<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="135">
<package pkgid="5e1facde12e9a0e532a8c0abf28fd7c53c42ff936ba5afad5a4c92ac300d5d885a8ca127467e69ae51f9fbb460b8a46e3a8874c6b12242eba4adcc1935eef3dd" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="e8286365481927532c847cab71f085f82c99a807025e66ce1e0edff2fe2bd2c1f82e66f0c77b4ee82974bc3c560495b0898c55add4dc07b3bcb746200530723d" name="libpq5" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="5a84549a305990d0194143075cf1d85e1484356ff087c21db23e918440b6968fd7a10f2c01ecd014376bab7bde5d9681435fd2f6a3dfcf143791cc04dc810f99" name="postgresql" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="1a1fdfd4357f0b74ae03eb12086a9946bde800c0f7b3c26c10f738dfea03f86f8458575d311d38c471e9f2e20d3d22a17287342a47e43ec7f66d3cc0d02a504d" name="postgresql" arch="src">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="60684c71c1667f723d5f9a51cd35166a432c93c52af67dfad26bbc0aac6b4b1aa3de2d9f02f80d8ad1f2c95bffa43d8fb2a09560122a622f37c5b35cdcef0aa6" name="postgresql-contrib" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="d049da5370df192e14f5dbe66324abfdfc24156e0a4ce6e954fe25c529607656758550beafe89c00ec8f2c538e03d553d54bb32c733173deca429facf18fc733" name="postgresql-devel" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="0ad8bb0860929391af88f539ff676176d1741357750d099ca3f740f2285232c55ed7798ebe388edcae87a58b91e40a3654844eb9d203168afb01906e3bd39a04" name="postgresql-docs" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="86687f6bd103cacb661609b6dfa4422743e6d906e0976810139d7aea931ed6d34022fed449a575d2515f6367ce8bc5b1421489899c04d5b513ca9be6fd023363" name="postgresql-llvmjit" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="05d8768ccd15a06006afdeda9b9a4c4318c79e74b41e64747e203726884ad913fffca783abcb4c054ac52e1bd13971182d315328b349ad43c0a838a64ab2216b" name="postgresql-llvmjit-devel" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="aadc39df56bd7e2bdabfc403128b8e045ec522b8d611c6ce6d1c264d46e71dee51bc89cdcd640c03ed7ea8a6a9f5bc5fdde8760b983a6c048ad0b7e2588ac944" name="postgresql-plperl" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="15477596100ea7e43a8c7dd81099f5ae9db810d1ed1b4631391886fb2b72e919cc175b0c246b3ff9b7b4c1b2a283ae0f6445ff825f4e011a8e858a54994dbde6" name="postgresql-plpython" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="c3edcf4a324d82ab3fb7cce74816d22f61eb77329a6f4b6339e630b29ffdb262b404611269568403e5cec912860db8cb1d4b41fdcea3571e026ba1c3c30bd6a3" name="postgresql-pltcl" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="d5ea92dfeae54251b52dbc89a0eae1153ba69071957c22f7835ed8389c41a12c89cfc923f13a53d8954bf2c3bed63ec855ef5402b90aa6d5f33a57fa613e5f88" name="postgresql-server" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="1f75984322b0992cb1d8e296e0d47dcea571d07383058e84e94915fe2450b3885d77e34c97ffccf6ee075918a0efc21bdb1c2f9b023d01183e5650de608b7202" name="postgresql-server-devel" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="eda309dd2d9c8b59dbf8034cf12101d7f4e2c35e05b5c0a58305c1882a306616b2ef8c563fe8c54004e6fc1f80fd1840d6c51a88231e9775a073c3632184b2f8" name="postgresql-test" arch="noarch">
  <version epoch="0" ver="19" rel="160099.25.8"/>
  <changelog author="mrueckert@suse.de" date="1653134400">- Bump to postgresql 15</changelog>
  <changelog author="dmueller@suse.com" date="1662379200">- avoid bashisms in /bin/sh based startup script</changelog>
  <changelog author="schwab@suse.de" date="1663848000">- riscv64 does not have llvm support yet,
  adapt the %postgresql_has_llvm macro accordingly.</changelog>
  <changelog author="max@suse.com" date="1673265600">- bsc#1206796: Refine the distinction of where to use sysusers and
  use bcond to have the expression only in one place.</changelog>
  <changelog author="max@suse.com" date="1679918400">- bsc#1209208: Drop hard dependency on systemd</changelog>
  <changelog author="max@suse.com" date="1684152000">- Overhaul postgresql-README.SUSE and move it from the binary
  package to the noarch wrapper package.
- bsc#1179231: Add an explanation for the /tmp -&gt; /run/postgresql
  move and permission change.
- Add postgresql-README as a separate source file.</changelog>
  <changelog author="max@suse.com" date="1684843200">- boo#1122892: Add a sysconfig variable for initdb.</changelog>
  <changelog author="max@suse.com" date="1691409600">- Bump major version to prepare for PostgreSQL 16, but keep
  default at 15 for now on Factory.</changelog>
  <changelog author="max@suse.com" date="1694692800">- Bump default to 16 on Factory.</changelog>
  <changelog author="max@suse.com" date="1697198400">- Interlock version and release of all noarch packages except for
  the postgresql-docs.</changelog>
  <changelog author="max@suse.com" date="1707393600">- bsc#1219340: Require fillup.</changelog>
  <changelog author="max@suse.com" date="1709035200">- bsc#1219340: The last fix was not correct. Improve it by removing
  the dependency again and call fillup only if it is installed.</changelog>
  <changelog author="max@suse.com" date="1726142400">- bsc#1230423: Relax the dependency of extensions on the server
  version from exact major.minor to greater or equal, after Tom
  Lane confirmed on the PostgreSQL packagers list that ABI
  stability is being taken care of between minor releases.</changelog>
  <changelog author="max@suse.com" date="1726747200">- Bump major and default to 17 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Bump major to 17 for SLE.</changelog>
  <changelog author="max@suse.com" date="1733918400">- Bump default to 17 for SLE-15-SP7.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792000">- Bump major and default to 18 for Factory and TW.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Bump major to 18 on SLE.</changelog>
  <changelog author="max@suse.com" date="1775822400">- Get rid of update-alternatives and support immutable mode.
  See README.SUSE for details. (bsc#1245862, jsc#PED-14820)
- Merge the spec files from different products and use the product
  versions to decide about the default PostgreSQL version.</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Bump major to 19</changelog>
</package>
<package pkgid="6fb194a2a5834e7567ce381240681e8c1dcc7a786c6cf4334cd6dd43953092d9a7c7bcde4dc1e862c5c1ade6bbde3ed586a48572256c2a4176f8e0b8cf3a54c9" name="postgresql14" arch="src">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="3c926e1a69bab46b46c90a23e422053c907cfea2ea18c8b4d9e5536e9f33a90d1d112b91e072c3562a7f32bf40cf85e2ff48ea1ead55853f6709184fb7574bc8" name="postgresql14" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="97208aa6c02f45dfc63c7e73414e4cca1174feccaf0ce20315ffe507b6d7fa33600214fb9b2d02da15489f1599690d72ea83630a4b9d341358a1cd91e642811a" name="postgresql14-contrib" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="b77115130af90d41a53f2639554509e72eec8acad2f1f627796ded6ae61da56d012e255ceee9ed7c0f267301465c51bbbbb34a8e6c46ec226144137890f38bd0" name="postgresql14-devel" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="e0a4ca87862885115ebd9306aca1251c55a88b78881a804f05ec666f12830d8ff5325a2f067c71c975bd2e397b18e26441657352a5c93cb88868587b9c4496be" name="postgresql14-docs" arch="noarch">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="f7c5081dab8491c73ca721f8443c20c6cbde47cab7f350d480d4f8b4038dd93ca60fd083eab3580e921845eb31e8f4fd9ac241b2ec462f11b5d98e55197e71d0" name="postgresql14-hypopg" arch="src">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="ef1cc7b86fff575c196f4823d78848813871d559b7842a7db5c75f02b6858c6809888af701a5d6a147467c9827f0b0c0f531a5ff4cb384554bbf699a2577c8b7" name="postgresql14-hypopg" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="ae1b6c37e00d5965fbd7576b59008e6746cc7817852f75e97e099f0018e74acd15bea9a398bf19fa514d212ddb8e4db76fc55dc5a3c94679dc306eb351cd5cf8" name="postgresql14-llvmjit" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="33a4cf55b10c7eec2f772731166fb317a81333bd1a9e2da5060d031c77ca1d241cb694e2446dd71f67a2c495d1015adc9f079283dfee1959a1a52d3399e18f91" name="postgresql14-llvmjit-devel" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="29f8004f9b4439875b24fa218e467470b1ead5a7755ed8dc035969f66742dbd17cf9e873a04e057a82c78bc7fd0196dd7d3bfd7a2f9b9aea7a51ec26a0d6d7c0" name="postgresql14-pg_qualstats" arch="src">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="e551cc9c62f09a08a8a1cfbf0a64ff19fc65ab26ec14459db0d9f00b027ec218ed57f9412908b22ce75d0e8da237b55b71a13e1e6f7fc9978d7384c301d6cc02" name="postgresql14-pg_qualstats" arch="x86_64">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="ceea39d0b0177b9921023864e6f7ac70c0b2d79383dd75eea64254c4fc92e76b1bdb0d1a6cc515922bb915ab0cc9e44393346ee0341e1c54a5f9baf816f0bda8" name="postgresql14-pgaudit" arch="src">
  <version epoch="0" ver="1.6.3" rel="160099.58.1"/>
  <changelog author="pgajdos@suse.com" date="1603281600">- do not build favours that would be unresolved in standard repos</changelog>
  <changelog author="pgajdos@suse.com" date="1604404800">- revert last change, keep flavours unresolved</changelog>
  <changelog author="pgajdos@suse.com" date="1604491200">- try to make factory bot happy</changelog>
  <changelog author="dimstar@opensuse.org" date="1625054400">- Do no longer build postgresql95 and postgresql96 flavors on
  Tumbleweed.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- Update versions (1.2.3, 1.3.3, 1.4.2, 1.5.1)
  - Guard against search-path based attacks.
  - Add security definer and search_path to event trigger functions.
- Add 1.6.1 for postgresql 14
  - 1.6.0: https://github.com/pgaudit/pgaudit/releases/tag/1.6.0
  - 1.6.1: https://github.com/pgaudit/pgaudit/releases/tag/1.6.1
- port to postgresql macros
- drop support for pg &lt; 10</changelog>
  <changelog author="mrueckert@suse.de" date="1636891201">- remove some unneeded pg_name conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- version update to 1.2.4, 1.3.4, 1.4.3, 1.5.2, 1.6.2
  * Bug Fix: Skip logging script statements for create/alter extension.
- added sources
  + get-tars</changelog>
  <changelog author="dimstar@opensuse.org" date="1663848000">- Hack up spec file a bit to get over source_validator, we rely on
  + name_pg uses --keep-name-conditionals (argument of spec_query)
  + but wre also need pg_name defined for the pg_* macros, as they
    refer to it. So we define both, and use name_pg for the
    conditions.</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- added 1.7.0 to enable pg 15</changelog>
  <changelog author="max@suse.com" date="1681905600">- PostgreSQL 10 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1694001600">- Added version 16 for postgresql 16
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1715947200">- PostgreSQL 11 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Added version 17 for postgresql 17
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1739534400">- Stop building for EOL postgresql12.</changelog>
  <changelog author="max@suse.com" date="1751976000">- Update to 17.1, 16.1, 1.7.1, 1.6.3, 1.5.3:
  * Fix issues that could cause 'pgaudit stack is not empty' errors.</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- Add support for pg 18 by adding the 18.0 version
  - bug fixes:
  - Error when required hooks are skipped.
  - Improvements:
  - SELECT FOR UPDATE object logging improvement.
  - Disable logging in parallel workers.
  - Use strpbrk() instead of strstr() where applicable.
  - Fix search_path for trigger functions.
  - Minor code optimizations.
  - Features:
  - PostgreSQL 18 support.</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13 and drop pgaudit-1.5.3.tar.gz.</changelog>
  <changelog author="mrueckert@suse.de" date="1782388800">- Add pg19 support:
  https://github.com/pgaudit/pgaudit/releases/tag/19beta1</changelog>
</package>
<package pkgid="67311b176b66f606591c9a905c5dc24ceeb6177b0940800930805ce6671a4ec95511a8939e3edb51ecd7d0a959c2db056a913d275488e2a8290a9f1f94457e5f" name="postgresql14-pgaudit" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="160099.58.1"/>
  <changelog author="pgajdos@suse.com" date="1603281600">- do not build favours that would be unresolved in standard repos</changelog>
  <changelog author="pgajdos@suse.com" date="1604404800">- revert last change, keep flavours unresolved</changelog>
  <changelog author="pgajdos@suse.com" date="1604491200">- try to make factory bot happy</changelog>
  <changelog author="dimstar@opensuse.org" date="1625054400">- Do no longer build postgresql95 and postgresql96 flavors on
  Tumbleweed.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- Update versions (1.2.3, 1.3.3, 1.4.2, 1.5.1)
  - Guard against search-path based attacks.
  - Add security definer and search_path to event trigger functions.
- Add 1.6.1 for postgresql 14
  - 1.6.0: https://github.com/pgaudit/pgaudit/releases/tag/1.6.0
  - 1.6.1: https://github.com/pgaudit/pgaudit/releases/tag/1.6.1
- port to postgresql macros
- drop support for pg &lt; 10</changelog>
  <changelog author="mrueckert@suse.de" date="1636891201">- remove some unneeded pg_name conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- version update to 1.2.4, 1.3.4, 1.4.3, 1.5.2, 1.6.2
  * Bug Fix: Skip logging script statements for create/alter extension.
- added sources
  + get-tars</changelog>
  <changelog author="dimstar@opensuse.org" date="1663848000">- Hack up spec file a bit to get over source_validator, we rely on
  + name_pg uses --keep-name-conditionals (argument of spec_query)
  + but wre also need pg_name defined for the pg_* macros, as they
    refer to it. So we define both, and use name_pg for the
    conditions.</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- added 1.7.0 to enable pg 15</changelog>
  <changelog author="max@suse.com" date="1681905600">- PostgreSQL 10 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1694001600">- Added version 16 for postgresql 16
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1715947200">- PostgreSQL 11 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Added version 17 for postgresql 17
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1739534400">- Stop building for EOL postgresql12.</changelog>
  <changelog author="max@suse.com" date="1751976000">- Update to 17.1, 16.1, 1.7.1, 1.6.3, 1.5.3:
  * Fix issues that could cause 'pgaudit stack is not empty' errors.</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- Add support for pg 18 by adding the 18.0 version
  - bug fixes:
  - Error when required hooks are skipped.
  - Improvements:
  - SELECT FOR UPDATE object logging improvement.
  - Disable logging in parallel workers.
  - Use strpbrk() instead of strstr() where applicable.
  - Fix search_path for trigger functions.
  - Minor code optimizations.
  - Features:
  - PostgreSQL 18 support.</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13 and drop pgaudit-1.5.3.tar.gz.</changelog>
  <changelog author="mrueckert@suse.de" date="1782388800">- Add pg19 support:
  https://github.com/pgaudit/pgaudit/releases/tag/19beta1</changelog>
</package>
<package pkgid="82078e0149293104a7cc67e80a5ca87271421eeb29956a57fc1ba99868de176cb8bd5078a27d695df20327e6c7c49fd6764b169a977b60930626a0e476b9723a" name="postgresql14-plperl" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="f890ca69c9fea5ad4b1490bf7b9562884eba823f7c76789603457751a57141f800d855155a06aab90c96d7a9499fdd1b85cb976f4282c605acb791d37a8698f0" name="postgresql14-plpython" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="7988ace06834c38ed030ddd5447e197ff42f06635a698812e05bc66c495c1d04e9475033cfa5405db13c349f1f28b44163e4c217875436eb3d0e085846772d1e" name="postgresql14-pltcl" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="ccc7a063f072bb00f46a15550b1b90abaf92f5c880de10d7bba70dc0e47ba396600a907af0c46c07c126a1ffb8edaf108eeca867d5cef6b4d3db42fcc8162794" name="postgresql14-server" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="8a78148d8fb805fed5c52bd1caf894b58b325576f18ba9237e13416bd7c5a1fa3f78540739e44dcf7977c67821e68c3ad2a2d3f8fb608691a250715988da5fad" name="postgresql14-server-devel" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="7a091d328130a00be81eb8c4300ebda27f0f1a514d4e72af0c81ec1d19d9d91d719cc30dcbe2d2007032c97a9ee743c795a00695769b5734761e346a26d73a61" name="postgresql14-test" arch="x86_64">
  <version epoch="0" ver="14.23" rel="160099.120.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 14.14:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/14.14/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 14.15:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/14.15/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 14.16:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/14.16/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 14.17:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/14.17/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 14.18:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/14.18/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 14.19:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/14.19/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 14.20:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/14.20/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 14.21:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/14.21/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 14.22 to fix two regressions in 14.21:
  * https://www.postgresql.org/docs/release/14.22/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 14.23:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/14.23/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="7646b0902b44228817dbcc31d484b3351efe7f82ce4b2296b0f6cb070659b35ac341f5fd2dda79927dd7296b18d7e7cce6b40f2f4146df07a1142b9ccfe29a78" name="postgresql15" arch="src">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="9480fe9d28042fed7759171f1de74388fab02e49bc5cd68ced51604555af07438074d1cf3c998c2beb4d2e30aec665c2cefa4d648a93cc7366079e296792891d" name="postgresql15" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="a870dba2ddfb6921897e62ee1cdb0b26ba0f7bc07c315815c8061c7e70d08085ed1587ce189c24f02c9859e9710cb3b3bb3e7c94f361999308ec2fd8263c0b8e" name="postgresql15-contrib" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="03c809930c66eaeade5208ce0d989d1b0b9d16530695198654025f7c63cf45a1394a947bafb6fc86e636b25045487bd4e87b01c9fdb5ab9a5c00597685f8cad8" name="postgresql15-devel" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="c9595efd233c490979edcc3704317bd30107596690bddc23222dff906c514d95f9665db44f40011b7fc875268a5d2318722f6c04d4c0feb76d1c1e276c386ad7" name="postgresql15-docs" arch="noarch">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="7fac7b1063443ccd19b04aa0712edc84374e4add203c5cae592f4500c92dddaf0ee5410e48fd716b5983fe07451d05b93ac8581f7f7bab63702ab6b02a68aae7" name="postgresql15-hypopg" arch="src">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="c98dab5a7fdc6f59efc060aceb9da80e3b6fa187c07f967dcad99db2c15f01963b76e6366bf8f5a384321dcf218a8821070697d34f0874f9547df082eaa49598" name="postgresql15-hypopg" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="9b9b46435277e420361248d53ec98e0c1105c223777922444ebd8803694e23f1a47348790a7af08a8bc2a6afd8a311fddf4f3a9dbe72bb4ec815e61c7efb7e4a" name="postgresql15-llvmjit" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="9a482c75927ef7657630ae810d3b51f8fb51d68e9cff1d054dfa47d9c30422487333cd0cd580d8d4672ed891b498549a485e10d799e59c9ab6da857097dab322" name="postgresql15-llvmjit-devel" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="9956b278b253f85430478657fbcc9eaaac7f9ab9ae7ee1a080c56bf881ed1b81595c3cb6be04a9dd4c2ba693feccd9cd4da14d240cf59e860ffd5b522c4613c4" name="postgresql15-pg_qualstats" arch="src">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="51a6a14d99c58196e27f8f9c62589d9cdbac2906b3c523649d71bcd7b169cb9363cd2d163075b5dfc3622bcdc20395008e8ca1d5f76be35516a87dc87be32742" name="postgresql15-pg_qualstats" arch="x86_64">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="5db98554010d76ca75a3279fc5573a799edcb0e44538e32e782ef477d6f8e3bffddb47cf147028e5915336189c9011554f11302c3a6c784dbce2ce7b11cb2300" name="postgresql15-pgaudit" arch="src">
  <version epoch="0" ver="1.7.1" rel="160099.58.1"/>
  <changelog author="pgajdos@suse.com" date="1603281600">- do not build favours that would be unresolved in standard repos</changelog>
  <changelog author="pgajdos@suse.com" date="1604404800">- revert last change, keep flavours unresolved</changelog>
  <changelog author="pgajdos@suse.com" date="1604491200">- try to make factory bot happy</changelog>
  <changelog author="dimstar@opensuse.org" date="1625054400">- Do no longer build postgresql95 and postgresql96 flavors on
  Tumbleweed.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- Update versions (1.2.3, 1.3.3, 1.4.2, 1.5.1)
  - Guard against search-path based attacks.
  - Add security definer and search_path to event trigger functions.
- Add 1.6.1 for postgresql 14
  - 1.6.0: https://github.com/pgaudit/pgaudit/releases/tag/1.6.0
  - 1.6.1: https://github.com/pgaudit/pgaudit/releases/tag/1.6.1
- port to postgresql macros
- drop support for pg &lt; 10</changelog>
  <changelog author="mrueckert@suse.de" date="1636891201">- remove some unneeded pg_name conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- version update to 1.2.4, 1.3.4, 1.4.3, 1.5.2, 1.6.2
  * Bug Fix: Skip logging script statements for create/alter extension.
- added sources
  + get-tars</changelog>
  <changelog author="dimstar@opensuse.org" date="1663848000">- Hack up spec file a bit to get over source_validator, we rely on
  + name_pg uses --keep-name-conditionals (argument of spec_query)
  + but wre also need pg_name defined for the pg_* macros, as they
    refer to it. So we define both, and use name_pg for the
    conditions.</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- added 1.7.0 to enable pg 15</changelog>
  <changelog author="max@suse.com" date="1681905600">- PostgreSQL 10 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1694001600">- Added version 16 for postgresql 16
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1715947200">- PostgreSQL 11 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Added version 17 for postgresql 17
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1739534400">- Stop building for EOL postgresql12.</changelog>
  <changelog author="max@suse.com" date="1751976000">- Update to 17.1, 16.1, 1.7.1, 1.6.3, 1.5.3:
  * Fix issues that could cause 'pgaudit stack is not empty' errors.</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- Add support for pg 18 by adding the 18.0 version
  - bug fixes:
  - Error when required hooks are skipped.
  - Improvements:
  - SELECT FOR UPDATE object logging improvement.
  - Disable logging in parallel workers.
  - Use strpbrk() instead of strstr() where applicable.
  - Fix search_path for trigger functions.
  - Minor code optimizations.
  - Features:
  - PostgreSQL 18 support.</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13 and drop pgaudit-1.5.3.tar.gz.</changelog>
  <changelog author="mrueckert@suse.de" date="1782388800">- Add pg19 support:
  https://github.com/pgaudit/pgaudit/releases/tag/19beta1</changelog>
</package>
<package pkgid="5d8afad4a32c91f2cbe65b174cc7214d55c172f7d0a9c8f6dd2027b155e4be10f6944c8c3fac193df53bfe69fefa111598b4b566a5a96e70b5d829a88acd929b" name="postgresql15-pgaudit" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="160099.58.1"/>
  <changelog author="pgajdos@suse.com" date="1603281600">- do not build favours that would be unresolved in standard repos</changelog>
  <changelog author="pgajdos@suse.com" date="1604404800">- revert last change, keep flavours unresolved</changelog>
  <changelog author="pgajdos@suse.com" date="1604491200">- try to make factory bot happy</changelog>
  <changelog author="dimstar@opensuse.org" date="1625054400">- Do no longer build postgresql95 and postgresql96 flavors on
  Tumbleweed.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- Update versions (1.2.3, 1.3.3, 1.4.2, 1.5.1)
  - Guard against search-path based attacks.
  - Add security definer and search_path to event trigger functions.
- Add 1.6.1 for postgresql 14
  - 1.6.0: https://github.com/pgaudit/pgaudit/releases/tag/1.6.0
  - 1.6.1: https://github.com/pgaudit/pgaudit/releases/tag/1.6.1
- port to postgresql macros
- drop support for pg &lt; 10</changelog>
  <changelog author="mrueckert@suse.de" date="1636891201">- remove some unneeded pg_name conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- version update to 1.2.4, 1.3.4, 1.4.3, 1.5.2, 1.6.2
  * Bug Fix: Skip logging script statements for create/alter extension.
- added sources
  + get-tars</changelog>
  <changelog author="dimstar@opensuse.org" date="1663848000">- Hack up spec file a bit to get over source_validator, we rely on
  + name_pg uses --keep-name-conditionals (argument of spec_query)
  + but wre also need pg_name defined for the pg_* macros, as they
    refer to it. So we define both, and use name_pg for the
    conditions.</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- added 1.7.0 to enable pg 15</changelog>
  <changelog author="max@suse.com" date="1681905600">- PostgreSQL 10 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1694001600">- Added version 16 for postgresql 16
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1715947200">- PostgreSQL 11 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Added version 17 for postgresql 17
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1739534400">- Stop building for EOL postgresql12.</changelog>
  <changelog author="max@suse.com" date="1751976000">- Update to 17.1, 16.1, 1.7.1, 1.6.3, 1.5.3:
  * Fix issues that could cause 'pgaudit stack is not empty' errors.</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- Add support for pg 18 by adding the 18.0 version
  - bug fixes:
  - Error when required hooks are skipped.
  - Improvements:
  - SELECT FOR UPDATE object logging improvement.
  - Disable logging in parallel workers.
  - Use strpbrk() instead of strstr() where applicable.
  - Fix search_path for trigger functions.
  - Minor code optimizations.
  - Features:
  - PostgreSQL 18 support.</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13 and drop pgaudit-1.5.3.tar.gz.</changelog>
  <changelog author="mrueckert@suse.de" date="1782388800">- Add pg19 support:
  https://github.com/pgaudit/pgaudit/releases/tag/19beta1</changelog>
</package>
<package pkgid="9370e89c04f3c2b30d6c729b3a6a7a1717d995b2eae0dffa376045414f180fe55ac7be8519a99237920b1996b5dee0070cbd732ffb3d7bc92f4db5f365c85461" name="postgresql15-plperl" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="c6a94a8147b6c533d4fc09ef2187aee32129021dc75a7e48d7c0037620784490fef323d027a7459b1767889f0aaaf781bce468cec169d67bebdae0f45bdb574a" name="postgresql15-plpython" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="9a5ccd22b293b898593eb731fe601f9f6de0a9699d54dee2287335f42d705c959881046222866aef68f403c7b934dc05bee7552cfd867d2bd57fc9706eb48e8e" name="postgresql15-pltcl" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="0c969385e9c25ed50e6793beb1b0b7fab41fadbf881dcedc70f0fe5d589c9a4d19db314da5fc937cb195b080dfd8c6ffd87bed831ed8d7fa8b5500007c20cf2c" name="postgresql15-server" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="2dc67e83700f032264f46822ef867d75bd9ece39e9e7e985c3a5e6e6ec203b82a9b87219d2cb2ce147b41f5fe786eebb395fa93b44ad41979819c7a920a059fe" name="postgresql15-server-devel" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="ae46108333bf564eb15f1995418cef3e4430fd7bddc3d2d365604a12e00d5c5065b86d055a455e0549634d0d6d185dccbcf379ee6fc618de2a743cf9934c0923" name="postgresql15-test" arch="x86_64">
  <version epoch="0" ver="15.18" rel="160099.101.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 15.9:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/15.9/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 15.10
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/15.10/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 15.11:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/15.11/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 15.12:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/15.12/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 15.13:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/15.13/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 15.14:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/15.14/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758801600">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 15.15:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/15.15/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 15.16:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/15.16/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 15.17 to fix two regressions in 15.16:
  * https://www.postgresql.org/docs/release/15.17/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14823)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 15.18:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * https://www.postgresql.org/docs/release/15.18/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="681ae044ccac9b60f14afceca3984e0240eec70cb744b5af268e53041b9b7d3a2916f2cab19279aa10584cb3e279ccf08813ae7cdcd0ccdf11867a1078d5a7cd" name="postgresql16" arch="src">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="358035ea6d4940820ed0c74eb7df1e09be1eec4cbfdf94ea5a01fd9a58a15d2110babca3f77b708f8f1fe9f842b5c647fdbe811b9ee70cd484ce4974e544b084" name="postgresql16" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="2c06569ae11d1e8f14274d39b25aa6708f7efba9a4b682814c81287e09a279e84263c8628a52ada1a993dbb1976ad334fe33e2308f3e5c80977869491a37b619" name="postgresql16-contrib" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="031d7e91238b3e7c15409b090d55455333e35f69b02ce8ae6430cfcfeb55eec1ce6efaead648cea5795414433671cd6db6683aa0536c6b7cd29d41aa0c9569ab" name="postgresql16-devel" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="3bef565dcb4f5a63f813852ed65ed9122618057bae737d2782d4e3a230ed2d710b81c172e30eb75bfdc6188d69cef51c301610b95a72ed406d93186ad99ac49b" name="postgresql16-docs" arch="noarch">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="2d16325f1af4f9a96e76d07ad7e55c8838dea4493de0692168570d5583ad285c0ddd077bf7e540f5ce59a6a7b5d0b7c4a53d49f5c680f32d320bb35b848462e1" name="postgresql16-hypopg" arch="src">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="42d39b5a1f62a880e3e6e6548c476da277dbf5097f9c32e3fabdd7a34d893f2afd9669f0da736571ccfb6b04cc1882548daec0d7d8d33934a9e3fa0e0c93dfc9" name="postgresql16-hypopg" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="0186d0e238f0ecde827b0882cc47f2faef233b70a0bc491631ad264c778849b56941c0f1f668b3249469448e565b5870f8d82f274d37694039547a8b4924a0a6" name="postgresql16-llvmjit" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="6cfc0e68656eef9caf2f697534aa275efd4e06af5e221cd08e01f0931e93aba52d0a365d568b93363854e6556a8cb95343dd9e814efa7fcf156c68dd8b4f7f42" name="postgresql16-llvmjit-devel" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="6071d602b8a5f159742c759cf7e5554bd09365e4c6c5c6ec9331800f400d5547ff2f95ab23ce3f3a366886be3d42d759d2e2aa2b053acd21037d03be407bac94" name="postgresql16-pg_qualstats" arch="src">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="e4e95b6f3c74df4e96c481be2362ae92564863b83e1b2941a8339da3d0a289db64cb8ea37c2aa0fff3e348574422ae1b446dcb69a346a19265ad093d590ae989" name="postgresql16-pg_qualstats" arch="x86_64">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="bc98e4789b02ad334e8faf589cabe96c06159f987ae19f3cdefcd71f57ca233ec33254a9b4f602fb121e353397994d84786225e445a0cf13d565d30abeb40b4b" name="postgresql16-pgaudit" arch="src">
  <version epoch="0" ver="16.1" rel="160099.58.1"/>
  <changelog author="pgajdos@suse.com" date="1603281600">- do not build favours that would be unresolved in standard repos</changelog>
  <changelog author="pgajdos@suse.com" date="1604404800">- revert last change, keep flavours unresolved</changelog>
  <changelog author="pgajdos@suse.com" date="1604491200">- try to make factory bot happy</changelog>
  <changelog author="dimstar@opensuse.org" date="1625054400">- Do no longer build postgresql95 and postgresql96 flavors on
  Tumbleweed.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- Update versions (1.2.3, 1.3.3, 1.4.2, 1.5.1)
  - Guard against search-path based attacks.
  - Add security definer and search_path to event trigger functions.
- Add 1.6.1 for postgresql 14
  - 1.6.0: https://github.com/pgaudit/pgaudit/releases/tag/1.6.0
  - 1.6.1: https://github.com/pgaudit/pgaudit/releases/tag/1.6.1
- port to postgresql macros
- drop support for pg &lt; 10</changelog>
  <changelog author="mrueckert@suse.de" date="1636891201">- remove some unneeded pg_name conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- version update to 1.2.4, 1.3.4, 1.4.3, 1.5.2, 1.6.2
  * Bug Fix: Skip logging script statements for create/alter extension.
- added sources
  + get-tars</changelog>
  <changelog author="dimstar@opensuse.org" date="1663848000">- Hack up spec file a bit to get over source_validator, we rely on
  + name_pg uses --keep-name-conditionals (argument of spec_query)
  + but wre also need pg_name defined for the pg_* macros, as they
    refer to it. So we define both, and use name_pg for the
    conditions.</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- added 1.7.0 to enable pg 15</changelog>
  <changelog author="max@suse.com" date="1681905600">- PostgreSQL 10 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1694001600">- Added version 16 for postgresql 16
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1715947200">- PostgreSQL 11 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Added version 17 for postgresql 17
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1739534400">- Stop building for EOL postgresql12.</changelog>
  <changelog author="max@suse.com" date="1751976000">- Update to 17.1, 16.1, 1.7.1, 1.6.3, 1.5.3:
  * Fix issues that could cause 'pgaudit stack is not empty' errors.</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- Add support for pg 18 by adding the 18.0 version
  - bug fixes:
  - Error when required hooks are skipped.
  - Improvements:
  - SELECT FOR UPDATE object logging improvement.
  - Disable logging in parallel workers.
  - Use strpbrk() instead of strstr() where applicable.
  - Fix search_path for trigger functions.
  - Minor code optimizations.
  - Features:
  - PostgreSQL 18 support.</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13 and drop pgaudit-1.5.3.tar.gz.</changelog>
  <changelog author="mrueckert@suse.de" date="1782388800">- Add pg19 support:
  https://github.com/pgaudit/pgaudit/releases/tag/19beta1</changelog>
</package>
<package pkgid="622d46691b98550c0bab41ccdb02596d081b18bab732f964d12eb95ab0bc24aa4a32b6cc7683c126f03b20abb4f3bb221a21413f70f239daece5b8a42de8b5d9" name="postgresql16-pgaudit" arch="x86_64">
  <version epoch="0" ver="16.1" rel="160099.58.1"/>
  <changelog author="pgajdos@suse.com" date="1603281600">- do not build favours that would be unresolved in standard repos</changelog>
  <changelog author="pgajdos@suse.com" date="1604404800">- revert last change, keep flavours unresolved</changelog>
  <changelog author="pgajdos@suse.com" date="1604491200">- try to make factory bot happy</changelog>
  <changelog author="dimstar@opensuse.org" date="1625054400">- Do no longer build postgresql95 and postgresql96 flavors on
  Tumbleweed.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- Update versions (1.2.3, 1.3.3, 1.4.2, 1.5.1)
  - Guard against search-path based attacks.
  - Add security definer and search_path to event trigger functions.
- Add 1.6.1 for postgresql 14
  - 1.6.0: https://github.com/pgaudit/pgaudit/releases/tag/1.6.0
  - 1.6.1: https://github.com/pgaudit/pgaudit/releases/tag/1.6.1
- port to postgresql macros
- drop support for pg &lt; 10</changelog>
  <changelog author="mrueckert@suse.de" date="1636891201">- remove some unneeded pg_name conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- version update to 1.2.4, 1.3.4, 1.4.3, 1.5.2, 1.6.2
  * Bug Fix: Skip logging script statements for create/alter extension.
- added sources
  + get-tars</changelog>
  <changelog author="dimstar@opensuse.org" date="1663848000">- Hack up spec file a bit to get over source_validator, we rely on
  + name_pg uses --keep-name-conditionals (argument of spec_query)
  + but wre also need pg_name defined for the pg_* macros, as they
    refer to it. So we define both, and use name_pg for the
    conditions.</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- added 1.7.0 to enable pg 15</changelog>
  <changelog author="max@suse.com" date="1681905600">- PostgreSQL 10 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1694001600">- Added version 16 for postgresql 16
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1715947200">- PostgreSQL 11 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Added version 17 for postgresql 17
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1739534400">- Stop building for EOL postgresql12.</changelog>
  <changelog author="max@suse.com" date="1751976000">- Update to 17.1, 16.1, 1.7.1, 1.6.3, 1.5.3:
  * Fix issues that could cause 'pgaudit stack is not empty' errors.</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- Add support for pg 18 by adding the 18.0 version
  - bug fixes:
  - Error when required hooks are skipped.
  - Improvements:
  - SELECT FOR UPDATE object logging improvement.
  - Disable logging in parallel workers.
  - Use strpbrk() instead of strstr() where applicable.
  - Fix search_path for trigger functions.
  - Minor code optimizations.
  - Features:
  - PostgreSQL 18 support.</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13 and drop pgaudit-1.5.3.tar.gz.</changelog>
  <changelog author="mrueckert@suse.de" date="1782388800">- Add pg19 support:
  https://github.com/pgaudit/pgaudit/releases/tag/19beta1</changelog>
</package>
<package pkgid="2812d825e7fef5d827d885e0deec5cc4c9a476135b391f74249d833a49dfb20ff7ca521a4662058dc993d7a4b039d681bdf6e6c4d90bd51df08a0125c934f0ca" name="postgresql16-plperl" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="677d92bca39481dce195a39441368f8a1b904e61ea8fa25fd83d771829d2e452a93e518f981bd155189401169787874424f495ae008c6bac52ce11e8c8654652" name="postgresql16-plpython" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="25f44bbf9a29df75d3b211e845dd3ebb17eda472629a20f467d396252fe9ac4b7bb86ba0deae3ce2620b872a34411fbd9274e83bf207e2a2807a427a97b52af7" name="postgresql16-pltcl" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="6d7f8dbc84c9cee139a89fc9f5f2b0f7aaf380d2b9b73f9a8dfaca814a7c2bbd62dff3527542974a6bd887e2144deba5bee388a542ce6296380452e169be49b0" name="postgresql16-server" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="b722a11df6909166dfe8832527b4c5964c7e4c351be1a28e3ec3a9f8755277620abf06cfb6abc620e75af97347c6d73be16669b07918df5a112c32c18b54e353" name="postgresql16-server-devel" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="e2eb56a84c6f01b8233851e3995d983a72aff70cb5f66e614f808e5d7c66155fe29be03b63e7dcf366df6ca9d86bc317605e80fe4b845bda6b7c064b276788db" name="postgresql16-test" arch="x86_64">
  <version epoch="0" ver="16.14" rel="160099.84.1"/>
  <changelog author="max@suse.com" date="1730808000">- Sync spec file from postgresql17.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 16.5:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql-testsuite-timezone-fix.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/16.5/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 16.6:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/16.6/</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 16.7:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/16.7/
  * https://www.postgresql.org/about/news/-3015/
- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 16.8:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/16.8/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 16.9:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/16.9/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Upgrade to 16.10:
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/16.10/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="max@suse.com" date="1758628800">- Sync spec file from version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Upgrade to 16.11:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/16.11/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 16.12:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/16.12/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 16.13 to fix two regressions in 16.12:
  * https://www.postgresql.org/docs/release/16.13/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14824)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 16.13:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/16.13/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="e765ecde14412d00c8e7c5d471bede9c345d47c182353ab6cbf95f7984e411784e90dec5abfbe173e2a07a4fbc7f87d206e6a95dd6024213ad81322cd1925010" name="postgresql17" arch="src">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="0c29c50375d42decd85f4a237f3c9b468f02a30b9e1ca1252dbfd546f07b488789fb3e763134e2bb4d10b7c2e50449d5435f6ce7a168d5b7611152370bc34beb" name="postgresql17" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="72a115cb61c0600b6c15736fa6b32db5e5361c1e73efffc95c1188d9a3b549b65e7dbe8c645c87a418c3b9515f05131b9df033c6842642faa5e00591f96f8887" name="postgresql17-contrib" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="64be4e73e941a8b225344c39d7d8ac07aa46df2d10c3f4da45c13e0b571eac858d45267b12de0232a29125bf1e513ce764d41589768ecab57aa538402ab34920" name="postgresql17-devel" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="9e8befb8c720cd6c016e9415e438765ad0a2ae0fd774976cd0c4bb660bb346fd828729ef59798aec219976a3605a151139fbe0092c4eb51df5eaac4def36eba7" name="postgresql17-docs" arch="noarch">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="9b3118eda33ed08c19594dff10b0a75d763cb8279802d997b941885efeda78e4d6cbb885591c22e41207d120d2e1adf48f411ad588ceff86c67b5c1fab52671f" name="postgresql17-hypopg" arch="src">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="7d751004a62f7df719bc6ac2a45dd65f405ba91501129aacdfcba65d3b20ceb7a4b9f72fbb90b54a2463fdf4f12371cab25ae2bec67d5f63af832ced013f3d93" name="postgresql17-hypopg" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="df3c3816ae58b5ac4cf8ef605c81e2e971035345064db2ec80101cd98c8056432e9482d9eb3f6a7ee63199a95dd2d0d207073c71b8dd1a0d761834c504ea863f" name="postgresql17-llvmjit" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="9fee747921c16a8e1f913c898c15d14998fdd11bf63e5dc4cb7b95a8e7895510965182dc1b414973a131ef6829bb93f0df3c86e01f2a8ee8c5177f9d2c8f9f52" name="postgresql17-llvmjit-devel" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="e5acb23d7ad9cbfe7cd731eaafde01fa184ca79c31f9c74314020aeb2315092ec1a3f239bdc4e1d44019553dcec308ca99d5beffb84cbcc4e8238eeeed2dcd60" name="postgresql17-pg_qualstats" arch="src">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="e7f2489ecc852e1607991804e0ed590e1277ec789a1b7d2b53c2e71f226a564d25461f9e389998d5c50d194ee74f966a8229864125266eb6b0f9502bad249e90" name="postgresql17-pg_qualstats" arch="x86_64">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="a63e7df516824c98381387f6dad155d4413baa37ff14d2041acf40bd51ac9dc1c81d42e7b0fb16d4e563206f970f002fa40c2bc2cb36751c50ccdc036fd7664a" name="postgresql17-pgaudit" arch="src">
  <version epoch="0" ver="17.1" rel="160099.58.1"/>
  <changelog author="pgajdos@suse.com" date="1603281600">- do not build favours that would be unresolved in standard repos</changelog>
  <changelog author="pgajdos@suse.com" date="1604404800">- revert last change, keep flavours unresolved</changelog>
  <changelog author="pgajdos@suse.com" date="1604491200">- try to make factory bot happy</changelog>
  <changelog author="dimstar@opensuse.org" date="1625054400">- Do no longer build postgresql95 and postgresql96 flavors on
  Tumbleweed.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- Update versions (1.2.3, 1.3.3, 1.4.2, 1.5.1)
  - Guard against search-path based attacks.
  - Add security definer and search_path to event trigger functions.
- Add 1.6.1 for postgresql 14
  - 1.6.0: https://github.com/pgaudit/pgaudit/releases/tag/1.6.0
  - 1.6.1: https://github.com/pgaudit/pgaudit/releases/tag/1.6.1
- port to postgresql macros
- drop support for pg &lt; 10</changelog>
  <changelog author="mrueckert@suse.de" date="1636891201">- remove some unneeded pg_name conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- version update to 1.2.4, 1.3.4, 1.4.3, 1.5.2, 1.6.2
  * Bug Fix: Skip logging script statements for create/alter extension.
- added sources
  + get-tars</changelog>
  <changelog author="dimstar@opensuse.org" date="1663848000">- Hack up spec file a bit to get over source_validator, we rely on
  + name_pg uses --keep-name-conditionals (argument of spec_query)
  + but wre also need pg_name defined for the pg_* macros, as they
    refer to it. So we define both, and use name_pg for the
    conditions.</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- added 1.7.0 to enable pg 15</changelog>
  <changelog author="max@suse.com" date="1681905600">- PostgreSQL 10 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1694001600">- Added version 16 for postgresql 16
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1715947200">- PostgreSQL 11 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Added version 17 for postgresql 17
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1739534400">- Stop building for EOL postgresql12.</changelog>
  <changelog author="max@suse.com" date="1751976000">- Update to 17.1, 16.1, 1.7.1, 1.6.3, 1.5.3:
  * Fix issues that could cause 'pgaudit stack is not empty' errors.</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- Add support for pg 18 by adding the 18.0 version
  - bug fixes:
  - Error when required hooks are skipped.
  - Improvements:
  - SELECT FOR UPDATE object logging improvement.
  - Disable logging in parallel workers.
  - Use strpbrk() instead of strstr() where applicable.
  - Fix search_path for trigger functions.
  - Minor code optimizations.
  - Features:
  - PostgreSQL 18 support.</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13 and drop pgaudit-1.5.3.tar.gz.</changelog>
  <changelog author="mrueckert@suse.de" date="1782388800">- Add pg19 support:
  https://github.com/pgaudit/pgaudit/releases/tag/19beta1</changelog>
</package>
<package pkgid="180769f9763387d40954179b1a5ae002b09b9097762f9e0fb69d477e6e12c5db2d4f33e240bbda0a1d32cbceba10e66c22f7b196954081e3a44ad4bb1ecd1e0b" name="postgresql17-pgaudit" arch="x86_64">
  <version epoch="0" ver="17.1" rel="160099.58.1"/>
  <changelog author="pgajdos@suse.com" date="1603281600">- do not build favours that would be unresolved in standard repos</changelog>
  <changelog author="pgajdos@suse.com" date="1604404800">- revert last change, keep flavours unresolved</changelog>
  <changelog author="pgajdos@suse.com" date="1604491200">- try to make factory bot happy</changelog>
  <changelog author="dimstar@opensuse.org" date="1625054400">- Do no longer build postgresql95 and postgresql96 flavors on
  Tumbleweed.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- Update versions (1.2.3, 1.3.3, 1.4.2, 1.5.1)
  - Guard against search-path based attacks.
  - Add security definer and search_path to event trigger functions.
- Add 1.6.1 for postgresql 14
  - 1.6.0: https://github.com/pgaudit/pgaudit/releases/tag/1.6.0
  - 1.6.1: https://github.com/pgaudit/pgaudit/releases/tag/1.6.1
- port to postgresql macros
- drop support for pg &lt; 10</changelog>
  <changelog author="mrueckert@suse.de" date="1636891201">- remove some unneeded pg_name conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- version update to 1.2.4, 1.3.4, 1.4.3, 1.5.2, 1.6.2
  * Bug Fix: Skip logging script statements for create/alter extension.
- added sources
  + get-tars</changelog>
  <changelog author="dimstar@opensuse.org" date="1663848000">- Hack up spec file a bit to get over source_validator, we rely on
  + name_pg uses --keep-name-conditionals (argument of spec_query)
  + but wre also need pg_name defined for the pg_* macros, as they
    refer to it. So we define both, and use name_pg for the
    conditions.</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- added 1.7.0 to enable pg 15</changelog>
  <changelog author="max@suse.com" date="1681905600">- PostgreSQL 10 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1694001600">- Added version 16 for postgresql 16
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1715947200">- PostgreSQL 11 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Added version 17 for postgresql 17
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1739534400">- Stop building for EOL postgresql12.</changelog>
  <changelog author="max@suse.com" date="1751976000">- Update to 17.1, 16.1, 1.7.1, 1.6.3, 1.5.3:
  * Fix issues that could cause 'pgaudit stack is not empty' errors.</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- Add support for pg 18 by adding the 18.0 version
  - bug fixes:
  - Error when required hooks are skipped.
  - Improvements:
  - SELECT FOR UPDATE object logging improvement.
  - Disable logging in parallel workers.
  - Use strpbrk() instead of strstr() where applicable.
  - Fix search_path for trigger functions.
  - Minor code optimizations.
  - Features:
  - PostgreSQL 18 support.</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13 and drop pgaudit-1.5.3.tar.gz.</changelog>
  <changelog author="mrueckert@suse.de" date="1782388800">- Add pg19 support:
  https://github.com/pgaudit/pgaudit/releases/tag/19beta1</changelog>
</package>
<package pkgid="63c0eb196f197d83dfcc90b1f67236ed68baab48c18dc08f96a8a16242d24e509cd6e1fd78f287947ffe85a9d48cdfd53f4762520a0178087de016940c99068c" name="postgresql17-pglogical" arch="src">
  <version epoch="0" ver="2.4.7" rel="160099.5.1"/>
  <changelog author="mrueckert@suse.de" date="1604232000">- update to 2.3.3
  - This release adds support for PostgreSQL 13.
  - fixes the build against the latest PostgreSQL minor releases
  - pglogical 2.3.1 contains several fixes that prevented users
    from upgrading to version 2.3.0.  The features "Allow
    replicating tables and sequences to different names on the
    target" and "Add option to only synchronize the structure of
    replicated relations" from pglogical 2.3.0 have been removed in
    this release for the time being and will be added again in a
    later release.
- enable pg13</changelog>
  <changelog author="max@suse.com" date="1622116800">- CVE-2021-3515, bsc#1186121, pglogical-CVE-2021-3515.patch:
  Shell injection by pglogical users with CREATEDB access</changelog>
  <changelog author="mrueckert@suse.de" date="1622548800">- update to 2.3.4: (bsc#1186121)
  - Fix pg_dump/pg_restore execution (CVE-2021-3515)
    Correctly escape the connection string for both pg_dump and
    pg_restore so that exotic database and user names are handled
    correctly.  Reported by Pedro Gallegos
  - Assign collation to the index scan key
    When doing lookups for INSERT/UPDATE/DELETE, either to find
    conflicts or key for the operation to be applied, we should use
    correct collation.
    This fixes issues with PostgreSQL 12+ primary key lookups when
    primary key is on column using one of the textual types.
  - Execute pg_ctl with appropriate verbosity in
    pglogical_create_subscriber
    When -v is passed to pglogical_create_subscriber, it will now
    call pg_ctl without silent mode. This is useful for
    troubleshooting.
  - Clarify documentation regarding REPLICA IDENTITY requirements
    and support
- drop pglogical-CVE-2021-3515.patch: included in update
- drop do-not-link-unneeded-libs.patch: no longer applicable</changelog>
  <changelog author="mrueckert@suse.de" date="1629115200">- update to 2.4.0
  - Add preliminary support for PostgreSQL 14 (beta)
  - Fix pglogical_show_subscription_table to return row rather than
    set of rows
  - Fix snapshot handling in output plugin and apply worker
  - Fix command quoting on Windows so that it actually works
  - Seems like the API used before has 1024 limit on command line
    length
  - Make sure that the schema syncing process can be interrupted on
    Windows
  - Fix compilation issues with pglogical_create_subscriber on
    Windows
  - Fix double closing of relation when a BEFORE ROW DELETE trigger
    returns NULL in the apply worker
  - Fix multi-insert crash in the SPI apply worker
  - Fix multi-insert doing insert of last tuple multiple times in
    apply worker
  - Make sure debug_query_string is always set Newer versions of
    PostgreSQL require that debug_query_string is always set.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1639569600">- update to 2.4.1
  - Fix "snapshot still active" warnings and snapshot handling with
    domains. Problems introduced in version 2.4.0.
  - Flush error state when having failed to drop remote replication
    slot</changelog>
  <changelog author="mrueckert@suse.de" date="1666440000">- update to 2.4.2
  - Add PG 15 support</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- update to 2.4.3
  - Apply data filtering on the correct tuple during initial
    synchronization.
  - Restore the correct memory context while decoding a change.
  - Drop database never completes in PostgreSQL 15.
  - Don't replicate TRUNCATE as global message.</changelog>
  <changelog author="mrueckert@suse.de" date="1696420800">- update to 2.4.4
  - add support for pg16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727179200">- update to 2.4.5
  - add support for pg17
  - Fix index usage for conflict resolution.
  - Maintain indexes when updating pglogical.sequence_state.
  - Fix build on PostgreSQL 9.4.</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1755950400">- update to 2.4.6
  - Add support for PostgreSQL 18.
  - Fix additional deadlock during DROP DATABASE.
  - Fix incorrect row_filter processing after cache invalidation.</changelog>
  <changelog author="mrueckert@suse.de" date="1755950401">- enable pg18</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1780315200">- update to 2.4.7
  - Add support for PostgreSQL 19.
  - Fix sync worker hang with idle source database.
  - Fix some memory leaks.</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- enable pg19</changelog>
</package>
<package pkgid="4a9b99d72ea9b99e3dfa5301328c8f8ba71cc9851b915db4402f9690cbdda384d286c3647e4ca4dbc6fb0d948c6c79e57e002db5aa1a04163a7ee97a269f2440" name="postgresql17-pglogical" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="160099.5.1"/>
  <changelog author="mrueckert@suse.de" date="1604232000">- update to 2.3.3
  - This release adds support for PostgreSQL 13.
  - fixes the build against the latest PostgreSQL minor releases
  - pglogical 2.3.1 contains several fixes that prevented users
    from upgrading to version 2.3.0.  The features "Allow
    replicating tables and sequences to different names on the
    target" and "Add option to only synchronize the structure of
    replicated relations" from pglogical 2.3.0 have been removed in
    this release for the time being and will be added again in a
    later release.
- enable pg13</changelog>
  <changelog author="max@suse.com" date="1622116800">- CVE-2021-3515, bsc#1186121, pglogical-CVE-2021-3515.patch:
  Shell injection by pglogical users with CREATEDB access</changelog>
  <changelog author="mrueckert@suse.de" date="1622548800">- update to 2.3.4: (bsc#1186121)
  - Fix pg_dump/pg_restore execution (CVE-2021-3515)
    Correctly escape the connection string for both pg_dump and
    pg_restore so that exotic database and user names are handled
    correctly.  Reported by Pedro Gallegos
  - Assign collation to the index scan key
    When doing lookups for INSERT/UPDATE/DELETE, either to find
    conflicts or key for the operation to be applied, we should use
    correct collation.
    This fixes issues with PostgreSQL 12+ primary key lookups when
    primary key is on column using one of the textual types.
  - Execute pg_ctl with appropriate verbosity in
    pglogical_create_subscriber
    When -v is passed to pglogical_create_subscriber, it will now
    call pg_ctl without silent mode. This is useful for
    troubleshooting.
  - Clarify documentation regarding REPLICA IDENTITY requirements
    and support
- drop pglogical-CVE-2021-3515.patch: included in update
- drop do-not-link-unneeded-libs.patch: no longer applicable</changelog>
  <changelog author="mrueckert@suse.de" date="1629115200">- update to 2.4.0
  - Add preliminary support for PostgreSQL 14 (beta)
  - Fix pglogical_show_subscription_table to return row rather than
    set of rows
  - Fix snapshot handling in output plugin and apply worker
  - Fix command quoting on Windows so that it actually works
  - Seems like the API used before has 1024 limit on command line
    length
  - Make sure that the schema syncing process can be interrupted on
    Windows
  - Fix compilation issues with pglogical_create_subscriber on
    Windows
  - Fix double closing of relation when a BEFORE ROW DELETE trigger
    returns NULL in the apply worker
  - Fix multi-insert crash in the SPI apply worker
  - Fix multi-insert doing insert of last tuple multiple times in
    apply worker
  - Make sure debug_query_string is always set Newer versions of
    PostgreSQL require that debug_query_string is always set.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1639569600">- update to 2.4.1
  - Fix "snapshot still active" warnings and snapshot handling with
    domains. Problems introduced in version 2.4.0.
  - Flush error state when having failed to drop remote replication
    slot</changelog>
  <changelog author="mrueckert@suse.de" date="1666440000">- update to 2.4.2
  - Add PG 15 support</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- update to 2.4.3
  - Apply data filtering on the correct tuple during initial
    synchronization.
  - Restore the correct memory context while decoding a change.
  - Drop database never completes in PostgreSQL 15.
  - Don't replicate TRUNCATE as global message.</changelog>
  <changelog author="mrueckert@suse.de" date="1696420800">- update to 2.4.4
  - add support for pg16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727179200">- update to 2.4.5
  - add support for pg17
  - Fix index usage for conflict resolution.
  - Maintain indexes when updating pglogical.sequence_state.
  - Fix build on PostgreSQL 9.4.</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1755950400">- update to 2.4.6
  - Add support for PostgreSQL 18.
  - Fix additional deadlock during DROP DATABASE.
  - Fix incorrect row_filter processing after cache invalidation.</changelog>
  <changelog author="mrueckert@suse.de" date="1755950401">- enable pg18</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1780315200">- update to 2.4.7
  - Add support for PostgreSQL 19.
  - Fix sync worker hang with idle source database.
  - Fix some memory leaks.</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- enable pg19</changelog>
</package>
<package pkgid="e521b284faff22f9ff9469d6d4672a6ed4864c24681377f874d2338ea82beba642c1f953b4eafe7937c21302e5244c868fe7b0721271ee9badcc0029edd273a6" name="postgresql17-plperl" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="5782ee8d8c17dfd20e330a5e4bdbb8d2ab048d836ba63b7f7286f7651585793e4694520a1bf17b31597ec6e4af68ccbbdcfc5658057c0e77565155567e9c35e3" name="postgresql17-plpython" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="855b5c0216e576c6569cd57c8233926095c0bcc51f30dc317072e05275b63bdb4c84be0adf6ec733ff787a176ac0c366565e167593a76be6139aabc1b67906e6" name="postgresql17-pltcl" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="95a39a141df114efbe96db762c035cb467776b5310aa4779e876c9616638224a4e77779e78fdb3f8aacd5c88ab465e25e8d393031d4f3f1d12e87e6913998a8f" name="postgresql17-server" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="fb90bb40e51259a488e9bc2a42ae933574cfc839781f9e3143c85daeb05967fd5ff1302036483f102ea3a7ae9c1aed24900b259dfd89b1163f0ed4497327f00b" name="postgresql17-server-devel" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="ace58d5a20ccf4ceb03ca724a520066af7b2e4d4b91bb1f62d5814acbcd429974f356cd67d988163460044ac36c43ab643877adf4c52af0d30ab1a5c552198ef" name="postgresql17-test" arch="x86_64">
  <version epoch="0" ver="17.10" rel="160099.73.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1756036800">- switch library to pg 18</changelog>
  <changelog author="max@suse.com" date="1756987200">- Sync spec file with version 18.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 17.7:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 17.8:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/17.8/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 17.9 to fix two regressions in 17.8:
  * https://www.postgresql.org/docs/release/17.9/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774872000">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14825, bsc#1245875)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 17.10:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/17.10/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="4cf5c7699c40e2ee0f128c63ab69e65444e5336c3bc867d681a04bb2308af10de4916987b08bfdb4750b8046ef36b1d40fb70f4513066f70649ba7a73da7c2ae" name="postgresql18" arch="src">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="844b712d8b924ad47b543620260e709125d5ecb7814a634cfee48ca10e117568e710bfb21831235196b048480e05891820efe114c039773470ab6985ae5f3fce" name="postgresql18" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="21de43f46b5cc8572bee7ac760a6ec62683b04800f1deef6456322adbcc85afbdd343e45d871f3878243cabdbe245f8205223e4948b628eeba9553ba571e9928" name="postgresql18-contrib" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="0989f1c93ccfa611cfacb384aafd48aff97a471605d189540e808dc3459abc3519ab37321dcdae31ec14a7f79e6b621d35073e3caf202615ee8a966ca53055db" name="postgresql18-devel" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="edc4e7aae2a5e4ad99700e7c6b2c25ca104671ed52e4bd6d706f347dfbf9a51f068516ff9ac695c2ba3d4f22c6ba55c169fc116f507546b818a3e79c66d43573" name="postgresql18-docs" arch="noarch">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="ee573939d0e25183933861ec17e48712510c1cb3a03cf5f803ef1902cf717fd4511833c08ffc766604309f5771f24dbaf8d730b8703c1f4a0954bc08a3a53dff" name="postgresql18-hypopg" arch="src">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="b81c24be18f1c067e40c74f8099c7e32b31ae86aa0eee8212d5d5447beb7b06e7fe0c4b7befada729d152cc54d87917cf2ee24fd78025fdcc03eaa997e585794" name="postgresql18-hypopg" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="a500ff90344546b8f93c7348a1c4d69f03b4ea4fdf7aea4523426191fd2850803eb2bad3842095edc520bda55d06dc4e0c0dc67fd6f2a1ff6cb19a53417abd4d" name="postgresql18-llvmjit" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="b200916a28d54c98629537b1a2916cc6e1679a983c4470acee7b3e0cfb5a14628e8bc297b88c12c2ebe969449b849198b9244066c2bd52a2d5405efd0ae30206" name="postgresql18-llvmjit-devel" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="81c8d1d10bcd65352bdcab1046e34f4b4439f279e6b187360bdf01de28a9be0f7d5ef62151a56219bf1c6744884c6858a94d23e1b8583f3e14c4f000964ba41a" name="postgresql18-pg_qualstats" arch="src">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="62fae68a9fa3649b1e47b261ec4c5fff6e9f66756add60e1d2ef7b6ba4a3bf5ca46780e67246111dea87c1505f3de4480200e4b9f4a7f9c7c985336f15be5604" name="postgresql18-pg_qualstats" arch="x86_64">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="98d71623c2766da8d68c61c616ea98f86c5d7ddcaff40b91a34ee106bdce9b9296f6ec9431561d1c7e291a893ab7c4c6129fc1bc1f2c7b18e2f474fc2f78c8d1" name="postgresql18-pgaudit" arch="src">
  <version epoch="0" ver="18.0" rel="160099.58.1"/>
  <changelog author="pgajdos@suse.com" date="1603281600">- do not build favours that would be unresolved in standard repos</changelog>
  <changelog author="pgajdos@suse.com" date="1604404800">- revert last change, keep flavours unresolved</changelog>
  <changelog author="pgajdos@suse.com" date="1604491200">- try to make factory bot happy</changelog>
  <changelog author="dimstar@opensuse.org" date="1625054400">- Do no longer build postgresql95 and postgresql96 flavors on
  Tumbleweed.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- Update versions (1.2.3, 1.3.3, 1.4.2, 1.5.1)
  - Guard against search-path based attacks.
  - Add security definer and search_path to event trigger functions.
- Add 1.6.1 for postgresql 14
  - 1.6.0: https://github.com/pgaudit/pgaudit/releases/tag/1.6.0
  - 1.6.1: https://github.com/pgaudit/pgaudit/releases/tag/1.6.1
- port to postgresql macros
- drop support for pg &lt; 10</changelog>
  <changelog author="mrueckert@suse.de" date="1636891201">- remove some unneeded pg_name conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- version update to 1.2.4, 1.3.4, 1.4.3, 1.5.2, 1.6.2
  * Bug Fix: Skip logging script statements for create/alter extension.
- added sources
  + get-tars</changelog>
  <changelog author="dimstar@opensuse.org" date="1663848000">- Hack up spec file a bit to get over source_validator, we rely on
  + name_pg uses --keep-name-conditionals (argument of spec_query)
  + but wre also need pg_name defined for the pg_* macros, as they
    refer to it. So we define both, and use name_pg for the
    conditions.</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- added 1.7.0 to enable pg 15</changelog>
  <changelog author="max@suse.com" date="1681905600">- PostgreSQL 10 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1694001600">- Added version 16 for postgresql 16
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1715947200">- PostgreSQL 11 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Added version 17 for postgresql 17
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1739534400">- Stop building for EOL postgresql12.</changelog>
  <changelog author="max@suse.com" date="1751976000">- Update to 17.1, 16.1, 1.7.1, 1.6.3, 1.5.3:
  * Fix issues that could cause 'pgaudit stack is not empty' errors.</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- Add support for pg 18 by adding the 18.0 version
  - bug fixes:
  - Error when required hooks are skipped.
  - Improvements:
  - SELECT FOR UPDATE object logging improvement.
  - Disable logging in parallel workers.
  - Use strpbrk() instead of strstr() where applicable.
  - Fix search_path for trigger functions.
  - Minor code optimizations.
  - Features:
  - PostgreSQL 18 support.</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13 and drop pgaudit-1.5.3.tar.gz.</changelog>
  <changelog author="mrueckert@suse.de" date="1782388800">- Add pg19 support:
  https://github.com/pgaudit/pgaudit/releases/tag/19beta1</changelog>
</package>
<package pkgid="88018f4efa9a2b8a4d505092fffbf1554945c5fa332e5222d6e42d5e5a8e945b20d9caf865317ac04d3e9673defc1e0353fea84e945f917712da109efdac5f28" name="postgresql18-pgaudit" arch="x86_64">
  <version epoch="0" ver="18.0" rel="160099.58.1"/>
  <changelog author="pgajdos@suse.com" date="1603281600">- do not build favours that would be unresolved in standard repos</changelog>
  <changelog author="pgajdos@suse.com" date="1604404800">- revert last change, keep flavours unresolved</changelog>
  <changelog author="pgajdos@suse.com" date="1604491200">- try to make factory bot happy</changelog>
  <changelog author="dimstar@opensuse.org" date="1625054400">- Do no longer build postgresql95 and postgresql96 flavors on
  Tumbleweed.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- Update versions (1.2.3, 1.3.3, 1.4.2, 1.5.1)
  - Guard against search-path based attacks.
  - Add security definer and search_path to event trigger functions.
- Add 1.6.1 for postgresql 14
  - 1.6.0: https://github.com/pgaudit/pgaudit/releases/tag/1.6.0
  - 1.6.1: https://github.com/pgaudit/pgaudit/releases/tag/1.6.1
- port to postgresql macros
- drop support for pg &lt; 10</changelog>
  <changelog author="mrueckert@suse.de" date="1636891201">- remove some unneeded pg_name conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="pgajdos@suse.com" date="1647864000">- version update to 1.2.4, 1.3.4, 1.4.3, 1.5.2, 1.6.2
  * Bug Fix: Skip logging script statements for create/alter extension.
- added sources
  + get-tars</changelog>
  <changelog author="dimstar@opensuse.org" date="1663848000">- Hack up spec file a bit to get over source_validator, we rely on
  + name_pg uses --keep-name-conditionals (argument of spec_query)
  + but wre also need pg_name defined for the pg_* macros, as they
    refer to it. So we define both, and use name_pg for the
    conditions.</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- added 1.7.0 to enable pg 15</changelog>
  <changelog author="max@suse.com" date="1681905600">- PostgreSQL 10 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1694001600">- Added version 16 for postgresql 16
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1715947200">- PostgreSQL 11 is EOL.</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Added version 17 for postgresql 17
  https://github.com/pgaudit/pgaudit/releases/tag/16.0</changelog>
  <changelog author="max@suse.com" date="1739534400">- Stop building for EOL postgresql12.</changelog>
  <changelog author="max@suse.com" date="1751976000">- Update to 17.1, 16.1, 1.7.1, 1.6.3, 1.5.3:
  * Fix issues that could cause 'pgaudit stack is not empty' errors.</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- Add support for pg 18 by adding the 18.0 version
  - bug fixes:
  - Error when required hooks are skipped.
  - Improvements:
  - SELECT FOR UPDATE object logging improvement.
  - Disable logging in parallel workers.
  - Use strpbrk() instead of strstr() where applicable.
  - Fix search_path for trigger functions.
  - Minor code optimizations.
  - Features:
  - PostgreSQL 18 support.</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13 and drop pgaudit-1.5.3.tar.gz.</changelog>
  <changelog author="mrueckert@suse.de" date="1782388800">- Add pg19 support:
  https://github.com/pgaudit/pgaudit/releases/tag/19beta1</changelog>
</package>
<package pkgid="b6f3632b8fb548ce54ddffa16fd720dd958c191e8db86a7a5b02418c62c5190c2e31959ac66515a7ff1db8f5cda8b46671c4d3afaad97d8355038b8ac6e501af" name="postgresql18-pglogical" arch="src">
  <version epoch="0" ver="2.4.7" rel="160099.5.1"/>
  <changelog author="mrueckert@suse.de" date="1604232000">- update to 2.3.3
  - This release adds support for PostgreSQL 13.
  - fixes the build against the latest PostgreSQL minor releases
  - pglogical 2.3.1 contains several fixes that prevented users
    from upgrading to version 2.3.0.  The features "Allow
    replicating tables and sequences to different names on the
    target" and "Add option to only synchronize the structure of
    replicated relations" from pglogical 2.3.0 have been removed in
    this release for the time being and will be added again in a
    later release.
- enable pg13</changelog>
  <changelog author="max@suse.com" date="1622116800">- CVE-2021-3515, bsc#1186121, pglogical-CVE-2021-3515.patch:
  Shell injection by pglogical users with CREATEDB access</changelog>
  <changelog author="mrueckert@suse.de" date="1622548800">- update to 2.3.4: (bsc#1186121)
  - Fix pg_dump/pg_restore execution (CVE-2021-3515)
    Correctly escape the connection string for both pg_dump and
    pg_restore so that exotic database and user names are handled
    correctly.  Reported by Pedro Gallegos
  - Assign collation to the index scan key
    When doing lookups for INSERT/UPDATE/DELETE, either to find
    conflicts or key for the operation to be applied, we should use
    correct collation.
    This fixes issues with PostgreSQL 12+ primary key lookups when
    primary key is on column using one of the textual types.
  - Execute pg_ctl with appropriate verbosity in
    pglogical_create_subscriber
    When -v is passed to pglogical_create_subscriber, it will now
    call pg_ctl without silent mode. This is useful for
    troubleshooting.
  - Clarify documentation regarding REPLICA IDENTITY requirements
    and support
- drop pglogical-CVE-2021-3515.patch: included in update
- drop do-not-link-unneeded-libs.patch: no longer applicable</changelog>
  <changelog author="mrueckert@suse.de" date="1629115200">- update to 2.4.0
  - Add preliminary support for PostgreSQL 14 (beta)
  - Fix pglogical_show_subscription_table to return row rather than
    set of rows
  - Fix snapshot handling in output plugin and apply worker
  - Fix command quoting on Windows so that it actually works
  - Seems like the API used before has 1024 limit on command line
    length
  - Make sure that the schema syncing process can be interrupted on
    Windows
  - Fix compilation issues with pglogical_create_subscriber on
    Windows
  - Fix double closing of relation when a BEFORE ROW DELETE trigger
    returns NULL in the apply worker
  - Fix multi-insert crash in the SPI apply worker
  - Fix multi-insert doing insert of last tuple multiple times in
    apply worker
  - Make sure debug_query_string is always set Newer versions of
    PostgreSQL require that debug_query_string is always set.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1639569600">- update to 2.4.1
  - Fix "snapshot still active" warnings and snapshot handling with
    domains. Problems introduced in version 2.4.0.
  - Flush error state when having failed to drop remote replication
    slot</changelog>
  <changelog author="mrueckert@suse.de" date="1666440000">- update to 2.4.2
  - Add PG 15 support</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- update to 2.4.3
  - Apply data filtering on the correct tuple during initial
    synchronization.
  - Restore the correct memory context while decoding a change.
  - Drop database never completes in PostgreSQL 15.
  - Don't replicate TRUNCATE as global message.</changelog>
  <changelog author="mrueckert@suse.de" date="1696420800">- update to 2.4.4
  - add support for pg16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727179200">- update to 2.4.5
  - add support for pg17
  - Fix index usage for conflict resolution.
  - Maintain indexes when updating pglogical.sequence_state.
  - Fix build on PostgreSQL 9.4.</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1755950400">- update to 2.4.6
  - Add support for PostgreSQL 18.
  - Fix additional deadlock during DROP DATABASE.
  - Fix incorrect row_filter processing after cache invalidation.</changelog>
  <changelog author="mrueckert@suse.de" date="1755950401">- enable pg18</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1780315200">- update to 2.4.7
  - Add support for PostgreSQL 19.
  - Fix sync worker hang with idle source database.
  - Fix some memory leaks.</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- enable pg19</changelog>
</package>
<package pkgid="f63df9e28fd88811fef28281a6781d818a674228656a8b0cdc2a3d1fb53ca48fc1f8f5c130825c1ada357b6544c2ba2576c9644c3594adcc6e27ba418b9cb88a" name="postgresql18-pglogical" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="160099.5.1"/>
  <changelog author="mrueckert@suse.de" date="1604232000">- update to 2.3.3
  - This release adds support for PostgreSQL 13.
  - fixes the build against the latest PostgreSQL minor releases
  - pglogical 2.3.1 contains several fixes that prevented users
    from upgrading to version 2.3.0.  The features "Allow
    replicating tables and sequences to different names on the
    target" and "Add option to only synchronize the structure of
    replicated relations" from pglogical 2.3.0 have been removed in
    this release for the time being and will be added again in a
    later release.
- enable pg13</changelog>
  <changelog author="max@suse.com" date="1622116800">- CVE-2021-3515, bsc#1186121, pglogical-CVE-2021-3515.patch:
  Shell injection by pglogical users with CREATEDB access</changelog>
  <changelog author="mrueckert@suse.de" date="1622548800">- update to 2.3.4: (bsc#1186121)
  - Fix pg_dump/pg_restore execution (CVE-2021-3515)
    Correctly escape the connection string for both pg_dump and
    pg_restore so that exotic database and user names are handled
    correctly.  Reported by Pedro Gallegos
  - Assign collation to the index scan key
    When doing lookups for INSERT/UPDATE/DELETE, either to find
    conflicts or key for the operation to be applied, we should use
    correct collation.
    This fixes issues with PostgreSQL 12+ primary key lookups when
    primary key is on column using one of the textual types.
  - Execute pg_ctl with appropriate verbosity in
    pglogical_create_subscriber
    When -v is passed to pglogical_create_subscriber, it will now
    call pg_ctl without silent mode. This is useful for
    troubleshooting.
  - Clarify documentation regarding REPLICA IDENTITY requirements
    and support
- drop pglogical-CVE-2021-3515.patch: included in update
- drop do-not-link-unneeded-libs.patch: no longer applicable</changelog>
  <changelog author="mrueckert@suse.de" date="1629115200">- update to 2.4.0
  - Add preliminary support for PostgreSQL 14 (beta)
  - Fix pglogical_show_subscription_table to return row rather than
    set of rows
  - Fix snapshot handling in output plugin and apply worker
  - Fix command quoting on Windows so that it actually works
  - Seems like the API used before has 1024 limit on command line
    length
  - Make sure that the schema syncing process can be interrupted on
    Windows
  - Fix compilation issues with pglogical_create_subscriber on
    Windows
  - Fix double closing of relation when a BEFORE ROW DELETE trigger
    returns NULL in the apply worker
  - Fix multi-insert crash in the SPI apply worker
  - Fix multi-insert doing insert of last tuple multiple times in
    apply worker
  - Make sure debug_query_string is always set Newer versions of
    PostgreSQL require that debug_query_string is always set.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1639569600">- update to 2.4.1
  - Fix "snapshot still active" warnings and snapshot handling with
    domains. Problems introduced in version 2.4.0.
  - Flush error state when having failed to drop remote replication
    slot</changelog>
  <changelog author="mrueckert@suse.de" date="1666440000">- update to 2.4.2
  - Add PG 15 support</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- update to 2.4.3
  - Apply data filtering on the correct tuple during initial
    synchronization.
  - Restore the correct memory context while decoding a change.
  - Drop database never completes in PostgreSQL 15.
  - Don't replicate TRUNCATE as global message.</changelog>
  <changelog author="mrueckert@suse.de" date="1696420800">- update to 2.4.4
  - add support for pg16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727179200">- update to 2.4.5
  - add support for pg17
  - Fix index usage for conflict resolution.
  - Maintain indexes when updating pglogical.sequence_state.
  - Fix build on PostgreSQL 9.4.</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1755950400">- update to 2.4.6
  - Add support for PostgreSQL 18.
  - Fix additional deadlock during DROP DATABASE.
  - Fix incorrect row_filter processing after cache invalidation.</changelog>
  <changelog author="mrueckert@suse.de" date="1755950401">- enable pg18</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1780315200">- update to 2.4.7
  - Add support for PostgreSQL 19.
  - Fix sync worker hang with idle source database.
  - Fix some memory leaks.</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- enable pg19</changelog>
</package>
<package pkgid="5b6a3f0e16a2da336918a1a75f5eaa23351329bd32b5818cb908c7a50ea61a1475e5ea758447c2d2c6b192a218255c0f5a62453b0cb9ee78019a3696aea7271a" name="postgresql18-plperl" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="da2eedbe779c6b94448526d298f8c0e9052cfd7fa354e1986163810f2f1f9ae765a07d3ef7be8262f3a27c1f9ffe7ff8460b0cda73bd13e3e08a4b84e6dd12ae" name="postgresql18-plpython" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="92b6349e37e0fa195438bc41a4903c2f53340daf94f2ef5e1f11714877f2efc6ce5eed4022b341c55368cabbbc186777078434891a9ecbf2d3239c860220e19e" name="postgresql18-pltcl" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="5f3e42e5a34cb8dde71416ad4c61c3740af0c21d2a1d1b404c8329bf9c72ebd1046c422466a8eb637353d689b0958161542f29f6904d2f3c8c7abfbd8ff79a8a" name="postgresql18-server" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="90406f2a003c32690ca68d3643e654c391f7f854675a7d74979a0a123da310f35ea7862ac7ed3f419b580665a53d572e1749e37907abbf9cb801b8535d06787c" name="postgresql18-server-devel" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="e4e7efac4e69f0e9c4eaa8c73b9bf11269f2c7cfd8cd6df5dca0bb47bda251083ce0816921c17790968156b4b94996c6e53cff9469ca360f7f055384740a99aa" name="postgresql18-test" arch="x86_64">
  <version epoch="0" ver="18.4" rel="160099.22.1"/>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- move shared libraries to 19</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1781352000">- Require clang/llvm-devel metapackages instead of directly
  requiring the latest version. With clang migrating away from
  update-alternatives, the versioned packages no longer provide the
  /usr/bin/clang symlink, which will now be contained in the
  metapackage only. If older LLVM versions are required, the
  compiler binary has to be provided via CLANG=clang-&lt;N&gt;.</changelog>
</package>
<package pkgid="cd80185c3314ad8439258d8fbd2707fecabb6cc9b66f8c3794f68d84d4c0be9ec12e3f910875f23398f1c6b34de1cf16f068430eb1d57047007724c955f5344e" name="postgresql19" arch="src">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="1afe5dff4fb84eac8b988f16eb21822ea68809a34454feb3d2d02c1545ef1351cb01973e940aa9473a597031b05888cb7da192aeb47ca4a2fadfa10c30dce52d" name="postgresql19" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="75e0672a8d67bc8cf4e209f15893596f19a18894fe61637bec7f7edc5bca64258bfbaa49598a479d5c817e3dfc4eea3efe5d0ca1f3b2f1f1c5257cc115b5a2b3" name="postgresql19-contrib" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="25f1b12da43e60955a16b2a5de1c90d7e1fd5a2ee0e2907351cfb11c4f110f7a5ee158415393a0deb91289e20ef0c009c971e31c31fb253744dc641bef25a9c3" name="postgresql19-devel" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="10aa809c02912f69811be7d011c4b2b2a7d143a9537e5a7de48cae7d4b278affcaf703219be3362415f0bb9532d7924abf47fcd491ed30459999bb5252990fd9" name="postgresql19-devel-mini" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="f17a2d7b5b23a9942e06a1d35e97867aff3b46629ee546192844ee0317ae2cb7fd3b4cd108ee44b07a707f52220dcea9adf48ce8f8e3cdbe92b05fc5884b8027" name="postgresql19-docs" arch="noarch">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="cda86814a972855f43f36f23b1bec1570cd71b0d3f43779992e560e7f70e01a106912dbbc83ddf9a50b8b778fd24ba82331371f2109a2984903c1842070e5080" name="postgresql19-hypopg" arch="src">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="70ac697f4f408020cc5b24d3b4fa607d65df647e4457eb2927e8d433811a91eb51445e5adef5f4ae7126cbd692a4da0400bfd6b71809bc574fa51d601e34758f" name="postgresql19-hypopg" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1571918400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1571918401">- switch to REL1_STABLE branch to get pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg 13</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- update to 1.3.1
  https://github.com/HypoPG/hypopg/releases/tag/1.2.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.0
  https://github.com/HypoPG/hypopg/releases/tag/1.3.1
- port to postgresql macros
- enable pg 14 and drop unsupported versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695902400">- update to 1.4.0
  https://github.com/HypoPG/hypopg/releases/tag/1.4.0</changelog>
  <changelog author="mrueckert@suse.de" date="1695902401">- enable pg 16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- update to 1.4.1
  https://github.com/HypoPG/hypopg/releases/tag/1.4.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751198400">- update to 1.4.2
  https://github.com/HypoPG/hypopg/releases/tag/1.4.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- disable pg12</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="max@suse.com" date="1778068800">- disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- update to 1.4.3
  https://github.com/HypoPG/hypopg/releases/tag/1.4.3</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg 19</changelog>
</package>
<package pkgid="aa0f6b9ecdf339cdb3d0da8de47efeded79f84af2cb91d2e49c90078ad9b09df061f16026ddd8b280e21bcff2905ba97dd8df87a39df356d78d977c125adfd52" name="postgresql19-llvmjit" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="1bc805f8ef2ced8a80ce9ffba01071aa89ef468d65d0c3f5c81d72db7db23a99cc64db296cd451fe6bf5374d4a655f6abaadcee24c3698896bb09325988f7d73" name="postgresql19-llvmjit-devel" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="e5bb14442de3331f7a4ce2cc06aaa49a4441f8794e373ef271f55ccfce3b2e77e54e39332e66a3634c3ea56378397dde0af89a2c6bb406a46ad5265990ce3b62" name="postgresql19-mini" arch="src">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="803b741edd8163de11db8d8ff6a7ed3944468c6894f6046688ed08f7d59ea11173c276f3f621f881fa4e325007feda032c10fbccc3726be2b87a9d39f95eaccc" name="postgresql19-pg_qualstats" arch="src">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="42acecc151289b0dd9bba95c7db814746d361774b297e7c8ca022360ec89e2073434174c0ba0e5a8250afcb96cc7df993d8f125051d614cb16a753b01aee23e5" name="postgresql19-pg_qualstats" arch="x86_64">
  <version epoch="0" ver="2.1.4" rel="160099.3.1"/>
  <changelog author="mrueckert@suse.de" date="1588680000">- Update to 2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.0</changelog>
  <changelog author="mrueckert@suse.de" date="1598616000">- Update to 2.0.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1601035200">- enable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1623326400">- Update to 2.0.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.3</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- enable postgresql 14
- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1652702400">- Update to 2.0.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- enable pg 15</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1695643200">- Update to 2.1.0
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.0</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727524800">- Update to 2.1.1
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.1
- enable pg17</changelog>
  <changelog author="mrueckert@suse.de" date="1751803200">- Update to 2.1.2
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- enable pg 18</changelog>
  <changelog author="mrueckert@suse.de" date="1760529600">- Update to 2.1.3
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.3</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- Update to 2.1.4
  https://github.com/powa-team/pg_qualstats/releases/tag/2.1.4</changelog>
  <changelog author="mrueckert@suse.de" date="1781956801">- enable pg19</changelog>
</package>
<package pkgid="6f20f75b856662c3847d6b401eb075f544313e3a4ff860dc2f4aa7674451da0825129b7880a106b337a8e32ecae9e83d2fb4fd2f4841788eca6fcaa8807e29ce" name="postgresql19-pglogical" arch="src">
  <version epoch="0" ver="2.4.7" rel="160099.5.1"/>
  <changelog author="mrueckert@suse.de" date="1604232000">- update to 2.3.3
  - This release adds support for PostgreSQL 13.
  - fixes the build against the latest PostgreSQL minor releases
  - pglogical 2.3.1 contains several fixes that prevented users
    from upgrading to version 2.3.0.  The features "Allow
    replicating tables and sequences to different names on the
    target" and "Add option to only synchronize the structure of
    replicated relations" from pglogical 2.3.0 have been removed in
    this release for the time being and will be added again in a
    later release.
- enable pg13</changelog>
  <changelog author="max@suse.com" date="1622116800">- CVE-2021-3515, bsc#1186121, pglogical-CVE-2021-3515.patch:
  Shell injection by pglogical users with CREATEDB access</changelog>
  <changelog author="mrueckert@suse.de" date="1622548800">- update to 2.3.4: (bsc#1186121)
  - Fix pg_dump/pg_restore execution (CVE-2021-3515)
    Correctly escape the connection string for both pg_dump and
    pg_restore so that exotic database and user names are handled
    correctly.  Reported by Pedro Gallegos
  - Assign collation to the index scan key
    When doing lookups for INSERT/UPDATE/DELETE, either to find
    conflicts or key for the operation to be applied, we should use
    correct collation.
    This fixes issues with PostgreSQL 12+ primary key lookups when
    primary key is on column using one of the textual types.
  - Execute pg_ctl with appropriate verbosity in
    pglogical_create_subscriber
    When -v is passed to pglogical_create_subscriber, it will now
    call pg_ctl without silent mode. This is useful for
    troubleshooting.
  - Clarify documentation regarding REPLICA IDENTITY requirements
    and support
- drop pglogical-CVE-2021-3515.patch: included in update
- drop do-not-link-unneeded-libs.patch: no longer applicable</changelog>
  <changelog author="mrueckert@suse.de" date="1629115200">- update to 2.4.0
  - Add preliminary support for PostgreSQL 14 (beta)
  - Fix pglogical_show_subscription_table to return row rather than
    set of rows
  - Fix snapshot handling in output plugin and apply worker
  - Fix command quoting on Windows so that it actually works
  - Seems like the API used before has 1024 limit on command line
    length
  - Make sure that the schema syncing process can be interrupted on
    Windows
  - Fix compilation issues with pglogical_create_subscriber on
    Windows
  - Fix double closing of relation when a BEFORE ROW DELETE trigger
    returns NULL in the apply worker
  - Fix multi-insert crash in the SPI apply worker
  - Fix multi-insert doing insert of last tuple multiple times in
    apply worker
  - Make sure debug_query_string is always set Newer versions of
    PostgreSQL require that debug_query_string is always set.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1639569600">- update to 2.4.1
  - Fix "snapshot still active" warnings and snapshot handling with
    domains. Problems introduced in version 2.4.0.
  - Flush error state when having failed to drop remote replication
    slot</changelog>
  <changelog author="mrueckert@suse.de" date="1666440000">- update to 2.4.2
  - Add PG 15 support</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- update to 2.4.3
  - Apply data filtering on the correct tuple during initial
    synchronization.
  - Restore the correct memory context while decoding a change.
  - Drop database never completes in PostgreSQL 15.
  - Don't replicate TRUNCATE as global message.</changelog>
  <changelog author="mrueckert@suse.de" date="1696420800">- update to 2.4.4
  - add support for pg16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727179200">- update to 2.4.5
  - add support for pg17
  - Fix index usage for conflict resolution.
  - Maintain indexes when updating pglogical.sequence_state.
  - Fix build on PostgreSQL 9.4.</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1755950400">- update to 2.4.6
  - Add support for PostgreSQL 18.
  - Fix additional deadlock during DROP DATABASE.
  - Fix incorrect row_filter processing after cache invalidation.</changelog>
  <changelog author="mrueckert@suse.de" date="1755950401">- enable pg18</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1780315200">- update to 2.4.7
  - Add support for PostgreSQL 19.
  - Fix sync worker hang with idle source database.
  - Fix some memory leaks.</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- enable pg19</changelog>
</package>
<package pkgid="d43faebd18ec331cbe719efa2f3c6e656258cb1cfa4018b00cd35b18ef1ca65fbd771fcaadce643c82f8dd16039ccb48ffa6ff5741ad8a309b88d70f9b0d62d9" name="postgresql19-pglogical" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="160099.5.1"/>
  <changelog author="mrueckert@suse.de" date="1604232000">- update to 2.3.3
  - This release adds support for PostgreSQL 13.
  - fixes the build against the latest PostgreSQL minor releases
  - pglogical 2.3.1 contains several fixes that prevented users
    from upgrading to version 2.3.0.  The features "Allow
    replicating tables and sequences to different names on the
    target" and "Add option to only synchronize the structure of
    replicated relations" from pglogical 2.3.0 have been removed in
    this release for the time being and will be added again in a
    later release.
- enable pg13</changelog>
  <changelog author="max@suse.com" date="1622116800">- CVE-2021-3515, bsc#1186121, pglogical-CVE-2021-3515.patch:
  Shell injection by pglogical users with CREATEDB access</changelog>
  <changelog author="mrueckert@suse.de" date="1622548800">- update to 2.3.4: (bsc#1186121)
  - Fix pg_dump/pg_restore execution (CVE-2021-3515)
    Correctly escape the connection string for both pg_dump and
    pg_restore so that exotic database and user names are handled
    correctly.  Reported by Pedro Gallegos
  - Assign collation to the index scan key
    When doing lookups for INSERT/UPDATE/DELETE, either to find
    conflicts or key for the operation to be applied, we should use
    correct collation.
    This fixes issues with PostgreSQL 12+ primary key lookups when
    primary key is on column using one of the textual types.
  - Execute pg_ctl with appropriate verbosity in
    pglogical_create_subscriber
    When -v is passed to pglogical_create_subscriber, it will now
    call pg_ctl without silent mode. This is useful for
    troubleshooting.
  - Clarify documentation regarding REPLICA IDENTITY requirements
    and support
- drop pglogical-CVE-2021-3515.patch: included in update
- drop do-not-link-unneeded-libs.patch: no longer applicable</changelog>
  <changelog author="mrueckert@suse.de" date="1629115200">- update to 2.4.0
  - Add preliminary support for PostgreSQL 14 (beta)
  - Fix pglogical_show_subscription_table to return row rather than
    set of rows
  - Fix snapshot handling in output plugin and apply worker
  - Fix command quoting on Windows so that it actually works
  - Seems like the API used before has 1024 limit on command line
    length
  - Make sure that the schema syncing process can be interrupted on
    Windows
  - Fix compilation issues with pglogical_create_subscriber on
    Windows
  - Fix double closing of relation when a BEFORE ROW DELETE trigger
    returns NULL in the apply worker
  - Fix multi-insert crash in the SPI apply worker
  - Fix multi-insert doing insert of last tuple multiple times in
    apply worker
  - Make sure debug_query_string is always set Newer versions of
    PostgreSQL require that debug_query_string is always set.</changelog>
  <changelog author="mrueckert@suse.de" date="1636891200">- port to postgresql macros</changelog>
  <changelog author="mrueckert@suse.de" date="1638273600">- switch to %{pg_name}-llvmjit-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- fix postgresql_has_llvm usage</changelog>
  <changelog author="mrueckert@suse.de" date="1639569600">- update to 2.4.1
  - Fix "snapshot still active" warnings and snapshot handling with
    domains. Problems introduced in version 2.4.0.
  - Flush error state when having failed to drop remote replication
    slot</changelog>
  <changelog author="mrueckert@suse.de" date="1666440000">- update to 2.4.2
  - Add PG 15 support</changelog>
  <changelog author="max@suse.com" date="1683806400">- Stop supporting postgresql10</changelog>
  <changelog author="mrueckert@suse.de" date="1685534400">- update to 2.4.3
  - Apply data filtering on the correct tuple during initial
    synchronization.
  - Restore the correct memory context while decoding a change.
  - Drop database never completes in PostgreSQL 15.
  - Don't replicate TRUNCATE as global message.</changelog>
  <changelog author="mrueckert@suse.de" date="1696420800">- update to 2.4.4
  - add support for pg16</changelog>
  <changelog author="mrueckert@suse.de" date="1725883200">- disable pg11 builds as we will remove the EOL package soon</changelog>
  <changelog author="mrueckert@suse.de" date="1727179200">- update to 2.4.5
  - add support for pg17
  - Fix index usage for conflict resolution.
  - Maintain indexes when updating pglogical.sequence_state.
  - Fix build on PostgreSQL 9.4.</changelog>
  <changelog author="mrueckert@suse.de" date="1754654400">- remove pg12 support</changelog>
  <changelog author="mrueckert@suse.de" date="1755950400">- update to 2.4.6
  - Add support for PostgreSQL 18.
  - Fix additional deadlock during DROP DATABASE.
  - Fix incorrect row_filter processing after cache invalidation.</changelog>
  <changelog author="mrueckert@suse.de" date="1755950401">- enable pg18</changelog>
  <changelog author="max@suse.com" date="1778068800">- Disable pg13</changelog>
  <changelog author="mrueckert@suse.de" date="1780315200">- update to 2.4.7
  - Add support for PostgreSQL 19.
  - Fix sync worker hang with idle source database.
  - Fix some memory leaks.</changelog>
  <changelog author="mrueckert@suse.de" date="1781956800">- enable pg19</changelog>
</package>
<package pkgid="c1ad1f71292885b4cf2bab958aba816486638e659f535e3d16ce8c19a3e62dea429542c66c4f7c60c43a63782c4e631acecd2c85819c2ebc426ea9f0d39b0446" name="postgresql19-plperl" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="4e1bd30dad0c94c4ffc709a54114439dede87e11e32c5133f5dbd40776505785dc25b1ec7d285a1f6dc9e8bf13ca9ee79adf9ee272998bfc6a345013dc24ac52" name="postgresql19-plpython" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="ef411e0f88d5508b2517e5390c34bcaa7019d4e717224ca661b1d9107da608fe4f832835883bd20903a2e9148c933068a5ceef7905dd4db8b43113dd824cdd00" name="postgresql19-pltcl" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="7aec491200ed7ee3e06fb6125f5c13aa447bf19bcef74276cc4d339ea3ba2a353965619d3b838851230fa5c417a1134b998040dad0f0ebbe7550d9127e3b2082" name="postgresql19-server" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="b5e4143af066aedf4ae97d041794be639a1d98603a0c4b33237a715bafd113a92e8b3d0c4859a85fecc22e2375020a669badbbd77d247446818f5e9d9621ed21" name="postgresql19-server-devel" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
<package pkgid="4116c940fb958a3307a7169c294b4afc1290db7685baea3de4f3e1e340422518923a968e20d9d5ca9627db514671ba49576b31bcda6a772a9f325a782ff391b4" name="postgresql19-test" arch="x86_64">
  <version epoch="0" ver="19~beta1" rel="160099.2.1"/>
  <changelog author="mrueckert@suse.de" date="1746792000">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
  <changelog author="mrueckert@suse.de" date="1781265600">- Fork off for 19~beta1
  https://www.postgresql.org/about/news/postgresql-19-beta-1-released-3313/
- refresh postgresql-conf.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1781265601">- bump packaging level to 19</changelog>
</package>
</otherdata>