This got released by upstream now, so I'm marking the bug public.
I checked if our pre-generated release links work and they do, so no changelog changes necessary.
Upstream lists two more CVEs at [1], but those are for other installers - no need to modify our prepared packages.
We compared the released with the pre-tarballs that we tested and they are identical [2] (thanks Andreas for checking)
This got released by upstream now, so I'm marking the bug public.
I checked if our pre-generated release links work and they do, so no changelog changes necessary.
Upstream lists two more CVEs at [1], but those are for other installers - no need to modify our prepared packages.
We compared the released with the pre-tarballs that we tested and they are identical [2] (thanks Andreas for checking)
Due to that I'd ask to release the builds in [3]
Assigning to Marc to consider that.
[1]: https:/ /www.postgresql .org/about/ news/1939/ /pastebin. ubuntu. com/p/HYVBM46zX 6/ /launchpad. net/~ci- train-ppa- service/ +archive/ ubuntu/ 3721
[2]: https:/
[3]: https:/