Ubuntu
postgresql-11 package

~paelzer/ubuntu/+source/postgresql-11:MRE-eoan-11.7

  1. Git
  2. lp:~paelzer/ubuntu/+source/postgresql-11
  3. MRE-eoan-11.7
Last commit made on 2020-02-17
Get this branch:
git clone -b MRE-eoan-11.7 https://git.launchpad.net/~paelzer/ubuntu/+source/postgresql-11
Only Christian Ehrhardt  can upload to this branch. If you are Christian Ehrhardt  please log in for upload directions.

Branch merges

Branch information

Name:
MRE-eoan-11.7
Repository:
lp:~paelzer/ubuntu/+source/postgresql-11

Recent commits

8dbbee9... by Christian Ehrhardt 

changelog: improve wording

Signed-off-by: Christian Ehrhardt <email address hidden>

599de59... by Christian Ehrhardt 

Merge changelog for 11.7

Signed-off-by: Christian Ehrhardt <email address hidden>

745f454... by Christian Ehrhardt 

update-maintainer

Signed-off-by: Christian Ehrhardt <email address hidden>

82e31ee... by Christian Ehrhardt 

New Upstream release 11.7

Signed-off-by: Christian Ehrhardt <email address hidden>

3db4c67... by Christoph Berg

Import patches-unapplied version 11.5-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 6f196f29a26483fa6410e692ea1b950e8dd2877d

New changelog entries:
  * New upstream version.
    + Fixes regression in ALTER TABLE on multiple columns. (Closes: #932247)
    + No longer picks "UCT" as timezone spelling. (Closes: #929953)
    + Require schema qualification to cast to a temporary type when using
      functional cast syntax (Noah Misch)
      We have long required invocations of temporary functions to explicitly
      specify the temporary schema, that is pg_temp.func_name(args). Require
      this as well for casting to temporary types using functional notation,
      for example pg_temp.type_name(arg). Otherwise it's possible to capture a
      function call using a temporary object, allowing privilege escalation in
      much the same ways that we blocked in CVE-2007-2138. (CVE-2019-10208)
    + Fix execution of hashed subplans that require cross-type comparison
      (Tom Lane, Andreas Seltenreich)
      Hashed subplans used the outer query's original comparison operator to
      compare entries of the hash table. This is the wrong thing if that
      operator is cross-type, since all the hash table entries will be of the
      subquery's output type. For the set of hashable cross-type operators in
      core PostgreSQL, this mistake seems nearly harmless on 64-bit machines,
      but it can result in crashes or perhaps unauthorized disclosure of
      server memory on 32-bit machines. Extensions might provide hashable
      cross-type operators that create larger risks. (CVE-2019-10209)
  * debian/pycompat: Obsolete, remove.
  * debian/patches: Add missing patch documentation.
  * debian/rules: Use /usr/share/dpkg/pkg-info.mk and vendor.mk for
    --with-extra-version.
  * debian/*.symbols: Add Build-Depends-Package information.
  * debian/tests: Also run regression tests.
  * debian/tests/control: Add fakeroot to dependencies.

6f196f2... by Christoph Berg

Import patches-unapplied version 11.4-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: e7c1be76af6bbebc4b4cfabe6fbca396edacaaaf

New changelog entries:
  * New upstream version.
    + Fix buffer-overflow hazards in SCRAM verifier parsing
      (Jonathan Katz, Heikki Linnakangas, Michael Paquier)
      Any authenticated user could cause a stack-based buffer overflow by
      changing their own password to a purpose-crafted value. In addition to
      the ability to crash the PostgreSQL server, this could suffice for
      executing arbitrary code as the PostgreSQL operating system account.
      A similar overflow hazard existed in libpq, which could allow a rogue
      server to crash a client or perhaps execute arbitrary code as the
      client's operating system account.
      The PostgreSQL Project thanks Alexander Lakhin for reporting this
      problem. (CVE-2019-10164)

e7c1be7... by Christoph Berg

Import patches-unapplied version 11.3-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 8ee4fda078e67513f649aed4d1e5f7ef4c7e55a2

New changelog entries:
  * New upstream version.
    + Prevent row-level security policies from being bypassed via selectivity
      estimators (Dean Rasheed)
      Some of the planner's selectivity estimators apply user-defined
      operators to values found in pg_statistic (e.g., most-common values).
      A leaky operator therefore can disclose some of the entries in a data
      column, even if the calling user lacks permission to read that column.
      In CVE-2017-7484 we added restrictions to forestall that, but we failed
      to consider the effects of row-level security. A user who has SQL
      permission to read a column, but who is forbidden to see certain rows
      due to RLS policy, might still learn something about those rows'
      contents via a leaky operator. This patch further tightens the rules,
      allowing leaky operators to be applied to statistics data only when
      there is no relevant RLS policy. (CVE-2019-10130)
    + Avoid access to already-freed memory during partition routing error
      reports (Michael Paquier)
      This mistake could lead to a crash, and in principle it might be
      possible to use it to disclose server memory contents. (CVE-2019-10129)

8ee4fda... by Christoph Berg

Import patches-unapplied version 11.2-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: f062e1cf8bb0d1ebda7d0468d50b28e50495ef07

New changelog entries:
  * Allow overriding the startup command suggested by initdb.
    (See: #872660)

f062e1c... by Christoph Berg <email address hidden>

Import patches-unapplied version 11.2-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 4a96c9159d882fb02898a5957c73eaf99640d3fd

New changelog entries:
  * New upstream version.
  * Add Breaks on modules needing recompilation against heap_getattr().
  * Debconf translations:
    + ru by Lev Lamberov. (Closes: #920893)
    + nl by Frans Spiesschaert. (Closes: #921090)
    + fr by Jean-Pierre Giraud. (Closes: #920499)
    + pt_BR by Adriano Rafael Gomes. (Closes: #920541)
  * Update PostgreSQL Maintainers address.
  * Debconf translations:
    + pt by Américo Monteiro. (Closes: #919338)
    + de by Helge Kreutzmann. (Closes: #919770)
  * Document src/backend/snowball/libstemmer origin and licensing.
    (Closes: #626732)

4a96c91... by Christoph Berg <email address hidden>

Import patches-unapplied version 11.1-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 211d95afc0e5d4ba173cad0a492b4393355fb16a

New changelog entries:
  * Drop explicit xz compression for .debs.
  * Depend on locales | locales-all. Suggested by Elrond, thanks!
    (Closes: #916655)
  * Build-Depend on tcl-dev instead of on a specific version.
  * initdb doesn't like LANG and LC_ALL to contradict, unset LANG and
    LC_CTYPE at test time. (Closes: #917764)
  * On purge, ask the user if they want to remove clusters. (Closes: #911940)