Path to this page:
Subject: CVS commit: pkgsrc/databases
From: Adam Ciarcinski
Date: 2025-02-16 10:03:16
Message id: 20250216090317.35771FBE0@cvs.NetBSD.org
Log Message:
postgresql: updated to 17.3, 16.7, 15.11, 14.16, 13.19
PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19
Security Issues
CVE-2025-1094: PostgreSQL quoting APIs miss neutralizing quoting syntax in text \
that fails encoding validation
Bug Fixes and Improvements
This update fixes over 70 bugs that were reported in the last several months. \
The issues listed below affect PostgreSQL 17. Some of these issues may also \
affect other supported versions of PostgreSQL.
Restore pre-v17 truncation behavior for >63-byte database names and usernames \
in connection requests.
Don't perform connection privilege checks and limits on parallel workers, and \
instead inherit these from the leader process.
Remove Lock suffix from LWLock wait event names.
Fix possible re-use of stale results in window aggregates, which could lead to \
incorrect results.
Several race condition fixes for vacuum that in the worst case could cause \
corruption to a system catalog.
Several fixes for truncating tables and indexes that prevent potential corruption.
Fix for detaching a partition where its own foreign-key constraint references a \
partitioned table.
Fix for the FFn (e.g., FF1) format codes for to_timestamp, where an integer \
format code before the FFn would consume all available digits.
Fixes for SQL/JSON and XMLTABLE() to double-quote specific entries when necessary.
Include the ldapscheme option in pg_hba_file_rules().
Several fixes for UNION, including not merging columns with non-compatible \
collations.
Several fixes that could impact availability or speed of starting a connection \
to PostgreSQL.
Fix multiple memory leaks in logical decoding output.
Fix several memory leaks in PL/Python.
Add psql tab completion for COPY (MERGE INTO).
Make pg_controldata more resilient when displaying info from corruptedpg_control \
files.
Fix for a memory leak in pg_restore with zstd-compressed data.
Fix pg_basebackup to correctly handle pg_wal.tar files exceeding 2GB on Windows.
Modify earthdistance to use SQL-standard function bodies, which fixes possible \
issues with major version upgrades to v17 when databases use this extension.
Fix crash in pageinspect in instances where the brin_page_items() function \
definition is not updated to the latest version.
Fix race condition when trying to cancel a postgres_fdw remote query.
Files: