From f822e078499fae5b6a9311a53a54d4022b4f7ba5 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sun, 15 May 2022 09:06:53 +0200 Subject: [PATCH] package/postgresql: security bump version to 14.3 Release notes: https://www.postgresql.org/about/news/postgresql-143-137-1211-1116-and-1021-released-2449/ Fixes CVE-2022-1552: https://www.postgresql.org/support/security/CVE-2022-1552/ Removed patch which was committed upstream. Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard --- ...libpq-Fix-pkg-config-without-OpenSSL.patch | 34 ------------------- package/postgresql/postgresql.hash | 4 +-- package/postgresql/postgresql.mk | 2 +- 3 files changed, 3 insertions(+), 37 deletions(-) delete mode 100644 package/postgresql/0001-libpq-Fix-pkg-config-without-OpenSSL.patch diff --git a/package/postgresql/0001-libpq-Fix-pkg-config-without-OpenSSL.patch b/package/postgresql/0001-libpq-Fix-pkg-config-without-OpenSSL.patch deleted file mode 100644 index 90b0577a20..0000000000 --- a/package/postgresql/0001-libpq-Fix-pkg-config-without-OpenSSL.patch +++ /dev/null @@ -1,34 +0,0 @@ -From 465ab24296c27502c81c8c197725cba728b9b057 Mon Sep 17 00:00:00 2001 -From: Peter Eisentraut -Date: Fri, 1 Apr 2022 17:12:56 +0200 -Subject: [PATCH] libpq: Fix pkg-config without OpenSSL - -Do not add OpenSSL dependencies to libpq pkg-config file if OpenSSL is -not enabled. Oversight in beff361bc1edc24ee5f8b2073a1e5e4c92ea66eb. - -Author: Fabrice Fontaine -Discussion: https://www.postgresql.org/message-id/flat/20220331163759.32665-1-fontaine.fabrice%40gmail.com -[Retrieved from: -https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=465ab24296c27502c81c8c197725cba728b9b057] -Signed-off-by: Fabrice Fontaine ---- - src/interfaces/libpq/Makefile | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/src/interfaces/libpq/Makefile b/src/interfaces/libpq/Makefile -index 89bf5e0126..b5fd72a4ac 100644 ---- a/src/interfaces/libpq/Makefile -+++ b/src/interfaces/libpq/Makefile -@@ -95,7 +95,9 @@ SHLIB_PREREQS = submake-libpgport - - SHLIB_EXPORTS = exports.txt - -+ifeq ($(with_ssl),openssl) - PKG_CONFIG_REQUIRES_PRIVATE = libssl libcrypto -+endif - - all: all-lib libpq-refs-stamp - --- -2.30.2 - diff --git a/package/postgresql/postgresql.hash b/package/postgresql/postgresql.hash index 2ba3b07563..8ebe7b58fa 100644 --- a/package/postgresql/postgresql.hash +++ b/package/postgresql/postgresql.hash @@ -1,5 +1,5 @@ -# From https://ftp.postgresql.org/pub/source/v14.2/postgresql-14.2.tar.bz2.sha256 -sha256 2cf78b2e468912f8101d695db5340cf313c2e9f68a612fb71427524e8c9a977a postgresql-14.2.tar.bz2 +# From https://ftp.postgresql.org/pub/source/v14.3/postgresql-14.3.tar.bz2.sha256 +sha256 279057368bf59a919c05ada8f95c5e04abb43e74b9a2a69c3d46a20e07a9af38 postgresql-14.3.tar.bz2 # License file, Locally calculated sha256 f6d6616acdb598742e2a7c64fa0551c1c72c309d279fd2d90370e5fdd41c8945 COPYRIGHT diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk index 1dfb20b58d..45049f669d 100644 --- a/package/postgresql/postgresql.mk +++ b/package/postgresql/postgresql.mk @@ -4,7 +4,7 @@ # ################################################################################ -POSTGRESQL_VERSION = 14.2 +POSTGRESQL_VERSION = 14.3 POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2 POSTGRESQL_SITE = https://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION) POSTGRESQL_LICENSE = PostgreSQL