Subject: CVS commit: pkgsrc/databases
From: Adam Ciarcinski
Date: 2025-02-16 10:03:16
Message id: 20250216090317.35771FBE0@cvs.NetBSD.org

Log Message:
postgresql: updated to 17.3, 16.7, 15.11, 14.16, 13.19

PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19

Security Issues

CVE-2025-1094: PostgreSQL quoting APIs miss neutralizing quoting syntax in text \ 
that fails encoding validation

Bug Fixes and Improvements

This update fixes over 70 bugs that were reported in the last several months. \ 
The issues listed below affect PostgreSQL 17. Some of these issues may also \ 
affect other supported versions of PostgreSQL.

Restore pre-v17 truncation behavior for >63-byte database names and usernames \ 
in connection requests.
Don't perform connection privilege checks and limits on parallel workers, and \ 
instead inherit these from the leader process.
Remove Lock suffix from LWLock wait event names.
Fix possible re-use of stale results in window aggregates, which could lead to \ 
incorrect results.
Several race condition fixes for vacuum that in the worst case could cause \ 
corruption to a system catalog.
Several fixes for truncating tables and indexes that prevent potential corruption.
Fix for detaching a partition where its own foreign-key constraint references a \ 
partitioned table.
Fix for the FFn (e.g., FF1) format codes for to_timestamp, where an integer \ 
format code before the FFn would consume all available digits.
Fixes for SQL/JSON and XMLTABLE() to double-quote specific entries when necessary.
Include the ldapscheme option in pg_hba_file_rules().
Several fixes for UNION, including not merging columns with non-compatible \ 
collations.
Several fixes that could impact availability or speed of starting a connection \ 
to PostgreSQL.
Fix multiple memory leaks in logical decoding output.
Fix several memory leaks in PL/Python.
Add psql tab completion for COPY (MERGE INTO).
Make pg_controldata more resilient when displaying info from corruptedpg_control \ 
files.
Fix for a memory leak in pg_restore with zstd-compressed data.
Fix pg_basebackup to correctly handle pg_wal.tar files exceeding 2GB on Windows.
Modify earthdistance to use SQL-standard function bodies, which fixes possible \ 
issues with major version upgrades to v17 when databases use this extension.
Fix crash in pageinspect in instances where the brin_page_items() function \ 
definition is not updated to the latest version.
Fix race condition when trying to cancel a postgres_fdw remote query.

Files:
RevisionActionfile
1.27modifypkgsrc/databases/postgresql13/Makefile.common
1.26modifypkgsrc/databases/postgresql13/distinfo
1.20modifypkgsrc/databases/postgresql13-docs/PLIST
1.19modifypkgsrc/databases/postgresql14/Makefile.common
1.19modifypkgsrc/databases/postgresql14/distinfo
1.17modifypkgsrc/databases/postgresql14-docs/PLIST
1.13modifypkgsrc/databases/postgresql15/Makefile.common
1.12modifypkgsrc/databases/postgresql15/distinfo
1.12modifypkgsrc/databases/postgresql15-docs/PLIST
1.10modifypkgsrc/databases/postgresql16/Makefile.common
1.9modifypkgsrc/databases/postgresql16/distinfo
1.2modifypkgsrc/databases/postgresql16-contrib/PLIST
1.8modifypkgsrc/databases/postgresql16-docs/PLIST
1.4modifypkgsrc/databases/postgresql17/Makefile.common
1.4modifypkgsrc/databases/postgresql17/distinfo
1.3modifypkgsrc/databases/postgresql17-client/PLIST
1.2modifypkgsrc/databases/postgresql17-contrib/PLIST
1.4modifypkgsrc/databases/postgresql17-docs/PLIST
1.2modifypkgsrc/databases/postgresql17-server/PLIST