernel-md-driver-ver.patch -DELETE 0055-Build-Stop-bothering-about-supporting-md-driver-olde.patch -DELETE 0056-Grow-Stop-bothering-about-md-driver-versions-older-t.patch -DELETE 0057-Detail-Stop-bothering-about-md-drivers-older-than-0..patch -DELETE 0058-Create-Remove-all-attemps-to-handle-md-driver-older-.patch -DELETE 0059-Manage-Remove-all-references-to-md_get_version.patch -DELETE 0060-Query-Remove-all-references-to-md_get_version.patch -DELETE 0061-bitmap-Remove-use-of-md_get_version.patch -DELETE 0062-mdmon-Stop-bothering-about-md_get_version.patch -DELETE 0063-mdopen-open_mddev-Use-md_get_array_info-to-determine.patch -DELETE 0064-mdassemble-Use-md_get_array_info-to-check-for-valid-.patch -DELETE 0065-Assemble-Assemble-Get-rid-of-last-use-of-md_get_vers.patch -DELETE 0066-util-Finally-kill-off-md_get_version.patch -DELETE 0067-mdadm-Fail-for-kernels-older-than-2.6.15.patch -DELETE 0069-Revert-mdadm-grow-reshape-would-be-stuck-from-raid1-.patch -DELETE 0070-Retire-mdassemble.patch -DELETE 0071-super1-Clean-up-various-style-abuses.patch -DELETE 0075-Assemble-Clean-up-start_array.patch -DELETE 0076-Detail-Remove-pre-2.6-code-for-printing-info-on-rebu.patch -DELETE 0077-Assemble-Remove-obsolete-test-for-kernels-older-than.patch -DELETE 0078-Detail-Fixup-ugly-if-foo-abuse.patch -DELETE 0079-Query-Handle-error-returned-by-fstat.patch -DELETE 0080-Query-Use-sysfs-to-obtain-data-if-possible.patch -DELETE 0081-sysfs-Parse-array_state-in-sysfs_read.patch -DELETE 0082-util-Introduce-md_array_active-helper.patch -DELETE 0084-maps-Use-keyvalue-for-null-terminator-to-indicate-un.patch -DELETE 0085-util-Get-rid-of-unused-enough_fd.patch -DELETE 0086-mdadm-retire-mdassemble-in-make-everything.patch -DELETE 0090-Query-Quiet-gcc-since-it-cannot-know-errno-0-in-this.patch -DELETE 0091-Makefile-Default-to-O2-optimization.patch - 0093-Grow-don-t-allow-to-enable-PPL-when-reshape-is-in-pr.patch (bsc#1043553) - 0094-Grow-don-t-allow-array-geometry-change-with-ppl-enab.patch (bsc#1043553) ==== nano ==== Version update (2.4.2 -> 2.8.5) Subpackages: nano-lang - Update to version 2.8.5: * Avoid a crash when waking from a suspension that was induced from the outside. * Allow negative line and column numbers on the command line. * Avoid some flickering when resizing the screen while in the file browser. * Open files in the order they were mentioned on the command line. * Do not pretend to have woken from suspension when receiving a SIGCONT. - update to 2.8.4: * include the nanorc man page again. - includes changes from 2.8.3: * fix a misplacement of the spotlight during interactive replacing * speed up backwards searching * improve PHP syntax highlighting * no longer ask ?save anyway?? when the user ^Q discards the buffer - Update to version 2.8.2: * new feature: it makes the ^G help texts searchable with ^W. * fixes a crash when resizing the window in the middle of verbatim input * avoids an unlikely crash when used without UTF-8 support in some locales * avoids redrawing the screen twice when switching between buffers while line numbers are active * works around a coloring bug on musl * tweaks to the documentation * translation updates for fifteen languages. - GNU nano 2.8.1: * fix scrolling problems in softwrap mode when double-width characters on row boundaries are involved * show double-width characters as ">" and "<" when split across two rows * move the cursor more predictably (at the cost of sometimes putting it on the second "half" of a character) * avoid creating lines that consist of only blanks when using autoindent * make ^Home and ^End go to the start and end of the file (on terminals that support those keystrokes) * place the cursor better when linting * let the linter ask only once whether to open an included file * add bindings for ^Up and ^Down in the file browser - Update to version 2.8.0 * the Up and Down keys now step from visual row to visual row instead of jumping between logical lines * the Home and End keys now move to the start and end of a row, and only when already there, then to the start and end of the logical line * the screen can now scroll per row instead of always per logical line * makes use of gnulib, to make it build on more platforms - Update to version 2.7.5: * the \B and \b regex anchors * correctly repaints things when multiline regexes with identical start and end are involved * fixes a crash with zero-length regex matches * does replacements at the edges of a marked region right, * displays at most three warnings at startup * documents the ability to read a file from standard input - GNU nano 2.7.4: * undo deletions in an orderly manner again * set the preferred x position for vertical movements more consistently * avoid some scrolling problems in softwrap mode * correct the behavior of the beginning-of-word anchor (\<) in regex searches. - GNU nano 2.7.3: * now able to handle filenames that contain newlines * avoid a brief flash of color when switching between buffers that are governed by different syntaxes * make the Shift+Ctrl+Arrow keys select text again on a Linux console * more resistant against malformations in the positionlog file * do not crash when ^C is typed on systems where it produces the code KEY_CANCEL * no longer mistakenly warn about editing an unlocked file just after saving a new one - GNU nano 2.7.2: * complete with one keystroke (^] by default) a fragment of a word to a full word existing elsewhere in the current buffer * fixes two bugs related to using line numbers in softwrap mode * allow using the PageUp and PageDown keys together with Shift on VTE-based terminals * stop help lines from flickering during interactive replacing * make a "set fill" override an earlier "set nowrap" * properly restore the selected region after an external spell check - GNU nano 2.7.1: * add ability to display line numbers * fix some bugs with scrolling in softwrap mode * stricter parsing of key rebindungs * marks a new buffer as modified when the output of a command (^R ^X) has been read into it - GNU nano 2.7.0: * new feature: allowing text to be selected by holding Shift together with the cursor keys. * now works also when run in very tiny terminals (down to one line, one column) * improves the handling of the prompt in cramped spaces - nano 2.6.3: * make Ctrl+Arrow keys work also on a Linux virtual console * take as verbatim only the very first keystroke after M-V * remove any lock files held when dying * do not abort when a word contains digits (with default speller) * fix a small sorting bug in the file browser * speed up searching case-insensitively in a UTF-8 locale * do not enter invalid bytes when holding down both Alt keys - Update to version 2.6.2: * The keystrokes Ctrl+Up and Ctrl+Down for jumping between blocks of text, and the option 'wordchars' for specifying which characters (beside alphanumeric ones) should be considered word-forming. * Provides feedback during Unicode input (M-V followed by a six-digit hexadecimal number which must start with 0 or 10). * Avoids a crash when resizing the window during Verbatim input. * Doesn't drop a keystroke after having been suspended. * Replaces the beginning-of-line anchor (^) just once per line. * Several tiny improvements in screen rendering and key handling. - Removed build time references fix (not needed anymore). - Update to version 2.6.1: * "Stampede" is chiefly a translation update * adds one little feature (the ability to use negative numbers with Go To Line: -1 meaning the first line from the bottom) * includes syntax highlighting for Rust, and fixes three tiny * bugs (but in such far corners of the editor that they aren't even worth mentioning). - Download keyring from savannah - Update to version 2.6.0: * fixes more than fifty little bugs -- and some of them not so little. * It improves moving about in the file browser, corrects failings of the internal spell checker, adds a new feature (comment/uncomment lines, with default binding M-3), makes some error messages clearer, shows more of a file when positionlog is used and the cursor is near the end, displays all error messages at startup if there are multiple ones, does not misinterpret keystrokes when typing very fast, is less eager to trim the filename on narrow terminals, speeds up case-insensitive searches, and allows to abort re-searches. - Update to 2.5.3 * several bugfixes fostray cursor positioning errors, many many memory leaks including file reading, using the file browser, searching for multi-byte characters, history completion, and many other places. * New features include the ability to trim whitespace from the ends of lines when justifying text, see nanorc(5) option justifytrim for deets. - Update to 2.5.2 * several fixes for various memory leaks, position history size growth, and a long standing issue with using nano under sudo creading root-owned files * There are also the usual bevy of documentation and other miscellaneous fixes and touch ups. - 2.5.1: * fix syntax-highlighting bug * fix positionlog bug * disable time-eating multiline regex in the C syntax * adds an escape hatch to the WriteOut menu when --tempfile is used: the discardbuffer command, ^Q. * translation updates for fifteen languages * small fix in the softwrap code - Update to 2.5.0 * color synax highlighting improvements * several bugfixes * since this release there will no longer be separate stable and unstable branches - GNU nano 2.4.3: * Fix several memory leaks * Fix issues with color syntax higlighting * Fix issues with search/replace * Fix issues with file insertion * Fix help menu bugs ==== obs-service-source_validator ==== Version update (0.6+git20160531.fbfe336 -> 0.6+git20170111.82ea590) - obs toolchain release (fate #321166) - Update to version 0.6+git20170111.82ea590: * accept reproducable CI source builds * accept .obsinfo and .obscpio archives * accept further modes of services - Update to version 0.6+git20161207.70e9d99: * 20-files-present-and-referenced fix case where rpmbuild emits a warning but the specfile does not list sources or patches (bnc#1013981) - Update to version 0.6+git20160707.a6ff89d: + fix debian.series using patches with patch levels - Update to version 0.6+git20160617.cfadcb0: * 20-files-present: Add patches from debian.series file to sources list. * 20-files-present: Add more debian standard files to ignore. * 20-files-present: do not use cat where/while not needed ==== php5 ==== Subpackages: apache2-mod_php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-devel php5-dom php5-exif php5-fastcgi php5-ftp php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-json php5-ldap php5-mbstring php5-mcrypt php5-mysql php5-odbc php5-openssl php5-pdo php5-pear php5-pgsql php5-shmop php5-snmp php5-sockets php5-sqlite php5-suhosin php5-sysvsem php5-sysvshm php5-tidy php5-tokenizer php5-wddx php5-xmlreader php5-xmlwriter php5-xsl php5-zip php5-zlib - fix for CVE-2017-7272 was reverted [bsc#1044976] - security update: * CVE-2017-9227 [bsc#1040883] + php-CVE-2017-9227.patch * CVE-2017-9226 [bsc#1040889] + php-CVE-2017-9226.patch * CVE-2017-9224 [bsc#1040891] + php-CVE-2017-9224.patch - security update: * CVE-2016-6294 [bsc#1035111] + php-CVE-2016-6294.patch - security update: * CVE-2017-7272 [bsc#1031246] + php-CVE-2017-7272.patch ==== plasma5-workspace ==== Subpackages: drkonqi5 plasma5-workspace-devel plasma5-workspace-lang plasma5-workspace-libs - Add applauncher-allow-to-show-apps-by-name.patch to provide an option to display application names instead of the generic names in the desktop containment's application launcher mouse action (kde#358423, boo#974513) ==== polkit-gnome ==== Subpackages: polkit-gnome-lang - Remove polkit-gnome-authentication-agent-1.desktop.in (bsc#1004637) + The autostart behavior is no longer needed and it conflicts with Shell's built-in agent ==== postgresql94 ==== Version update (9.4.11 -> 9.4.12) Subpackages: postgresql94-contrib postgresql94-docs postgresql94-server - Update to version 9.4.12: * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html * CVE-2017-7486, bsc#1037624: Restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. !!! Manual action is needed to fix this in existing databases !!! See upstream release notes for details. * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable again. * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical information via leaky operators. * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch - Move the timezone requirement to the server package as it was originally intended. - Stop building libpq and libecpg on SLE-12 in preparation of the submission of version 9.6. - Sync spec file with postgresql96. - Merge Factory and SLE-12. - fix tests with timezone 2017a bsc#1029547 postgresql-9.4.11-fix-timezone-tests.patch - Update to version 9.4.11: - Build corruption with CREATE INDEX CONCURRENTLY - Fixes for visibility and write-ahead-log stability For the full release notes, see: https://www.postgresql.org/docs/9.4/static/release-9-4-11.html - Update to version 9.4.10: * Fix WAL-logging of truncation of relation free space maps and visibility maps * Fix incorrect creation of GIN index WAL records on big-endian machines * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have been updated by a subsequently-aborted transaction * Fix EvalPlanQual rechecks involving CTE scans * Fix improper repetition of previous results from hashed aggregation in a subquery * For the other bug fixes, see the release notes: https://www.postgresql.org/docs/9.4/static/release-9-4-10.html - Added "Requires: timezone" to Server Package (bsc#973660) - Update to version 9.4.9: * Fix possible mis-evaluation of nested CASE-WHEN expressions (CVE-2016-5423, bsc#993454) * Fix client programs' handling of special characters in database and role names (CVE-2016-5424, bsc#993453) * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied to nested composite values * Make the inet and cidr data types properly reject IPv6 addresses with too many colon-separated fields * Prevent crash in close_ps() (the point ## lseg operator) for NaN input coordinates * Fix several one-byte buffer over-reads in to_number() * Avoid unsafe intermediate state during expensive paths through heap_update() * For the other bug fixes, see the release notes: https://www.postgresql.org/docs/9.4/static/release-9-4-9.html - The libs are now built in 9.5, so disable them here and remove baselibs.conf. - Bugfix release to 9.4.8 This update fixes several problems which caused downtime for users, including: - Clearing the OpenSSL error queue before OpenSSL calls, preventing errors in SSL connections, particularly when using the Python, Ruby or PHP OpenSSL wrappers - Fixed the "failed to build N-way joins" planner error - Fixed incorrect handling of equivalence in multilevel nestloop query plans, which could emit rows which didn't match the WHERE clause. - Prevented two memory leaks with using GIN indexes, including a potential index corruption risk. The release also includes many other bug fixes for reported issues, many of which affect all supported versions: - Fix corner-case parser failures occurring when operator_precedence_warning is turned on - Prevent possible misbehavior of TH, th, and Y,YYY format codes in to_timestamp() - Correct dumping of VIEWs and RULEs which use ANY (array) in a subselect - Disallow newlines in ALTER SYSTEM parameter values - Avoid possible misbehavior after failing to remove a tablespace symlink - Fix crash in logical decoding on alignment-picky platforms - Avoid repeated requests for feedback from receiver while shutting down walsender - Multiple fixes for pg_upgrade - Support building with Visual Studio 2015 - This update also contains tzdata release 2016d, with updates for Russia, Venezuela, Kirov, and Tomsk. http://www.postgresql.org/docs/current/static/release-9-4-8.html - Bugfix release 9.4.7: - Fix two bugs in indexed ROW() comparisons - Avoid data loss due to renaming files - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE - Fix bugs in multiple json_ and jsonb_ functions - Log lock waits for INSERT ON CONFLICT correctly - Ignore recovery_min_apply_delay until reaching a consistent state - Fix issue with pg_subtrans XID wraparound - Fix assorted bugs in Logical Decoding - Fix planner error with nested security barrier views - Prevent memory leak in GIN indexes - Fix two issues with ispell dictionaries - Avoid a crash on old Windows versions - Skip creating an erroneous delete script in pg_upgrade - Correctly translate empty arrays into PL/Perl - Make PL/Python cope with identifier names - For the full release notes, see: http://www.postgresql.org/docs/9.4/static/release-9-4-7.html - Security and bugfix release 9.4.6: * *** IMPORTANT *** Users of version 9.4 will need to reindex any jsonb_path_ops indexes they have created, in order to fix a persistent issue with missing index entries. * Fix infinite loops and buffer-overrun problems in regular expressions (CVE-2016-0773, bsc#966436). * Fix regular-expression compiler to handle loops of constraint arcs (CVE-2007-4772). * Prevent certain PL/Java parameters from being set by non-superusers (CVE-2016-0766, bsc#966435). * Fix many issues in pg_dump with specific object types * Prevent over-eager pushdown of HAVING clauses for GROUPING SETS * Fix deparsing error with ON CONFLICT ... WHERE clauses * Fix tableoid errors for postgres_fdw * Prevent floating-point exceptions in pgbench * Make \det search Foreign Table names consistently * Fix quoting of domain constraint names in pg_dump * Prevent putting expanded objects into Const nodes * Allow compile of PL/Java on Windows * Fix "unresolved symbol" errors in PL/Python execution * Allow Python2 and Python3 to be used in the same database * Add support for Python 3.5 in PL/Python * Fix issue with subdirectory creation during initdb * Make pg_ctl report status correctly on Windows * Suppress confusing error when using pg_receivexlog with older servers * Multiple documentation corrections and additions * Fix erroneous hash calculations in gin_extract_jsonb_path() - For the full release notes, see: http://www.postgresql.org/docs/9.4/static/release-9-4-6.html - PL/Perl still needs to be linked with rpath, so that it can find libperl.so at runtime. bsc#578053, postgresql-plperl-keep-rpath.patch - Security and bugfix release 9.4.5: * CVE-2015-5289, bsc#949670: json or jsonb input values constructed from arbitrary user input can crash the PostgreSQL server and cause a denial of service. * CVE-2015-5288, bsc#949669: The crypt() function included with the optional pgCrypto extension could be exploited to read a few additional bytes of memory. No working exploit for this issue has been developed. - For the full release notes, see: http://www.postgresql.org/docs/current/static/release-9-4-5.html - Move systemd related stuff and user creation to postgresql-init. - Remove some obsolete %suse_version conditionals - Adjust build time dependencies. - Fix some more rpmlint warnings. - Relax dependency on libpq to major version. - Make sure that plpgsql.h gets installed, because pldebugger needs it. - Move ~postgres/.bash_profile to postgresql-server to avoid a file conflict between the versioned server packages. - Bring PostgreSQL 9.4 to SLE12 (fate#319049). - Switch from ossp-uuid to libuuid from e2fsprogs. - Re-enable running the test suite during build. - Bugfix release 9.4.4: * Fix possible failure to recover from an inconsistent database state. * Fix rare failure to invalidate relation cache init file. * Avoid deadlock between incoming sessions and CREATE/DROP DATABASE. * Improve planner's cost estimates for semi-joins and anti-joins with inner indexscans - Bugfix release 9.4.3: * Avoid failures while fsync'ing data directory during crash restart. * Fix pg_get_functiondef() to show functions' LEAKPROOF property, if set. * Fix pushJsonbValue() to unpack jbvBinary objects. - Security and bugfix release 9.4.2: * CVE-2015-3165, bsc#931972: Avoid possible crash when client disconnects just before the authentication timeout expires. * CVE-2015-3166, bsc#931973: Consistently check for failure of the *printf() family of functions. * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report decryption failures as "Wrong key or corrupt data". * Protect against wraparound of multixact member IDs. - For the full release notes, see: http://www.postgresql.org/docs/9.4/static/release-9-4-2.html http://www.postgresql.org/docs/9.4/static/release-9-4-3.html http://www.postgresql.org/docs/9.4/static/release-9-4-4.html - Align spec file with 9.3 package. - Require systemd only where available and only for the main package. - bnc#888564: Move the server socket from /tmp to /var/run to avoid problems with clients that use PrivateTmp. postgresql-var-run-socket.patch - Switch over to 9.4 by building the libs package and disable it on 9.3. - Remove obsolete patches: * postgresql-sle10-timestamptz.patch * postgresql-plperl.patch - majorversion should only be 9.4 - Update to 9.4.1 * Fix buffer overruns in to_char() * Fix buffer overrun in replacement *printf() functions * Fix buffer overruns in contrib/pgcrypto * Fix possible loss of frontend/backend protocol synchronization after an error * Fix information leak via constraint-violation error messages * Lock down regression testing's temporary installations on Windows * Cope with the Windows locale named "Norwegian (Bokm�l)" * Fix use-of-already-freed-memory problem in EvalPlanQual processing * Avoid possible deadlock while trying to acquire tuple locks in EvalPlanQual processing * Improve performance of EXPLAIN with large range tables * Fix jsonb Unicode escape processing, and in consequence disallow \u0000 * Fix namespace handling in xpath() * Fix assorted oversights in range-operator selectivity estimation * Revert unintended reduction in maximum size of a GIN index item * Fix query-duration memory leak during repeated GIN index rescans * Fix possible crash when using nonzero gin_fuzzy_search_limit * Assorted fixes for logical decoding * Fix incorrect replay of WAL parameter change records that report changes in the wal_log_hints setting * Change "pgstat wait timeout" warning message to be LOG level, and rephrase it to be more understandable * Warn if OS X's setlocale() starts an unwanted extra thread inside the postmaster * Fix libpq's behavior when /etc/passwd isn't readable * Improve consistency of parsing of psql's special variables * Fix pg_dump to handle comments on event triggers without failing * Allow parallel pg_dump to use --serializable-deferrable * Prevent WAL files created by pg_basebackup -x/-X from being archived again when the standby is promoted * Handle unexpected query results, especially NULLs, safely in contrib/tablefunc's connectby() * Numerous cleanups of warnings from Coverity static code analyzer * Allow CFLAGS from configure's environment to override automatically-supplied CFLAGS * Make pg_regress remove any temporary installation it created upon successful exit * Add CST (China Standard Time) to our lists of timezone abbreviations * Update time zone data files to tzdata release 2015a for DST law changes in Chile and Mexico, plus historical changes in Iceland. - removed %pgbasedir from contrib and server package - Update to 9.4.0 Major enhancements in PostgreSQL 9.4 include: * Add jsonb, a more capable and efficient data type for storing JSON data * Add new SQL command ALTER SYSTEM for changing postgresql.conf configuration file entries * Reduce lock strength for some ALTER TABLE commands * Allow materialized views to be refreshed without blocking concurrent reads * Add support for logical decoding of WAL data, to allow database changes to be streamed out in a customizable format * Allow background worker processes to be dynamically registered, started and terminated * See release notes for a full list of changes: http://www.postgresql.org/docs/9.4/static/release-9-4.html - Update to 9.3.4 * Fix WAL replay of locking an already-updated tuple * Restore GIN metapages unconditionally to avoid torn-page risk * Avoid race condition in checking transaction commit status during receipt of a NOTIFY message * Allow materialized views to be referenced in UPDATE and DELETE commands * Allow regular-expression operators to be terminated early by query cancel requests * Remove incorrect code that tried to allow OVERLAPS with single-element row arguments * Avoid getting more than AccessShareLock when de-parsing a rule or view * Improve performance of index endpoint probes during planning * Use non-default selectivity estimates for value IN (list) and value operator ANY (array) expressions when the righthand side is a stable expression * Remove the correct per-database statistics file during DROP DATABASE * Fix walsender ping logic to avoid inappropriate disconnects under continuous load * Fix walsender's failure to shut down cleanly when client is pg_receivexlog * See release notes for a full list of changes: http://www.postgresql.org/docs/9.3/static/release-9-3-4.html /usr/share/doc/packages/postgresql93/HISTORY - make postgresql-init a buildrequire. requires(pre) are used during build, but do not cause a rebuild trigger. But to make the depencency visible for bootstrapping, mark it as real buildrequire - Security and bugfix release 9.3.3: * Shore up GRANT ... WITH ADMIN OPTION restrictions (CVE-2014-0060, bnc#864845) * Prevent privilege escalation via manual calls to PL validator functions (CVE-2014-0061, bnc#864846) * Avoid multiple name lookups during table and index DDL (CVE-2014-0062, bnc#864847) * Prevent buffer overrun with long datetime strings (CVE-2014-0063, bnc#864850) * Prevent buffer overrun due to integer overflow in size calculations (CVE-2014-0064, bnc#864851) * Prevent overruns of fixed-size buffers (CVE-2014-0065, bnc#864852) * Avoid crashing if crypt() returns NULL (CVE-2014-0066, bnc#864853) * Document risks of make check in the regression testing instructions (CVE-2014-0067) * Rework tuple freezing protocol. The logic for tuple freezing was unable to handle some cases involving freezing of multixact IDs, with the practical effect that shared row-level locks might be forgotten once old enough. Fixing this required changing the WAL record format for tuple freezing. While this is no issue for standalone servers, when using replication it means that STANDBY SERVERS MUST BE UPGRADED TO 9.3.3 OR LATER BEFORE THEIR MASTERS ARE. * For the other (many!) bug fixes, see the release notes: http://www.postgresql.org/docs/9.3/static/release-9-3-3.html - remove postgresql-tas-aarch64.patch: Fix build for aarch64 - Fix handling of alternatives in the file lists. - Update to version 9.3.2: * Fix VACUUM's tests to see whether it can update relfrozenxid * Fix multiple bugs in MultiXactId freezing * Fix initialization of pg_clog and og_subtrans during hot standby startup * Fix multiple bugs in update chain traversal * Fix dangling-pointer problem in fast-path locking * Fix assorted race conditions in timeout management * Prevent intra-transaction memory leak when printing range values * Truncate pg_multixact contents during WAL replay * Ensure an anti-wraparound VACUUM counts a page as scanned when it's only verified that no tuples need freezing * Fix full-table-vacuum request mechanism for MultiXactIds * Fix race condition in GIN index posting tree page deletion * Avoid flattening a subquery whose SELECT list contains a volatile function wrapped inside a sub-SELECT * See release notes for a full list of changes: http://www.postgresql.org/docs/9.3/static/release-9-3-2.html /usr/share/doc/packages/postgresql93/HISTORY - Added option to build postgresql-devel package separatly from postresql-libs - Update to version 9.3.1: * Update hstore extension with JSON functionality * Fix memory leak when creating range indexes * Serializable snapshot fixes * Fix libpq SSL deadlock bug * Fix timeline handling bugs in pg_receivexlog * Prevent CREATE FUNCTION from checking SET variables unless function body checking is enabled * Remove rare inaccurate warning during vacuum of index-less tables - Added patch to build testsuite package (bnc#829952) - Re-enable running the regression tests during build. - The test suite needs the timezone package. - Updated to version 9.3: * Add materialized views * Make simple views auto-updatable * Many JSON improvements, including the addition of operators and functions to extract values from JSON data strings * Implement SQL-standard LATERAL option for FROM-clause subqueries and function calls * Allow foreign data wrappers to support writes (insers/updates/deletes) on foreign tables * Add a Postgres foreign data wrapper contrib module * Add support for event triggers * Add optional ability to checksum data pages and report corruption * Allow a streaming replication standby to follow a timeline switch, and faster failover * Dramatically reduce System V shared memory requirements * Prevent non-key-field row updates from locking foreign key rows * Add command-line utility pg_isready * Add pg_xlogdump contrib program * See release notes for a full list of changes: http://www.postgresql.org/docs/9.3/static/release-9-3.html /usr/share/doc/packages/postgresql93/HISTORY - postgresql-tas-aarch64.patch: Implement TAS for aarch64 - Add Source URL, see https://en.opensuse.org/SourceUrls - Updated to version 9.2.4 (bnc#812525): * CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is eventually rejected. * CVE-2013-1900: Reset OpenSSL randomness state in each postmaster child process. This avoids a scenario wherein random numbers generated by "contrib/pgcrypto" functions might be relatively easy for another database user to guess. The risk is only significant when the postmaster is configured with ssl = on but most connections don't use SSL encryption. * CVE-2013-1901: Make REPLICATION privilege checks test current user not authenticated user. An unprivileged database user could exploit this mistake to call pg_start_backup() or pg_stop_backup(), thus possibly interfering with creation of routine backups. * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.2/static/release-9-2-4.html /usr/share/doc/packages/postgresql92/HISTORY - Version 9.2.3 also fixes bnc#802679, CVE-2013-0255. - Remove postgresql92-full.spec.in and use postgresql92.spec as the master for generating postgresql92-libs.spec. - Updated to version 9.2.3 * Prevent execution of enum_recv from SQL (Tom Lane) * Fix multiple problems in detection of when a consistent database state has been reached during WAL replay * Fix detection of end-of-backup point when no actual redo work is required * Update minimum recovery point when truncating a relation file * Fix recycling of WAL segments after changing recovery target timeline * Properly restore timeline history files from archive on cascading standby servers * Fix lock conflict detection on hot-standby servers * Fix missing cancellations in hot standby mode * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.2/static/release-9-2-3.html /usr/share/doc/packages/postgresql/HISTORY - Use PDX license string. - Conflicts tags don't support the != operator. - Updated to version 9.2.2 * Fix multiple bugs associated with CREATE/DROP INDEX CONCURRENTLY * Correct predicate locking for DROP INDEX CONCURRENTLY * Fix buffer locking during WAL replay * Fix an error in WAL generation logic for GIN indexes * Fix an error in WAL replay logic for SP-GiST indexes * Fix incorrect detection of end-of-base-backup location during WAL recovery * Properly remove startup process's virtual XID lock when promoting a hot standby server to normal running * Avoid bogus "out-of-sequence timeline ID" errors in standby mode * Prevent the postmaster from launching new child processes after it's received a shutdown signal * Fix the syslogger process to not fail when log_rotation_age exceeds 2^31 milliseconds * Fix WaitLatch() to return promptly when the requested timeout expires * Avoid corruption of internal hash tables when out of memory * Prevent file descriptors for dropped tables from being held open past transaction end * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.2/static/release-9-2-2.html /usr/share/doc/packages/postgresql/HISTORY - Change mechanism for making postgresql??-devel exclusive (bnc#789562). - Resolve "have choice for libpq.so.5" by ignoring postgresql-libs. - Get the new packaging scheme over to the postgresql92 packages and make 9.2 the new default version. - Bugfix release 9.1.6 (bnc#782251) to fix data corruption issues. * Users who upgrade from a previous 9.1 release should run REINDEX after applying this update. See also: http://wiki.postgresql.org/wiki/20120924updaterelease * For the full list of changes, see http://www.postgresql.org/docs/9.1/static/release.html - Change the base name of all PostgreSQL packages from postgresql to postgresql91 and adopt the new packaging schema, which allows the parallel installation of multiple PostgreSQL versions to simplify and speedup migration. - Move init script, sysconfig file and firewall configuration into a new package called postgresql-init which can work with different PostgreSQL versions. - Security and bugfix release 9.1.5: * Ignore SECURITY DEFINER and SET attributes for a procedural language's call handler (CVE-2012-2655) * Fix incorrect password transformation in "contrib/pgcrypto"'s DES crypt() function (CVE-2012-2143) * Prevent access to external files/URLs via "contrib/xml2"'s xslt_process() (CVE-2012-3488) * Prevent access to external files/URLs via XML entity references (CVE-2012-3489) * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.1/static/release.html /usr/share/doc/packages/postgresql/HISTORY - Security and bugfix release 9.1.3: * Require execute permission on the trigger function for "CREATE TRIGGER" (CVE-2012-0866, bnc#749299). * Remove arbitrary limitation on length of common name in SSL certificates (CVE-2012-0867, bnc#749301). * Convert newlines to spaces in names written in pg_dump comments (CVE-2012-0868, bnc#749303). * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.1/static/release.html /usr/share/doc/packages/postgresql/HISTORY - This also fixes bnc#701489. - New version 9.1.1. For detailed release notes, see: http://www.postgresql.org/docs/9.1/static/release-9-1-1.html - Stop using deprecated silent_mode in default config. - postgresql-perl514.patch is no longer needed. - Use %_smp_mflags for parallel make - Keep the rpath when linking plperl [bnc#578053]. - Add postgresql-devel to baselibs - Revert the postgresql-libs package split for SLE in preparation of submitting the package to SLE11-SP1. - Fix file name of last added patch and remove overlong comment. - Add postgresql-9.0.4-perl514.patch: For Perl 5.14 GvCV(sv) is no longer an lvalue and needs to be replaced by GvCV_set(sv, value) - Bugfix release: 9.0.4: * This update contains a critical fix to the pg_upgrade utility which prevents significant downtime issues. Do not use pg_upgrade without installing this update first. http://wiki.postgresql.org/wiki/20110408pg_upgrade_fix * change SQLSTATE for Hot Standby warnings * prevent bgwriter hang during recovery * prevent recursive composite type creation * disallow dropping tables whose triggers are still pending * allow use of "replication" as a user name * prevent a crash during GEQO planning * improve join plans for tables with missing statistics * fix error with SELECT FOR UPDATE in a subselect * close PL/python array slice memory leak * allow SSL connections for users with no home directory - http://www.postgresql.org/docs/9.0/static/release-9-0-4.html - enabled --with-ossp-uuid - Fix the fix of the fix for the successors of postgresql-libs. - provide postgresql-libs in the specfile that actually builds the libs package - fix update of libs - Move all of pgxs into the devel package to fix build of server extensions. - Move pg_config from -server to -devel to fix build of certain client apps and language bindings, but using pg_config on the client side is still considered broken, because it tells what got linked into the server binary not what got linked into libpq. - Remove unneeded PreReq from postgresql on postgresql-libs. - New version: 9.0.3. For the complete release notes, see http://www.postgresql.org/docs/9.0/static/release.html - Build libs and devel separate from the main package. - Build the PL subpackages as part of the main package. - Have separate packages for libpq and libecpg. - Generate the main and lib spec files from postgresql.spec.in. - Fix LSB conformance of the init script (bnc#658014). - Security and bugfix release 8.4.5 (bnc#643771): * Use a separate interpreter for each calling SQL userid in PL/Perl and PL/Tcl (CVE-2010-3433). * Prevent possible crashes in pg_get_expr() by disallowing it from being called with an argument that is not one of the system catalog columns it's intended to be used with. * Fix incorrect placement of placeholder evaluation. * Fix possible duplicate scans of UNION ALL member relations. * Fix "cannot handle unplanned sub-select" error. * Fix mishandling of whole-row Vars that reference a view or sub-select and appear within a nested sub-select. * Fix mishandling of cross-type IN comparisons. * Fix computation of ANALYZE statistics for tsvector columns. * Improve planner's estimate of memory used by array_agg(), string_agg(), and similar aggregate functions. * Fix failure to mark cached plans as transient. * Reduce PANIC to ERROR in some occasionally-reported btree failure cases, and provide additional detail in the resulting error messages. * Fix incorrect search logic for partial-match queries with GIN indexes. * Prevent show_session_authorization() from crashing within autovacuum processes. * Defend against functions returning setof record where not all the returned rows are actually of the same rowtype. * Fix possible corruption of pending trigger event lists during subtransaction rollback. * Fix possible failure when hashing a pass-by-reference function result. * Improve merge join's handling of NULLs in the join columns. * Take care to fsync the contents of lockfiles (both postmaster.pid and the socket lockfile) while writing them. * Avoid recursion while assigning XIDs to heavily-nested subtransactions. * Avoid holding open old WAL segments in the walwriter process. * Fix log_line_prefix's %i escape, which could produce junk early in backend startup. * Prevent misinterpretation of partially-specified relation options for TOAST tables. * Fix inheritance count tracking in ALTER TABLE ... ADD CONSTRAINT. * Fix possible data corruption in ALTER TABLE ... SET TABLESPACE when archiving is enabled. * Allow CREATE DATABASE and ALTER DATABASE ... SET TABLESPACE to be interrupted by query-cancel. * Improve CREATE INDEX's checking of whether proposed index expressions are immutable. * Fix REASSIGN OWNED to handle operator classes and families. * Fix possible core dump when comparing two empty tsquery values. * Fix LIKE's handling of patterns containing % followed by _ * Re-allow input of Julian dates prior to 0001-01-01 AD. * Fix PL/pgSQL to throw an error, not crash, if a cursor is closed within a FOR loop that is iterating over that cursor. * In PL/Python, defend against null pointer results from PyCObject_AsVoidPtr and PyCObject_FromVoidPtr * In libpq, fix full SSL certificate verification for the case where both host and hostaddr are specified. * Make psql recognize DISCARD ALL as a command that should not be encased in a transaction block in autocommit-off mode. * Fix some issues in pg_dump's handling of SQL/MED objects. * Improve pg_dump and pg_restore's handling of non-seekable archive files. This is important for proper functioning of parallel restore. * Improve parallel pg_restore's ability to cope with selective restore (-L option). * Fix ecpg to process data from RETURNING clauses correctly. * Fix some memory leaks in ecpg. * Improve contrib/dblink's handling of tables containing dropped columns. * Fix connection leak after "duplicate connection name" errors in contrib/dblink. * Fix contrib/dblink to handle connection names longer than 62 bytes correctly. * Add hstore(text, text) function to contrib/hstore. - Security and bugfix release 8.4.4: * Enforce restrictions in plperl using an opmask applied to the whole interpreter, instead of using Safe.pm. Recent developments have convinced us that Safe.pm is too insecure to rely on for making plperl trustable. This change removes use of Safe.pm altogether, in favor of using a separate interpreter with an opcode mask that is always applied. Pleasant side effects of the change include that it is now possible to use Perl's strict pragma in a natural way in plperl, and that Perl's $a and $b variables work as expected in sort routines, and that function compilation is significantly faster. (CVE-2010-1169) * Prevent PL/Tcl from executing untrustworthy code from pltcl_modules. PL/Tcl's feature for autoloading Tcl code from a database table could be exploited for trojan-horse attacks, because there was no restriction on who could create or insert into that table. This change disables the feature unless pltcl_modules is owned by a superuser. (However, the permissions on the table are not checked, so installations that really need a less-than-secure modules table can still grant suitable privileges to trusted non-superusers.) Also, prevent loading code into the unrestricted "normal" Tcl interpreter unless we are really going to execute a pltclu function. (CVE-2010-1170) * Fix data corruption during WAL replay of ALTER ... SET TABLESPACE. When archive_mode is on, ALTER ... SET TABLESPACE generates a WAL record whose replay logic was incorrect. It could write the data to the wrong place, leading to possibly-unrecoverable data corruption. Data corruption would be observed on standby slaves, and could occur on the master as well if a database crash and recovery occurred after committing the ALTER and before the next checkpoint. * Fix possible crash if a cache reset message is received during rebuild of a relcache entry. This error was introduced in 8.4.3 while fixing a related failure. * Apply per-function GUC settings while running the language validator for the function. * This avoids failures if the function's code is invalid without the setting; an example is that SQL functions may not parse if the search_path is not correct. * Do constraint exclusion for inherited UPDATE and DELETE target tables when constraint_exclusion = partition. Due to an oversight, this setting previously only caused constraint exclusion to be checked in SELECT commands. * Do not allow an unprivileged user to reset superuser-only parameter settings. Previously, if an unprivileged user ran ALTER USER ... RESET ALL for himself, or ALTER DATABASE ... RESET ALL for a database he owns, this would remove all special parameter settings for the user or database, even ones that are only supposed to be changeable by a superuser. Now, the ALTER will only remove the parameters that the user has permission to change. * Avoid possible crash during backend shutdown if shutdown occurs when a CONTEXT addition would be made to log entries. In some cases the context-printing function would fail because the current transaction had already been rolled back when it came time to print a log message. * Fix erroneous handling of %r parameter in recovery_end_command. The value always came out zero. * Ensure the archiver process responds to changes in archive_command as soon as possible. * Fix pl/pgsql's CASE statement to not fail when the case expression is a query that returns no rows. * Update pl/perl's ppport.h for modern Perl versions. * Fix assorted memory leaks in pl/python. * Handle empty-string connect parameters properly in ecpg. * Prevent infinite recursion in psql when expanding a variable that refers to itself. * Fix psql's \copy to not add spaces around a dot within \copy (select ...). Addition of spaces around the decimal point in a numeric literal would result in a syntax error. * Avoid formatting failure in psql when running in a locale context that doesn't match the client_encoding. * Fix unnecessary "GIN indexes do not support whole-index scans" errors for unsatisfiable queries using contrib/intarray operators. * Ensure that contrib/pgstattuple functions respond to cancel interrupts promptly. * Make server startup deal properly with the case that shmget() returns EINVAL for an existing shared memory segment. This behavior has been observed on BSD-derived kernels including OS X. It resulted in an entirely-misleading startup failure complaining that the shared memory request size was too large. - Use %configure to pick up the default directories (bnc#600616). - Security and bugfix release 8.4.3. - Disable GSSAPI, XML, kerberos and make check in OBS for SLES9. - Fix build for SLES9 - Fix package descriptions. - Security and bugfix release 8.4.2: * CVE-2009-4136: Protect against indirect security threats caused by index functions changing session-local state. This change prevents allegedly-immutable index functions from possibly subverting a superuser's session. * CVE-2009-4034: Reject SSL certificates containing an embedded null byte in the common name (CN) field. This prevents unintended matching of a certificate to a server or client name during SSL validation. * Fix hash index corruption. The 8.4 change that made hash indexes keep entries sorted by hash value failed to update the bucket splitting and compaction routines to preserve the ordering. So application of either of those operations could lead to permanent corruption of an index, in the sense that searches might fail to find entries that are present. To deal with this, it is recommended to REINDEX any hash indexes you may have after installing this update. * Fix possible crash during backend-startup-time cache initialization * Avoid crash on empty thesaurus dictionary * Prevent signals from interrupting VACUUM at unsafe times. This fix prevents a PANIC if a VACUUM FULL is cancelled after it's already committed its tuple movements, as well as transient errors if a plain VACUUM is interrupted after having truncated the table. * Fix possible crash due to integer overflow in hash table size calculation. This could occur with extremely large planner estimates for the size of a hashjoin's result. * Fix crash if a DROP is attempted on an internally-dependent object. * Fix very rare crash in inet/cidr comparisons. * Ensure that shared tuple-level locks held by prepared transactions are not ignored. * Fix premature drop of temporary files used for a cursor that is accessed within a subtransaction. * Fix memory leak in syslogger process when rotating to a new CSV logfile. * Fix memory leak in postmaster when re-parsing "pg_hba.conf". * Make FOR UPDATE/SHARE in the primary query not propagate into WITH queries. * Fix bug with a WITH RECURSIVE query immediately inside another one. * Fix concurrency bug in hash indexes. Concurrent insertions could cause index scans to transiently report wrong results. * Fix incorrect logic for GiST index page splits, when the split depends on a non-first column of the index. * Fix wrong search results for a multi-column GIN index with fastupdate enabled. * Fix bugs in WAL entry creation for GIN indexes. These bugs were masked when full_page_writes was on, but with it off a WAL replay failure was certain if a crash occurred before the next checkpoint. * Don't error out if recycling or removing an old WAL file fails at the end of checkpoint. It's better to treat the problem as non-fatal and allow the checkpoint to complete. Future checkpoints will retry the removal. Such problems are not expected in normal operation, but have been seen to be caused by misdesigned Windows anti-virus and backup software. * Ensure WAL files aren't repeatedly archived on Windows. This is another symptom that could happen if some other process interfered with deletion of a no-longer-needed file. * Fix PAM password processing to be more robust. The previous code is known to fail with the combination of the Linux pam_krb5 PAM module with Microsoft Active Directory as the domain controller. It might have problems elsewhere too, since it was making unjustified assumptions about what arguments the PAM stack would pass to it. * Raise the maximum authentication token (Kerberos ticket) size in GSSAPI and SSPI authentication methods. While the old 2000-byte limit was more than enough for Unix Kerberos implementations, tickets issued by Windows Domain Controllers can be much larger. * Ensure that domain constraints are enforced in constructs like ARRAY[...]::domain, where the domain is over an array type. * Fix foreign-key logic for some cases involving composite-type columns as foreign keys. * Ensure that a cursor's snapshot is not modified after it is created. This could lead to a cursor delivering wrong results if later operations in the same transaction modify the data the cursor is supposed to return. * Fix CREATE TABLE to properly merge default expressions coming from different inheritance parent tables. This used to work but was broken in 8.4. * Re-enable collection of access statistics for sequences. This used to work but was broken in 8.3. * Fix processing of ownership dependencies during CREATE OR REPLACE FUNCTION. * Fix incorrect handling of WHERE "x"="x" conditions. In some cases these could get ignored as redundant, but they aren't -- they're equivalent to "x" IS NOT NULL. * Fix incorrect plan construction when using hash aggregation to implement DISTINCT for textually identical volatile expressions. * Fix Assert failure for a volatile SELECT DISTINCT ON expression. * Fix ts_stat() to not fail on an empty tsvector value. * Make text search parser accept underscores in XML attributes. * Fix encoding handling in xml binary input. If the XML header doesn't specify an encoding, we now assume UTF-8 by default; the previous handling was inconsistent. * Fix bug with calling plperl from plperlu or vice versa. An error exit from the inner function could result in crashes due to failure to re-select the correct Perl interpreter for the outer function. * Fix session-lifespan memory leak when a PL/Perl function is redefined. * Ensure that Perl arrays are properly converted to PostgreSQL arrays when returned by a set-returning PL/Perl function. This worked correctly already for non-set-returning functions. * Fix rare crash in exception processing in PL/Python. * Fix ecpg problem with comments in DECLARE CURSOR statements. * Fix ecpg to not treat recently-added keywords as reserved words. This affected the keywords CALLED, CATALOG, DEFINER, ENUM, FOLLOWING, INVOKER, OPTIONS, PARTITION, PRECEDING, RANGE, SECURITY, SERVER, UNBOUNDED, and WRAPPER. * Re-allow regular expression special characters in psql's \df function name parameter. * In "contrib/pg_standby", disable triggering failover with a signal on Windows. This never did anything useful, because Windows doesn't have Unix-style signals, but recent changes made it actually crash. * Put FREEZE and VERBOSE options in the right order in the VACUUM command that "contrib/vacuumdb" produces. * Fix possible leak of connections when "contrib/dblink" encounters an error. * Ensure psql's flex module is compiled with the correct system header definitions. This fixes build failures on platforms where --enable-largefile causes incompatible changes in the generated code. * Make the postmaster ignore any application_name parameter in connection request packets, to improve compatibility with future libpq versions. * Update the timezone abbreviation files to match current reality This includes adding IDT to the default timezone abbreviation set. - package documentation as noarch - add baselibs.conf as a source - use find_lang to package language files correctly - Security and bugfix release 8.4.1: * Fix WAL page header initialization at the end of archive recovery. This could lead to failure to process the WAL in a subsequent archive recovery. * Fix "cannot make new WAL entries during recovery" error. * Fix problem that could make expired rows visible after a crash. This bug involved a page status bit potentially not being set correctly after a server crash. * Disallow RESET ROLE and RESET SESSION AUTHORIZATION inside security-definer functions. This covers a case that was missed in the previous patch that disallowed SET ROLE and SET SESSION AUTHORIZATION inside security-definer functions. (See CVE-2007-6600) * Make LOAD of an already-loaded loadable module into a no-op. * Formerly, LOAD would attempt to unload and re-load the module, but this is unsafe and not all that useful. * Make window function PARTITION BY and ORDER BY items always be interpreted as simple expressions. In 8.4.0 these lists were parsed following the rules used for top-level GROUP BY and ORDER BY lists. But this was not correct per the SQL standard, and it led to possible circularity. * Fix several errors in planning of semi-joins. These led to wrong query results in some cases where IN or EXISTS was used together with another join. * Fix handling of whole-row references to subqueries that are within an outer join. An example is SELECT COUNT(ss.*) FROM ... LEFT JOIN (SELECT ...) ss ON .... Here, ss.* would be treated as ROW(NULL,NULL,...) for null-extended join rows, which is not the same as a simple NULL. Now it is treated as a simple NULL. * Fix Windows shared-memory allocation code. This bug led to the often-reported "could not reattach to shared memory" error message. * Fix locale handling with plperl. This bug could cause the server's locale setting to change when a plperl function is called, leading to data corruption. * Fix handling of reloptions to ensure setting one option doesn't force default values for others. * Ensure that a "fast shutdown" request will forcibly terminate open sessions, even if a "smart shutdown" was already in progress. * Avoid memory leak for array_agg() in GROUP BY queries. * Treat to_char(..., 'TH') as an uppercase ordinal suffix with 'HH'/'HH12'. It was previously handled as 'th' (lowercase). * Include the fractional part in the result of EXTRACT(second) and EXTRACT(milliseconds) for time and time with time zone inputs. This has always worked for floating-point datetime configurations, but was broken in the integer datetime code. * Fix overflow for INTERVAL 'x ms' when x is more than 2 million and integer datetimes are in use. * Improve performance when processing toasted values in index scans. This is particularly useful for PostGIS. * Fix a typo that disabled commit_delay. * Output early-startup messages to postmaster.log if the server is started in silent mode. Previously such error messages were discarded, leading to difficulty in debugging. * Remove translated FAQs. They are now on the wiki. The main FAQ was moved to the wiki some time ago. * Fix pg_ctl to not go into an infinite loop if postgresql.conf is empty. * Fix several errors in pg_dump's --binary-upgrade mode. * pg_dump --binary-upgrade is used by pg_migrator. * Fix contrib/xml2's xslt_process() to properly handle the maximum number of parameters (twenty). * Improve robustness of libpq's code to recover from errors during COPY FROM STDIN. * Avoid including conflicting readline and editline header files when both libraries are installed. * Work around gcc bug that causes "floating-point exception" instead of "division by zero" on some platforms. - postgresql-8.4.0-sle10-timestamptz.patch added, and applied _only_ on SLE10. It fixes a build failure due to a test case that seems to be confused by daylight saving time in the time zone that the test expects its result (PDT vs. PST). Since this failure happened only on SLE10, I assume that the test case isn't broken, and some peculiarity on that (rather old now) platform is to blame (possibly too old timezone files). Also, the testcase is checking correctness when converting timezones > 32 bit, which actually seems to work. - replace "ident sameuser" with "ident" as auth method for the initdb call in the init script, because the former doesn't work with PostgreSQL 8.4. With the generated pg_hba.conf, PostgreSQL failed to start. Added note to the upgrade READMEs. [bnc#522375] - New major release: 8.4.0 - Improvements include: * Windowing Functions * Common Table Expressions and Recursive Queries * Default and variadic parameters for functions * Parallel Restore * Column Permissions * Per-database locale settings * Improved hash indexes * Improved join performance for EXISTS and NOT EXISTS queries * Easier-to-use Warm Standby * Automatic sizing of the Free Space Map * Visibility Map (greatly reduces vacuum overhead for slowly-changing tables) * Version-aware psql (backslash commands work against older servers) * Support SSL certificates for user authentication * Per-function runtime statistics * Easy editing of functions in psql * New contrib modules: pg_stat_statements, auto_explain, citext, btree_gin - Remove dependency on local posixrules from horology test. - Security release 8.3.7 * Fixes a vulnerability that allowed remote authenticated users to cause a denial of service (stack consumption) via mismatched encoding conversion requests. * Details of the other bugfixes contained in this and previous releases can be found here: http://www.postgresql.org/docs/8.3/static/release.html /usr/share/doc/packages/postgresql/HISTORY - Users of GiST indexes should "REINDEX" them after installing this update. - Re-added libpgport.a to the devel package, as some apps require it, although it is meant to be internal to the PostgreSQL backend. - Fix removal of leftover files on database startup (bnc#473644). ==== postgresql94-libs ==== Version update (9.4.11 -> 9.4.12) - Update to version 9.4.12: * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html * CVE-2017-7486, bsc#1037624: Restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. !!! Manual action is needed to fix this in existing databases !!! See upstream release notes for details. * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable again. * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical information via leaky operators. * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch - Move the timezone requirement to the server package as it was originally intended. - Stop building libpq and libecpg on SLE-12 in preparation of the submission of version 9.6. - Sync spec file with postgresql96. - Merge Factory and SLE-12. - fix tests with timezone 2017a bsc#1029547 postgresql-9.4.11-fix-timezone-tests.patch - Update to version 9.4.11: - Build corruption with CREATE INDEX CONCURRENTLY - Fixes for visibility and write-ahead-log stability For the full release notes, see: https://www.postgresql.org/docs/9.4/static/release-9-4-11.html - Update to version 9.4.10: * Fix WAL-logging of truncation of relation free space maps and visibility maps * Fix incorrect creation of GIN index WAL records on big-endian machines * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have been updated by a subsequently-aborted transaction * Fix EvalPlanQual rechecks involving CTE scans * Fix improper repetition of previous results from hashed aggregation in a subquery * For the other bug fixes, see the release notes: https://www.postgresql.org/docs/9.4/static/release-9-4-10.html - Added "Requires: timezone" to Server Package (bsc#973660) - Update to version 9.4.9: * Fix possible mis-evaluation of nested CASE-WHEN expressions (CVE-2016-5423, bsc#993454) * Fix client programs' handling of special characters in database and role names (CVE-2016-5424, bsc#993453) * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied to nested composite values * Make the inet and cidr data types properly reject IPv6 addresses with too many colon-separated fields * Prevent crash in close_ps() (the point ## lseg operator) for NaN input coordinates * Fix several one-byte buffer over-reads in to_number() * Avoid unsafe intermediate state during expensive paths through heap_update() * For the other bug fixes, see the release notes: https://www.postgresql.org/docs/9.4/static/release-9-4-9.html - The libs are now built in 9.5, so disable them here and remove baselibs.conf. - Bugfix release to 9.4.8 This update fixes several problems which caused downtime for users, including: - Clearing the OpenSSL error queue before OpenSSL calls, preventing errors in SSL connections, particularly when using the Python, Ruby or PHP OpenSSL wrappers - Fixed the "failed to build N-way joins" planner error - Fixed incorrect handling of equivalence in multilevel nestloop query plans, which could emit rows which didn't match the WHERE clause. - Prevented two memory leaks with using GIN indexes, including a potential index corruption risk. The release also includes many other bug fixes for reported issues, many of which affect all supported versions: - Fix corner-case parser failures occurring when operator_precedence_warning is turned on - Prevent possible misbehavior of TH, th, and Y,YYY format codes in to_timestamp() - Correct dumping of VIEWs and RULEs which use ANY (array) in a subselect - Disallow newlines in ALTER SYSTEM parameter values - Avoid possible misbehavior after failing to remove a tablespace symlink - Fix crash in logical decoding on alignment-picky platforms - Avoid repeated requests for feedback from receiver while shutting down walsender - Multiple fixes for pg_upgrade - Support building with Visual Studio 2015 - This update also contains tzdata release 2016d, with updates for Russia, Venezuela, Kirov, and Tomsk. http://www.postgresql.org/docs/current/static/release-9-4-8.html - Bugfix release 9.4.7: - Fix two bugs in indexed ROW() comparisons - Avoid data loss due to renaming files - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE - Fix bugs in multiple json_ and jsonb_ functions - Log lock waits for INSERT ON CONFLICT correctly - Ignore recovery_min_apply_delay until reaching a consistent state - Fix issue with pg_subtrans XID wraparound - Fix assorted bugs in Logical Decoding - Fix planner error with nested security barrier views - Prevent memory leak in GIN indexes - Fix two issues with ispell dictionaries - Avoid a crash on old Windows versions - Skip creating an erroneous delete script in pg_upgrade - Correctly translate empty arrays into PL/Perl - Make PL/Python cope with identifier names - For the full release notes, see: http://www.postgresql.org/docs/9.4/static/release-9-4-7.html - Security and bugfix release 9.4.6: * *** IMPORTANT *** Users of version 9.4 will need to reindex any jsonb_path_ops indexes they have created, in order to fix a persistent issue with missing index entries. * Fix infinite loops and buffer-overrun problems in regular expressions (CVE-2016-0773, bsc#966436). * Fix regular-expression compiler to handle loops of constraint arcs (CVE-2007-4772). * Prevent certain PL/Java parameters from being set by non-superusers (CVE-2016-0766, bsc#966435). * Fix many issues in pg_dump with specific object types * Prevent over-eager pushdown of HAVING clauses for GROUPING SETS * Fix deparsing error with ON CONFLICT ... WHERE clauses * Fix tableoid errors for postgres_fdw * Prevent floating-point exceptions in pgbench * Make \det search Foreign Table names consistently * Fix quoting of domain constraint names in pg_dump * Prevent putting expanded objects into Const nodes * Allow compile of PL/Java on Windows * Fix "unresolved symbol" errors in PL/Python execution * Allow Python2 and Python3 to be used in the same database * Add support for Python 3.5 in PL/Python * Fix issue with subdirectory creation during initdb * Make pg_ctl report status correctly on Windows * Suppress confusing error when using pg_receivexlog with older servers * Multiple documentation corrections and additions * Fix erroneous hash calculations in gin_extract_jsonb_path() - For the full release notes, see: http://www.postgresql.org/docs/9.4/static/release-9-4-6.html - PL/Perl still needs to be linked with rpath, so that it can find libperl.so at runtime. bsc#578053, postgresql-plperl-keep-rpath.patch - Security and bugfix release 9.4.5: * CVE-2015-5289, bsc#949670: json or jsonb input values constructed from arbitrary user input can crash the PostgreSQL server and cause a denial of service. * CVE-2015-5288, bsc#949669: The crypt() function included with the optional pgCrypto extension could be exploited to read a few additional bytes of memory. No working exploit for this issue has been developed. - For the full release notes, see: http://www.postgresql.org/docs/current/static/release-9-4-5.html - Move systemd related stuff and user creation to postgresql-init. - Remove some obsolete %suse_version conditionals - Adjust build time dependencies. - Fix some more rpmlint warnings. - Relax dependency on libpq to major version. - Make sure that plpgsql.h gets installed, because pldebugger needs it. - Move ~postgres/.bash_profile to postgresql-server to avoid a file conflict between the versioned server packages. - Bring PostgreSQL 9.4 to SLE12 (fate#319049). - Switch from ossp-uuid to libuuid from e2fsprogs. - Re-enable running the test suite during build. - Bugfix release 9.4.4: * Fix possible failure to recover from an inconsistent database state. * Fix rare failure to invalidate relation cache init file. * Avoid deadlock between incoming sessions and CREATE/DROP DATABASE. * Improve planner's cost estimates for semi-joins and anti-joins with inner indexscans - Bugfix release 9.4.3: * Avoid failures while fsync'ing data directory during crash restart. * Fix pg_get_functiondef() to show functions' LEAKPROOF property, if set. * Fix pushJsonbValue() to unpack jbvBinary objects. - Security and bugfix release 9.4.2: * CVE-2015-3165, bsc#931972: Avoid possible crash when client disconnects just before the authentication timeout expires. * CVE-2015-3166, bsc#931973: Consistently check for failure of the *printf() family of functions. * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report decryption failures as "Wrong key or corrupt data". * Protect against wraparound of multixact member IDs. - For the full release notes, see: http://www.postgresql.org/docs/9.4/static/release-9-4-2.html http://www.postgresql.org/docs/9.4/static/release-9-4-3.html http://www.postgresql.org/docs/9.4/static/release-9-4-4.html - Align spec file with 9.3 package. - Require systemd only where available and only for the main package. - bnc#888564: Move the server socket from /tmp to /var/run to avoid problems with clients that use PrivateTmp. postgresql-var-run-socket.patch - Switch over to 9.4 by building the libs package and disable it on 9.3. - Remove obsolete patches: * postgresql-sle10-timestamptz.patch * postgresql-plperl.patch - majorversion should only be 9.4 - Update to 9.4.1 * Fix buffer overruns in to_char() * Fix buffer overrun in replacement *printf() functions * Fix buffer overruns in contrib/pgcrypto * Fix possible loss of frontend/backend protocol synchronization after an error * Fix information leak via constraint-violation error messages * Lock down regression testing's temporary installations on Windows * Cope with the Windows locale named "Norwegian (Bokm�l)" * Fix use-of-already-freed-memory problem in EvalPlanQual processing * Avoid possible deadlock while trying to acquire tuple locks in EvalPlanQual processing * Improve performance of EXPLAIN with large range tables * Fix jsonb Unicode escape processing, and in consequence disallow \u0000 * Fix namespace handling in xpath() * Fix assorted oversights in range-operator selectivity estimation * Revert unintended reduction in maximum size of a GIN index item * Fix query-duration memory leak during repeated GIN index rescans * Fix possible crash when using nonzero gin_fuzzy_search_limit * Assorted fixes for logical decoding * Fix incorrect replay of WAL parameter change records that report changes in the wal_log_hints setting * Change "pgstat wait timeout" warning message to be LOG level, and rephrase it to be more understandable * Warn if OS X's setlocale() starts an unwanted extra thread inside the postmaster * Fix libpq's behavior when /etc/passwd isn't readable * Improve consistency of parsing of psql's special variables * Fix pg_dump to handle comments on event triggers without failing * Allow parallel pg_dump to use --serializable-deferrable * Prevent WAL files created by pg_basebackup -x/-X from being archived again when the standby is promoted * Handle unexpected query results, especially NULLs, safely in contrib/tablefunc's connectby() * Numerous cleanups of warnings from Coverity static code analyzer * Allow CFLAGS from configure's environment to override automatically-supplied CFLAGS * Make pg_regress remove any temporary installation it created upon successful exit * Add CST (China Standard Time) to our lists of timezone abbreviations * Update time zone data files to tzdata release 2015a for DST law changes in Chile and Mexico, plus historical changes in Iceland. - removed %pgbasedir from contrib and server package - Update to 9.4.0 Major enhancements in PostgreSQL 9.4 include: * Add jsonb, a more capable and efficient data type for storing JSON data * Add new SQL command ALTER SYSTEM for changing postgresql.conf configuration file entries * Reduce lock strength for some ALTER TABLE commands * Allow materialized views to be refreshed without blocking concurrent reads * Add support for logical decoding of WAL data, to allow database changes to be streamed out in a customizable format * Allow background worker processes to be dynamically registered, started and terminated * See release notes for a full list of changes: http://www.postgresql.org/docs/9.4/static/release-9-4.html - Update to 9.3.4 * Fix WAL replay of locking an already-updated tuple * Restore GIN metapages unconditionally to avoid torn-page risk * Avoid race condition in checking transaction commit status during receipt of a NOTIFY message * Allow materialized views to be referenced in UPDATE and DELETE commands * Allow regular-expression operators to be terminated early by query cancel requests * Remove incorrect code that tried to allow OVERLAPS with single-element row arguments * Avoid getting more than AccessShareLock when de-parsing a rule or view * Improve performance of index endpoint probes during planning * Use non-default selectivity estimates for value IN (list) and value operator ANY (array) expressions when the righthand side is a stable expression * Remove the correct per-database statistics file during DROP DATABASE * Fix walsender ping logic to avoid inappropriate disconnects under continuous load * Fix walsender's failure to shut down cleanly when client is pg_receivexlog * See release notes for a full list of changes: http://www.postgresql.org/docs/9.3/static/release-9-3-4.html /usr/share/doc/packages/postgresql93/HISTORY - make postgresql-init a buildrequire. requires(pre) are used during build, but do not cause a rebuild trigger. But to make the depencency visible for bootstrapping, mark it as real buildrequire - Security and bugfix release 9.3.3: * Shore up GRANT ... WITH ADMIN OPTION restrictions (CVE-2014-0060, bnc#864845) * Prevent privilege escalation via manual calls to PL validator functions (CVE-2014-0061, bnc#864846) * Avoid multiple name lookups during table and index DDL (CVE-2014-0062, bnc#864847) * Prevent buffer overrun with long datetime strings (CVE-2014-0063, bnc#864850) * Prevent buffer overrun due to integer overflow in size calculations (CVE-2014-0064, bnc#864851) * Prevent overruns of fixed-size buffers (CVE-2014-0065, bnc#864852) * Avoid crashing if crypt() returns NULL (CVE-2014-0066, bnc#864853) * Document risks of make check in the regression testing instructions (CVE-2014-0067) * Rework tuple freezing protocol. The logic for tuple freezing was unable to handle some cases involving freezing of multixact IDs, with the practical effect that shared row-level locks might be forgotten once old enough. Fixing this required changing the WAL record format for tuple freezing. While this is no issue for standalone servers, when using replication it means that STANDBY SERVERS MUST BE UPGRADED TO 9.3.3 OR LATER BEFORE THEIR MASTERS ARE. * For the other (many!) bug fixes, see the release notes: http://www.postgresql.org/docs/9.3/static/release-9-3-3.html - remove postgresql-tas-aarch64.patch: Fix build for aarch64 - Fix handling of alternatives in the file lists. - Update to version 9.3.2: * Fix VACUUM's tests to see whether it can update relfrozenxid * Fix multiple bugs in MultiXactId freezing * Fix initialization of pg_clog and og_subtrans during hot standby startup * Fix multiple bugs in update chain traversal * Fix dangling-pointer problem in fast-path locking * Fix assorted race conditions in timeout management * Prevent intra-transaction memory leak when printing range values * Truncate pg_multixact contents during WAL replay * Ensure an anti-wraparound VACUUM counts a page as scanned when it's only verified that no tuples need freezing * Fix full-table-vacuum request mechanism for MultiXactIds * Fix race condition in GIN index posting tree page deletion * Avoid flattening a subquery whose SELECT list contains a volatile function wrapped inside a sub-SELECT * See release notes for a full list of changes: http://www.postgresql.org/docs/9.3/static/release-9-3-2.html /usr/share/doc/packages/postgresql93/HISTORY - Added option to build postgresql-devel package separatly from postresql-libs - Update to version 9.3.1: * Update hstore extension with JSON functionality * Fix memory leak when creating range indexes * Serializable snapshot fixes * Fix libpq SSL deadlock bug * Fix timeline handling bugs in pg_receivexlog * Prevent CREATE FUNCTION from checking SET variables unless function body checking is enabled * Remove rare inaccurate warning during vacuum of index-less tables - Added patch to build testsuite package (bnc#829952) - Re-enable running the regression tests during build. - The test suite needs the timezone package. - Updated to version 9.3: * Add materialized views * Make simple views auto-updatable * Many JSON improvements, including the addition of operators and functions to extract values from JSON data strings * Implement SQL-standard LATERAL option for FROM-clause subqueries and function calls * Allow foreign data wrappers to support writes (insers/updates/deletes) on foreign tables * Add a Postgres foreign data wrapper contrib module * Add support for event triggers * Add optional ability to checksum data pages and report corruption * Allow a streaming replication standby to follow a timeline switch, and faster failover * Dramatically reduce System V shared memory requirements * Prevent non-key-field row updates from locking foreign key rows * Add command-line utility pg_isready * Add pg_xlogdump contrib program * See release notes for a full list of changes: http://www.postgresql.org/docs/9.3/static/release-9-3.html /usr/share/doc/packages/postgresql93/HISTORY - postgresql-tas-aarch64.patch: Implement TAS for aarch64 - Add Source URL, see https://en.opensuse.org/SourceUrls - Updated to version 9.2.4 (bnc#812525): * CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is eventually rejected. * CVE-2013-1900: Reset OpenSSL randomness state in each postmaster child process. This avoids a scenario wherein random numbers generated by "contrib/pgcrypto" functions might be relatively easy for another database user to guess. The risk is only significant when the postmaster is configured with ssl = on but most connections don't use SSL encryption. * CVE-2013-1901: Make REPLICATION privilege checks test current user not authenticated user. An unprivileged database user could exploit this mistake to call pg_start_backup() or pg_stop_backup(), thus possibly interfering with creation of routine backups. * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.2/static/release-9-2-4.html /usr/share/doc/packages/postgresql92/HISTORY - Version 9.2.3 also fixes bnc#802679, CVE-2013-0255. - Remove postgresql92-full.spec.in and use postgresql92.spec as the master for generating postgresql92-libs.spec. - Updated to version 9.2.3 * Prevent execution of enum_recv from SQL (Tom Lane) * Fix multiple problems in detection of when a consistent database state has been reached during WAL replay * Fix detection of end-of-backup point when no actual redo work is required * Update minimum recovery point when truncating a relation file * Fix recycling of WAL segments after changing recovery target timeline * Properly restore timeline history files from archive on cascading standby servers * Fix lock conflict detection on hot-standby servers * Fix missing cancellations in hot standby mode * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.2/static/release-9-2-3.html /usr/share/doc/packages/postgresql/HISTORY - Use PDX license string. - Conflicts tags don't support the != operator. - Updated to version 9.2.2 * Fix multiple bugs associated with CREATE/DROP INDEX CONCURRENTLY * Correct predicate locking for DROP INDEX CONCURRENTLY * Fix buffer locking during WAL replay * Fix an error in WAL generation logic for GIN indexes * Fix an error in WAL replay logic for SP-GiST indexes * Fix incorrect detection of end-of-base-backup location during WAL recovery * Properly remove startup process's virtual XID lock when promoting a hot standby server to normal running * Avoid bogus "out-of-sequence timeline ID" errors in standby mode * Prevent the postmaster from launching new child processes after it's received a shutdown signal * Fix the syslogger process to not fail when log_rotation_age exceeds 2^31 milliseconds * Fix WaitLatch() to return promptly when the requested timeout expires * Avoid corruption of internal hash tables when out of memory * Prevent file descriptors for dropped tables from being held open past transaction end * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.2/static/release-9-2-2.html /usr/share/doc/packages/postgresql/HISTORY - Change mechanism for making postgresql??-devel exclusive (bnc#789562). - Resolve "have choice for libpq.so.5" by ignoring postgresql-libs. - Get the new packaging scheme over to the postgresql92 packages and make 9.2 the new default version. - Bugfix release 9.1.6 (bnc#782251) to fix data corruption issues. * Users who upgrade from a previous 9.1 release should run REINDEX after applying this update. See also: http://wiki.postgresql.org/wiki/20120924updaterelease * For the full list of changes, see http://www.postgresql.org/docs/9.1/static/release.html - Change the base name of all PostgreSQL packages from postgresql to postgresql91 and adopt the new packaging schema, which allows the parallel installation of multiple PostgreSQL versions to simplify and speedup migration. - Move init script, sysconfig file and firewall configuration into a new package called postgresql-init which can work with different PostgreSQL versions. - Security and bugfix release 9.1.5: * Ignore SECURITY DEFINER and SET attributes for a procedural language's call handler (CVE-2012-2655) * Fix incorrect password transformation in "contrib/pgcrypto"'s DES crypt() function (CVE-2012-2143) * Prevent access to external files/URLs via "contrib/xml2"'s xslt_process() (CVE-2012-3488) * Prevent access to external files/URLs via XML entity references (CVE-2012-3489) * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.1/static/release.html /usr/share/doc/packages/postgresql/HISTORY - Security and bugfix release 9.1.3: * Require execute permission on the trigger function for "CREATE TRIGGER" (CVE-2012-0866, bnc#749299). * Remove arbitrary limitation on length of common name in SSL certificates (CVE-2012-0867, bnc#749301). * Convert newlines to spaces in names written in pg_dump comments (CVE-2012-0868, bnc#749303). * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.1/static/release.html /usr/share/doc/packages/postgresql/HISTORY - This also fixes bnc#701489. - New version 9.1.1. For detailed release notes, see: http://www.postgresql.org/docs/9.1/static/release-9-1-1.html - Stop using deprecated silent_mode in default config. - postgresql-perl514.patch is no longer needed. - Use %_smp_mflags for parallel make - Keep the rpath when linking plperl [bnc#578053]. - Add postgresql-devel to baselibs - Revert the postgresql-libs package split for SLE in preparation of submitting the package to SLE11-SP1. - Fix file name of last added patch and remove overlong comment. - Add postgresql-9.0.4-perl514.patch: For Perl 5.14 GvCV(sv) is no longer an lvalue and needs to be replaced by GvCV_set(sv, value) - Bugfix release: 9.0.4: * This update contains a critical fix to the pg_upgrade utility which prevents significant downtime issues. Do not use pg_upgrade without installing this update first. http://wiki.postgresql.org/wiki/20110408pg_upgrade_fix * change SQLSTATE for Hot Standby warnings * prevent bgwriter hang during recovery * prevent recursive composite type creation * disallow dropping tables whose triggers are still pending * allow use of "replication" as a user name * prevent a crash during GEQO planning * improve join plans for tables with missing statistics * fix error with SELECT FOR UPDATE in a subselect * close PL/python array slice memory leak * allow SSL connections for users with no home directory - http://www.postgresql.org/docs/9.0/static/release-9-0-4.html - enabled --with-ossp-uuid - Fix the fix of the fix for the successors of postgresql-libs. - provide postgresql-libs in the specfile that actually builds the libs package - fix update of libs - Move all of pgxs into the devel package to fix build of server extensions. - Move pg_config from -server to -devel to fix build of certain client apps and language bindings, but using pg_config on the client side is still considered broken, because it tells what got linked into the server binary not what got linked into libpq. - Remove unneeded PreReq from postgresql on postgresql-libs. - New version: 9.0.3. For the complete release notes, see http://www.postgresql.org/docs/9.0/static/release.html - Build libs and devel separate from the main package. - Build the PL subpackages as part of the main package. - Have separate packages for libpq and libecpg. - Generate the main and lib spec files from postgresql.spec.in. - Fix LSB conformance of the init script (bnc#658014). - Security and bugfix release 8.4.5 (bnc#643771): * Use a separate interpreter for each calling SQL userid in PL/Perl and PL/Tcl (CVE-2010-3433). * Prevent possible crashes in pg_get_expr() by disallowing it from being called with an argument that is not one of the system catalog columns it's intended to be used with. * Fix incorrect placement of placeholder evaluation. * Fix possible duplicate scans of UNION ALL member relations. * Fix "cannot handle unplanned sub-select" error. * Fix mishandling of whole-row Vars that reference a view or sub-select and appear within a nested sub-select. * Fix mishandling of cross-type IN comparisons. * Fix computation of ANALYZE statistics for tsvector columns. * Improve planner's estimate of memory used by array_agg(), string_agg(), and similar aggregate functions. * Fix failure to mark cached plans as transient. * Reduce PANIC to ERROR in some occasionally-reported btree failure cases, and provide additional detail in the resulting error messages. * Fix incorrect search logic for partial-match queries with GIN indexes. * Prevent show_session_authorization() from crashing within autovacuum processes. * Defend against functions returning setof record where not all the returned rows are actually of the same rowtype. * Fix possible corruption of pending trigger event lists during subtransaction rollback. * Fix possible failure when hashing a pass-by-reference function result. * Improve merge join's handling of NULLs in the join columns. * Take care to fsync the contents of lockfiles (both postmaster.pid and the socket lockfile) while writing them. * Avoid recursion while assigning XIDs to heavily-nested subtransactions. * Avoid holding open old WAL segments in the walwriter process. * Fix log_line_prefix's %i escape, which could produce junk early in backend startup. * Prevent misinterpretation of partially-specified relation options for TOAST tables. * Fix inheritance count tracking in ALTER TABLE ... ADD CONSTRAINT. * Fix possible data corruption in ALTER TABLE ... SET TABLESPACE when archiving is enabled. * Allow CREATE DATABASE and ALTER DATABASE ... SET TABLESPACE to be interrupted by query-cancel. * Improve CREATE INDEX's checking of whether proposed index expressions are immutable. * Fix REASSIGN OWNED to handle operator classes and families. * Fix possible core dump when comparing two empty tsquery values. * Fix LIKE's handling of patterns containing % followed by _ * Re-allow input of Julian dates prior to 0001-01-01 AD. * Fix PL/pgSQL to throw an error, not crash, if a cursor is closed within a FOR loop that is iterating over that cursor. * In PL/Python, defend against null pointer results from PyCObject_AsVoidPtr and PyCObject_FromVoidPtr * In libpq, fix full SSL certificate verification for the case where both host and hostaddr are specified. * Make psql recognize DISCARD ALL as a command that should not be encased in a transaction block in autocommit-off mode. * Fix some issues in pg_dump's handling of SQL/MED objects. * Improve pg_dump and pg_restore's handling of non-seekable archive files. This is important for proper functioning of parallel restore. * Improve parallel pg_restore's ability to cope with selective restore (-L option). * Fix ecpg to process data from RETURNING clauses correctly. * Fix some memory leaks in ecpg. * Improve contrib/dblink's handling of tables containing dropped columns. * Fix connection leak after "duplicate connection name" errors in contrib/dblink. * Fix contrib/dblink to handle connection names longer than 62 bytes correctly. * Add hstore(text, text) function to contrib/hstore. - Security and bugfix release 8.4.4: * Enforce restrictions in plperl using an opmask applied to the whole interpreter, instead of using Safe.pm. Recent developments have convinced us that Safe.pm is too insecure to rely on for making plperl trustable. This change removes use of Safe.pm altogether, in favor of using a separate interpreter with an opcode mask that is always applied. Pleasant side effects of the change include that it is now possible to use Perl's strict pragma in a natural way in plperl, and that Perl's $a and $b variables work as expected in sort routines, and that function compilation is significantly faster. (CVE-2010-1169) * Prevent PL/Tcl from executing untrustworthy code from pltcl_modules. PL/Tcl's feature for autoloading Tcl code from a database table could be exploited for trojan-horse attacks, because there was no restriction on who could create or insert into that table. This change disables the feature unless pltcl_modules is owned by a superuser. (However, the permissions on the table are not checked, so installations that really need a less-than-secure modules table can still grant suitable privileges to trusted non-superusers.) Also, prevent loading code into the unrestricted "normal" Tcl interpreter unless we are really going to execute a pltclu function. (CVE-2010-1170) * Fix data corruption during WAL replay of ALTER ... SET TABLESPACE. When archive_mode is on, ALTER ... SET TABLESPACE generates a WAL record whose replay logic was incorrect. It could write the data to the wrong place, leading to possibly-unrecoverable data corruption. Data corruption would be observed on standby slaves, and could occur on the master as well if a database crash and recovery occurred after committing the ALTER and before the next checkpoint. * Fix possible crash if a cache reset message is received during rebuild of a relcache entry. This error was introduced in 8.4.3 while fixing a related failure. * Apply per-function GUC settings while running the language validator for the function. * This avoids failures if the function's code is invalid without the setting; an example is that SQL functions may not parse if the search_path is not correct. * Do constraint exclusion for inherited UPDATE and DELETE target tables when constraint_exclusion = partition. Due to an oversight, this setting previously only caused constraint exclusion to be checked in SELECT commands. * Do not allow an unprivileged user to reset superuser-only parameter settings. Previously, if an unprivileged user ran ALTER USER ... RESET ALL for himself, or ALTER DATABASE ... RESET ALL for a database he owns, this would remove all special parameter settings for the user or database, even ones that are only supposed to be changeable by a superuser. Now, the ALTER will only remove the parameters that the user has permission to change. * Avoid possible crash during backend shutdown if shutdown occurs when a CONTEXT addition would be made to log entries. In some cases the context-printing function would fail because the current transaction had already been rolled back when it came time to print a log message. * Fix erroneous handling of %r parameter in recovery_end_command. The value always came out zero. * Ensure the archiver process responds to changes in archive_command as soon as possible. * Fix pl/pgsql's CASE statement to not fail when the case expression is a query that returns no rows. * Update pl/perl's ppport.h for modern Perl versions. * Fix assorted memory leaks in pl/python. * Handle empty-string connect parameters properly in ecpg. * Prevent infinite recursion in psql when expanding a variable that refers to itself. * Fix psql's \copy to not add spaces around a dot within \copy (select ...). Addition of spaces around the decimal point in a numeric literal would result in a syntax error. * Avoid formatting failure in psql when running in a locale context that doesn't match the client_encoding. * Fix unnecessary "GIN indexes do not support whole-index scans" errors for unsatisfiable queries using contrib/intarray operators. * Ensure that contrib/pgstattuple functions respond to cancel interrupts promptly. * Make server startup deal properly with the case that shmget() returns EINVAL for an existing shared memory segment. This behavior has been observed on BSD-derived kernels including OS X. It resulted in an entirely-misleading startup failure complaining that the shared memory request size was too large. - Use %configure to pick up the default directories (bnc#600616). - Security and bugfix release 8.4.3. - Disable GSSAPI, XML, kerberos and make check in OBS for SLES9. - Fix build for SLES9 - Fix package descriptions. - Security and bugfix release 8.4.2: * CVE-2009-4136: Protect against indirect security threats caused by index functions changing session-local state. This change prevents allegedly-immutable index functions from possibly subverting a superuser's session. * CVE-2009-4034: Reject SSL certificates containing an embedded null byte in the common name (CN) field. This prevents unintended matching of a certificate to a server or client name during SSL validation. * Fix hash index corruption. The 8.4 change that made hash indexes keep entries sorted by hash value failed to update the bucket splitting and compaction routines to preserve the ordering. So application of either of those operations could lead to permanent corruption of an index, in the sense that searches might fail to find entries that are present. To deal with this, it is recommended to REINDEX any hash indexes you may have after installing this update. * Fix possible crash during backend-startup-time cache initialization * Avoid crash on empty thesaurus dictionary * Prevent signals from interrupting VACUUM at unsafe times. This fix prevents a PANIC if a VACUUM FULL is cancelled after it's already committed its tuple movements, as well as transient errors if a plain VACUUM is interrupted after having truncated the table. * Fix possible crash due to integer overflow in hash table size calculation. This could occur with extremely large planner estimates for the size of a hashjoin's result. * Fix crash if a DROP is attempted on an internally-dependent object. * Fix very rare crash in inet/cidr comparisons. * Ensure that shared tuple-level locks held by prepared transactions are not ignored. * Fix premature drop of temporary files used for a cursor that is accessed within a subtransaction. * Fix memory leak in syslogger process when rotating to a new CSV logfile. * Fix memory leak in postmaster when re-parsing "pg_hba.conf". * Make FOR UPDATE/SHARE in the primary query not propagate into WITH queries. * Fix bug with a WITH RECURSIVE query immediately inside another one. * Fix concurrency bug in hash indexes. Concurrent insertions could cause index scans to transiently report wrong results. * Fix incorrect logic for GiST index page splits, when the split depends on a non-first column of the index. * Fix wrong search results for a multi-column GIN index with fastupdate enabled. * Fix bugs in WAL entry creation for GIN indexes. These bugs were masked when full_page_writes was on, but with it off a WAL replay failure was certain if a crash occurred before the next checkpoint. * Don't error out if recycling or removing an old WAL file fails at the end of checkpoint. It's better to treat the problem as non-fatal and allow the checkpoint to complete. Future checkpoints will retry the removal. Such problems are not expected in normal operation, but have been seen to be caused by misdesigned Windows anti-virus and backup software. * Ensure WAL files aren't repeatedly archived on Windows. This is another symptom that could happen if some other process interfered with deletion of a no-longer-needed file. * Fix PAM password processing to be more robust. The previous code is known to fail with the combination of the Linux pam_krb5 PAM module with Microsoft Active Directory as the domain controller. It might have problems elsewhere too, since it was making unjustified assumptions about what arguments the PAM stack would pass to it. * Raise the maximum authentication token (Kerberos ticket) size in GSSAPI and SSPI authentication methods. While the old 2000-byte limit was more than enough for Unix Kerberos implementations, tickets issued by Windows Domain Controllers can be much larger. * Ensure that domain constraints are enforced in constructs like ARRAY[...]::domain, where the domain is over an array type. * Fix foreign-key logic for some cases involving composite-type columns as foreign keys. * Ensure that a cursor's snapshot is not modified after it is created. This could lead to a cursor delivering wrong results if later operations in the same transaction modify the data the cursor is supposed to return. * Fix CREATE TABLE to properly merge default expressions coming from different inheritance parent tables. This used to work but was broken in 8.4. * Re-enable collection of access statistics for sequences. This used to work but was broken in 8.3. * Fix processing of ownership dependencies during CREATE OR REPLACE FUNCTION. * Fix incorrect handling of WHERE "x"="x" conditions. In some cases these could get ignored as redundant, but they aren't -- they're equivalent to "x" IS NOT NULL. * Fix incorrect plan construction when using hash aggregation to implement DISTINCT for textually identical volatile expressions. * Fix Assert failure for a volatile SELECT DISTINCT ON expression. * Fix ts_stat() to not fail on an empty tsvector value. * Make text search parser accept underscores in XML attributes. * Fix encoding handling in xml binary input. If the XML header doesn't specify an encoding, we now assume UTF-8 by default; the previous handling was inconsistent. * Fix bug with calling plperl from plperlu or vice versa. An error exit from the inner function could result in crashes due to failure to re-select the correct Perl interpreter for the outer function. * Fix session-lifespan memory leak when a PL/Perl function is redefined. * Ensure that Perl arrays are properly converted to PostgreSQL arrays when returned by a set-returning PL/Perl function. This worked correctly already for non-set-returning functions. * Fix rare crash in exception processing in PL/Python. * Fix ecpg problem with comments in DECLARE CURSOR statements. * Fix ecpg to not treat recently-added keywords as reserved words. This affected the keywords CALLED, CATALOG, DEFINER, ENUM, FOLLOWING, INVOKER, OPTIONS, PARTITION, PRECEDING, RANGE, SECURITY, SERVER, UNBOUNDED, and WRAPPER. * Re-allow regular expression special characters in psql's \df function name parameter. * In "contrib/pg_standby", disable triggering failover with a signal on Windows. This never did anything useful, because Windows doesn't have Unix-style signals, but recent changes made it actually crash. * Put FREEZE and VERBOSE options in the right order in the VACUUM command that "contrib/vacuumdb" produces. * Fix possible leak of connections when "contrib/dblink" encounters an error. * Ensure psql's flex module is compiled with the correct system header definitions. This fixes build failures on platforms where --enable-largefile causes incompatible changes in the generated code. * Make the postmaster ignore any application_name parameter in connection request packets, to improve compatibility with future libpq versions. * Update the timezone abbreviation files to match current reality This includes adding IDT to the default timezone abbreviation set. - package documentation as noarch - add baselibs.conf as a source - use find_lang to package language files correctly - Security and bugfix release 8.4.1: * Fix WAL page header initialization at the end of archive recovery. This could lead to failure to process the WAL in a subsequent archive recovery. * Fix "cannot make new WAL entries during recovery" error. * Fix problem that could make expired rows visible after a crash. This bug involved a page status bit potentially not being set correctly after a server crash. * Disallow RESET ROLE and RESET SESSION AUTHORIZATION inside security-definer functions. This covers a case that was missed in the previous patch that disallowed SET ROLE and SET SESSION AUTHORIZATION inside security-definer functions. (See CVE-2007-6600) * Make LOAD of an already-loaded loadable module into a no-op. * Formerly, LOAD would attempt to unload and re-load the module, but this is unsafe and not all that useful. * Make window function PARTITION BY and ORDER BY items always be interpreted as simple expressions. In 8.4.0 these lists were parsed following the rules used for top-level GROUP BY and ORDER BY lists. But this was not correct per the SQL standard, and it led to possible circularity. * Fix several errors in planning of semi-joins. These led to wrong query results in some cases where IN or EXISTS was used together with another join. * Fix handling of whole-row references to subqueries that are within an outer join. An example is SELECT COUNT(ss.*) FROM ... LEFT JOIN (SELECT ...) ss ON .... Here, ss.* would be treated as ROW(NULL,NULL,...) for null-extended join rows, which is not the same as a simple NULL. Now it is treated as a simple NULL. * Fix Windows shared-memory allocation code. This bug led to the often-reported "could not reattach to shared memory" error message. * Fix locale handling with plperl. This bug could cause the server's locale setting to change when a plperl function is called, leading to data corruption. * Fix handling of reloptions to ensure setting one option doesn't force default values for others. * Ensure that a "fast shutdown" request will forcibly terminate open sessions, even if a "smart shutdown" was already in progress. * Avoid memory leak for array_agg() in GROUP BY queries. * Treat to_char(..., 'TH') as an uppercase ordinal suffix with 'HH'/'HH12'. It was previously handled as 'th' (lowercase). * Include the fractional part in the result of EXTRACT(second) and EXTRACT(milliseconds) for time and time with time zone inputs. This has always worked for floating-point datetime configurations, but was broken in the integer datetime code. * Fix overflow for INTERVAL 'x ms' when x is more than 2 million and integer datetimes are in use. * Improve performance when processing toasted values in index scans. This is particularly useful for PostGIS. * Fix a typo that disabled commit_delay. * Output early-startup messages to postmaster.log if the server is started in silent mode. Previously such error messages were discarded, leading to difficulty in debugging. * Remove translated FAQs. They are now on the wiki. The main FAQ was moved to the wiki some time ago. * Fix pg_ctl to not go into an infinite loop if postgresql.conf is empty. * Fix several errors in pg_dump's --binary-upgrade mode. * pg_dump --binary-upgrade is used by pg_migrator. * Fix contrib/xml2's xslt_process() to properly handle the maximum number of parameters (twenty). * Improve robustness of libpq's code to recover from errors during COPY FROM STDIN. * Avoid including conflicting readline and editline header files when both libraries are installed. * Work around gcc bug that causes "floating-point exception" instead of "division by zero" on some platforms. - postgresql-8.4.0-sle10-timestamptz.patch added, and applied _only_ on SLE10. It fixes a build failure due to a test case that seems to be confused by daylight saving time in the time zone that the test expects its result (PDT vs. PST). Since this failure happened only on SLE10, I assume that the test case isn't broken, and some peculiarity on that (rather old now) platform is to blame (possibly too old timezone files). Also, the testcase is checking correctness when converting timezones > 32 bit, which actually seems to work. - replace "ident sameuser" with "ident" as auth method for the initdb call in the init script, because the former doesn't work with PostgreSQL 8.4. With the generated pg_hba.conf, PostgreSQL failed to start. Added note to the upgrade READMEs. [bnc#522375] - New major release: 8.4.0 - Improvements include: * Windowing Functions * Common Table Expressions and Recursive Queries * Default and variadic parameters for functions * Parallel Restore * Column Permissions * Per-database locale settings * Improved hash indexes * Improved join performance for EXISTS and NOT EXISTS queries * Easier-to-use Warm Standby * Automatic sizing of the Free Space Map * Visibility Map (greatly reduces vacuum overhead for slowly-changing tables) * Version-aware psql (backslash commands work against older servers) * Support SSL certificates for user authentication * Per-function runtime statistics * Easy editing of functions in psql * New contrib modules: pg_stat_statements, auto_explain, citext, btree_gin - Remove dependency on local posixrules from horology test. - Security release 8.3.7 * Fixes a vulnerability that allowed remote authenticated users to cause a denial of service (stack consumption) via mismatched encoding conversion requests. * Details of the other bugfixes contained in this and previous releases can be found here: http://www.postgresql.org/docs/8.3/static/release.html /usr/share/doc/packages/postgresql/HISTORY - Users of GiST indexes should "REINDEX" them after installing this update. - Re-added libpgport.a to the devel package, as some apps require it, although it is meant to be internal to the PostgreSQL backend. - Fix removal of leftover files on database startup (bnc#473644). ==== python-PyICU ==== Version update (1.9.2 -> 1.9.7) - Update to 1.9.7 * Remove dependency on deprecated and removed ICU LayoutEngine ==== python-ipaddress ==== Version update (1.0.16 -> 1.0.18) - Use pypi.io as Source url - update to 1.0.18 - add Provides for python2-ipaddress - Update to 1.0.17 ==== python-nose ==== - uninstall alternatives in %postun - use same script for %bindir/nosetests-*, to allow for the usage `%python_exec %{_bindir}/nosetests` - update for multipython build - drop unneeded nose-fix-skip-test-plugin.patch - use fdupes - disable functional_tests/test_coverage_plugin: fails consistently - Update license to "LGPL-2.1+" - Update to version 1.3.7: * Fix loading packages from capitalised package on Windows Patch by Thomas Kluyver - Aligned dependency requirements with PyPI - Dropped nose-drop-timing-dependent-tests.patch because the test is already excluded upstream - Update to version 1.3.6: * Re-release of 1.3.5 with wheels fixed. - Changes from version 1.3.5 * Fix #875: nose doesn't collect tests when subpackage is given as arg * Fix #809: tests not discovered for namespace packages on Windows * Fix #815: "ValueError: unsupported pickle protocol" with --with-id * Wrap the working dir path name in quotes when reporting an error. * Fix #887: Fix a discrepancy in test names between Python 2 and Python 3 * Fix #131: Use os.stat() to check if file is executable * Fix #820 and #719: Fix coverage plugin with multiprocess - Changes from version 1.3.4 * Recognize doctest options defined in other plugins * Another fix for Python 3.4: Call super in LazySuite to access _removed_tests variable * Fix for try_run when using bound methods - update to 1.3.3: - Fixed a minor issue with the reported version number. - update to 1.3.2: - Fixed an issue where build_ext was not working under setup.py nosetest - Fixed #786: generator method fails with callable instance - Fixed a traceback when using string exceptions - Fixed #792: "Not a directory" error when using python setup.py nosetests - Fixed #779: xunit report file is written in --where directory - Fixed #782: Test failures with Python >= 3.3 - Fixed #780: Fix a regression with Python 3 - Fixed #783: try_run is broken with Python 3.4 - Fixed an issue where build_ext was not working under setup.py nosetest - Fixed #786: generator method fails with callable instance - Fixed a traceback when using string exceptions - Fixed #792: "Not a directory" error when using python setup.py nosetests - Fixed #779: xunit report file is written in --where directory - Fixed #782: Test failures with Python >= 3.3 - Fixed #780: Fix a regression with Python 3 - Fixed #783: try_run is broken with Python 3.4 - Add nose-fix-skip-test-plugin.patch - Fix skip test plugin and revert upstream commit - update to 1.3.1: * very long list of bugfixes, see included CHANGELOG for details - Fix update-alternatives usage - Require setuptools instead of now obsolete distribute - Add nose-drop-timing-dependent-tests.patch: Drop several tests that depend on proper timing which creates random fails (includes last commit) - Drop functional_tests/test_multiprocessing/test_concurrent_shared.py, it randomly fails (due to timing checks) - Don't damage entry points - Fix update-alternatives and support upgrade from previous versions - Apply update-alternatives for binaries and man-pages - update to 1.3.0: * very long list of bugfixes, see included CHANGELOG for details - Add nose-1.2.1-plugin-failuredetail-no-tb.patch: Don't fail if traceback is missing - Update to version 1.2.1: + Correct nose.__version__ (#549). Thanks to Chris Withers for the bug report. - Changes from version 1.2.0: + Fixed issue where plugins included with `addplugins` keyword could be overridden by built-in plugins (or third-party plugins registered with setuptools) of the same name (#466). + Adds :option:`--cover-xml` and :option:`--cover-xml-file` (#311). + Adds support for :option:`--cover-branches` (related to #370). + Fixed Unicode issue on Python 3.1 with coverage (#442) + fixed class level fixture handling in multiprocessing plugin + Clue in the ``unittest`` module so it no longer prints traceback frames for our clones of their simple assertion helpers (#453). Patch by Erik Rose. + Stop using the ``assert`` statement in ``ok_`` and ``eq_`` so they work under ``python -O`` (#504). Patch by Erik Rose. + Add loglevel option to logcapture plugin (#493). + Add doctest options flag (#7 from google code tracker). + Add support for using 2to3 with the nosetests setuptools command. + Add --cover-min-percentage flag to force test runs without sufficient coverage to fail (#540). Patch by Domen Ko?ar. + Add travis-ci configuraion (#545). + Call reactor.stop from twisted thread (#301). - Changes from version 1.1.2: + Fixed regression where the .coverage file was not saved (#439). - Testsuite seems to work on SLE_11_SP2, reenable - Symlink nosetests.1 manpage to nosetests-%{py_ver}.1 - Added python 3 documentation package - Fix building python 3 package on openSUSE 11.4 - Add python 3 packages - Disable testsuite on openSUSE-11.4 and less to fix build - Move doc package into seperate spec to break build cycle between python-nose and python-Pygments (pulled in by python-Sphinx) - Simply macro usage - Run testsuite - Needs python-distribute at runtime - Upper-case %description - Disabled testsuite to fix build - Update to 1.1.2: * Fixed regression where the .coverage file was not saved (#439). * Fixed missing nose.sphinx module in source distribution (#436). - Spec file changes: * Depend on python-distribute instead of python-setuptools * Changed license to LGPL-2.0+ (SPDX style) * Properly build and install HTML documentation * Requires python-xml at runtime - update to 1.0.0: + Made nose compatible with python 3. * *Huge** thanks to Alex "foogod" Stewart! - update to 0.11.4 - Made nose compatible with Python 2.7. - Fixed default plugin manager's use of plugin overriding. Thanks to rob.daylife for the bug report and patch. (#323). - Changed plugin loading so that external plugins loaded via extension points can override builtin plugins with the same name. ... for more see CHANGELOG - update to 0.11.1 + Fixed bug in xunit plugin xml escaping. + Fixed bug in xunit plugin that could cause test run to crash after certain types of errors or actions by other plugins. + Fixed bug in testid plugin that could cause test run to crash after certain types of errors or actions by other plugins. + Fixed bug in collect only plugin that caused it to fail when collecting from test generators. + Fixed some broken html in docs. - update to 0.11.1 contains changes from 0.11: + Added multiprocess plugin that allows tests to be run in parallel across multiple processes. + Added logcapture plugin that captures logging messages and prints them with failing tests. + Added optional HTML coverage reports to coverage plugin. + Added plugin that enables collection of tests in all modules. + Added --failed option to testid plugin. When this option is in effect, if any tests failed in the previous test run (so long as testid was active for that test run) only the failed tests will run. + Made it possible to 'yield test' in addition to 'yield test,' from test generators. + Fixed bug that caused traceback inspector to fail when source code file could not be found. + Fixed some issues limiting compatibility with IronPython. + Added support for module and test case fixtures in doctest files. + Added --traverse-namespace commandline option that restores old default behavior of following all package __path__ entries when loading tests from packages. + Added --first-package-wins commandline option to better support testing parts of namespace packages. + Added versioned nosetests scripts (#123). + Fixed bug that would cause context teardown to fail to run in some cases. + Enabled doctest plugin to use variable other than "_" as the default result variable. + Fixed bug that would cause unicode output to crash output capture. + Added setUp and tearDown as valid names for module-level fixtures. + Fixed bug in list of valid names for package-level fixtures. + Updated man page generation using hacked up manpage writer from docutils sandbox. - fix some rpmlint warnings ==== python-vobject ==== Version update (0.9.2 -> 0.9.4.1) - Fix source validation - Update to 0.9.4.1 ==== release-notes-openSUSE ==== Version update (42.3.20170621 -> 42.3.20170704) - 42.3.20170704 - Updated translations - Shorewall package upgraded to 5.1.4.3 - perl-Mojolicious-Plugin-Bootstrap3 replaced by perl-Mojolicious-Plugin-AssetPack ==== vim ==== Subpackages: gvim vim-data - Add CVE-2017-6349.patch to fix a possible overflow bsc#1027057 - Add CVE-2017-6350.patch to fix a possible overflow bsc#1027053 - Add CVE-2017-5953.patch to fix possible overflow with corrupted spell file CVE-2017-5953 bsc#1024724 - Add vim-speedup-yaml.patch to speed up YAML syntax higlighting bsc#1018870 ==== virtualbox ==== Version update (5.1.18_k4.4.72_1 -> 5.1.22_k4.4.73_1) Subpackages: virtualbox-guest-kmp-default virtualbox-guest-tools virtualbox-guest-x11 - add %dir /usr/share/licenses to new vnc package - Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch". Changed the building of VBoxVNC to remove the hack used earlier. - Make a number of changes: * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort. One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work. * Improve startup of VirtualBox through use of systemd service files: a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging code changed; however, the openSUSE version did not implement the new method. That new code is now implemented. b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages and build the necessary modules. c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will be done at a later time. * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service". * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced. * Some typos in virtualbox.spec are fixed. - Add libelf-devel to build. Fixes bnc #1037511. Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added. - Version bump to 5.1.22 (released 2017-04-28 by Oracle) This is a maintenance release. The following items were fixed and/or added: VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663) VMM: fixed software virtualization on Solaris hosts (5.1.20 regression) Storage: fixed a potential hang under rare circumstances (bug #16677) Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots) Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693) Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670) - VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d. These should be converted to the service files native to systemd. This issue has been forced as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This change starts the conversion to native systemd files. The original scripts are still used; however, service files are used to start and stop the VB components. In a later change, all action will be accomplished using systemd service files. Two new files named "vboxdrv.service" and "vboxadd-service.service" are added. - Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587 CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513 Version bump to 5.1.20 (released 2017-04-18 by Oracle) This is a maintenance release. The following items were fixed and/or added: GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317) GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only) GUI: don't crash on restoring defaults in the appliance import dialog Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904) ICH9: fix for Windows guests with a huge amount (>64G) of guest memory BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen) ==== xfce4-session ==== Subpackages: libxfsm-4_6-0 xfce4-session-lang - Use update-alternatives to create default.desktop xsession (boo#1030873) ==== yast2-kdump ==== Version update (3.2.6 -> 3.2.7) - Crash in AutoYaST clone: Fix for "dup" while getting crash_xen_kernel_values and crash_kernel_values values. (bnc#1045965) - 3.2.7 ==== yast2-network ==== Version update (3.2.28 -> 3.2.29) - bsc#1044982 - handle bad pci class/subclass ids used by Mellanox ConnectX-3 - 3.2.29 ==== yast2-ntp-client ==== Version update (3.2.8 -> 3.2.9) - AutoYaST: Fixed crash in CFA when creating restrict record from scratch (bsc#1045777) - 3.2.9 ==== yast2-trans ==== Version update (84.87.20170618.0f9396fd -> 84.87.20170703.c20fb749) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-en_US yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20170703.c20fb749: * New POT for text domain 'control'. * New POT for text domain 'installation'. * New POT for text domain 'ntp-client'. * Translated using Weblate (Arabic) * Translated using Weblate (Catalan) * Translated using Weblate (Chinese (Taiwan)) * Translated using Weblate (Czech) * Translated using Weblate (Danish) * Translated using Weblate (Dutch) * Translated using Weblate (French) * Translated using Weblate (Galician) * Translated using Weblate (German) * Translated using Weblate (Indonesian) * Translated using Weblate (Italian) * Translated using Weblate (Japanese) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Slovak) * Translated using Weblate (Ukrainian) - Update to version 84.87.20170627.4e7fec5c: * New POT for text domain 'country'. * New POT for text domain 'kdump'. * New POT for text domain 'pkg-bindings'. * New POT for text domain 'qt-pkg'. * New POT for text domain 'registration'. * New POT for text domain 'storage'. * Translated using Weblate (Catalan) * Translated using Weblate (Chinese (Taiwan)) * Translated using Weblate (Danish) * Translated using Weblate (Dutch) * Translated using Weblate (German) * Translated using Weblate (Italian) * Translated using Weblate (Japanese) * Translated using Weblate (Lithuanian) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Slovak) * Translated using Weblate (Spanish) * Translated using Weblate (Ukrainian) - fix translation generator script to fail if po files have failing checks rather than silently continuing without translations (boo#1044028) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org