mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-22 07:14:56 -09:00
2456e44d67
https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/ "This release skips PostgreSQL 18 versions from PostgreSQL 18.4 to 18.6. 18.5 was not shipped due to a regression." Fixes the following CVEs: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands (CVSS v3.1: 8.1) CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership (CVSS v3.1: 3.8) CVE-2026-6470: Fails to check type USAGE privilege (CVSS v3.1: 4.3) CVE-2026-6471: Logical decoding can dlopen arbitrary file (CVSS v3.1: 7.2) CVE-2026-14662: tsvector and tsquery undersize allocations, via integer wraparound (CVSS v3.1: 8.8) CVE-2026-14663: pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext (CVSS v3.1: 6.5) CVE-2026-14664: Regexp heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8) CVE-2026-14666: Row security caching disregards role modifications (CVSS v3.1: 4.2) CVE-2026-14668: ctid type confusion in selectivity estimator discloses derivative of arbitrary read (CVSS v3.1: 8.1) CVE-2026-14669: to_char heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8) CVE-2026-14670: plperl tied object heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8) CVE-2026-14671: refint plan cache type confusion executes arbitrary code (CVSS v3.1: 8.8) CVE-2026-14672: Observable response discrepancy with non-default scram_iterations provides user existence oracle (CVSS v3.1: 5.3) CVE-2026-14673: amcheck does not clear untrusted search path (CVSS v3.1: 3.8) CVE-2026-14676: pg_stat_statements heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8) CVE-2026-14677: 32-bit pltcl and plperl undersize allocations, via integer wraparound (CVSS v3.1: 8.8) CVE-2026-14678: pg_trgm picksplit reads past end of buffer (CVSS v3.1: 4.3) CVE-2026-14679: Stack buffer overflow in argument match writes 0x0 and 0x1 to server memory (CVSS v3.1: 8.2) CVE-2026-14680: Type confusion via "internal" arguments (CVSS v3.1: 8.8) CVE-2026-14681: Improper enforcement of GSSAPI encryption when coupled with SSL (CVSS v3.1: 4.2) CVE-2026-15741: Expression deparse allows SQL injection via EXTRACT argument (CVSS v3.1: 8.8) CVE-2026-15742: fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound (CVSS v3.1: 8.8) CVE-2026-16238: Type confusion in pg_restore_attribute_stats() executes arbitrary code (CVSS v3.1: 8.8) CVE-2026-16239: Type confusion in cursor CLOSE + DECLARE executes arbitrary code (CVSS v3.1: 8.8) CVE-2026-16241: ECPG integer underflow can crash the client (CVSS v3.1: 3.8) CVE-2026-18024: ascii() function reads past end of buffer (CVSS v3.1: 4.3) CVE-2026-18408: psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client (CVSS v3.1: 8.8) CVE-2026-19385: pg_dump heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8) Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
151 lines
4.3 KiB
Makefile
151 lines
4.3 KiB
Makefile
################################################################################
|
|
#
|
|
# postgresql
|
|
#
|
|
################################################################################
|
|
|
|
POSTGRESQL_VERSION = 18.6
|
|
POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2
|
|
POSTGRESQL_SITE = https://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION)
|
|
POSTGRESQL_LICENSE = PostgreSQL
|
|
POSTGRESQL_LICENSE_FILES = COPYRIGHT
|
|
POSTGRESQL_CPE_ID_VENDOR = postgresql
|
|
POSTGRESQL_SELINUX_MODULES = postgresql
|
|
POSTGRESQL_INSTALL_STAGING = YES
|
|
POSTGRESQL_CONFIG_SCRIPTS = pg_config
|
|
POSTGRESQL_LDFLAGS = $(TARGET_LDFLAGS) $(TARGET_NLS_LIBS)
|
|
# We have to force invalid paths for xmllint and xsltproc, otherwise
|
|
# if detected they get used, even with -Ddocs=disabled and
|
|
# -Ddocs_pdf=disabled, and it causes build failures
|
|
POSTGRESQL_CONF_OPTS = \
|
|
-Drpath=false \
|
|
-Ddocs=disabled \
|
|
-Ddocs_pdf=disabled \
|
|
-DXMLLINT=/nowhere \
|
|
-DXSLTPROC=/nowhere
|
|
POSTGRESQL_DEPENDENCIES = \
|
|
$(TARGET_NLS_DEPENDENCIES) \
|
|
host-bison \
|
|
host-flex
|
|
|
|
ifeq ($(BR2_PACKAGE_POSTGRESQL_FULL),y)
|
|
POSTGRESQL_NINJA_OPTS += world
|
|
POSTGRESQL_INSTALL_TARGET_OPTS += DESTDIR=$(TARGET_DIR) install-world
|
|
POSTGRESQL_INSTALL_STAGING_OPTS += DESTDIR=$(STAGING_DIR) install-world
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_READLINE),y)
|
|
POSTGRESQL_DEPENDENCIES += readline
|
|
POSTGRESQL_CONF_OPTS += -Dreadline=enabled
|
|
else
|
|
POSTGRESQL_CONF_OPTS += -Dreadline=disabled
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_ZLIB),y)
|
|
POSTGRESQL_DEPENDENCIES += zlib
|
|
POSTGRESQL_CONF_OPTS += -Dzlib=enabled
|
|
else
|
|
POSTGRESQL_CONF_OPTS += -Dzlib=disabled
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_TZDATA),y)
|
|
POSTGRESQL_DEPENDENCIES += tzdata
|
|
POSTGRESQL_CONF_OPTS += -Dsystem_tzdata=/usr/share/zoneinfo
|
|
else
|
|
POSTGRESQL_DEPENDENCIES += host-zic
|
|
POSTGRESQL_CONF_ENV += ZIC="$(ZIC)"
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
|
POSTGRESQL_DEPENDENCIES += openssl
|
|
POSTGRESQL_CONF_OPTS += -Dssl=openssl
|
|
else
|
|
POSTGRESQL_CONF_OPTS += -Dssl=none
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENLDAP),y)
|
|
POSTGRESQL_DEPENDENCIES += openldap
|
|
POSTGRESQL_CONF_OPTS += -Dldap=enabled
|
|
else
|
|
POSTGRESQL_CONF_OPTS += -Dldap=disabled
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_ICU),y)
|
|
POSTGRESQL_DEPENDENCIES += icu
|
|
POSTGRESQL_CONF_OPTS += -Dicu=enabled
|
|
else
|
|
POSTGRESQL_CONF_OPTS += -Dicu=disabled
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBXML2),y)
|
|
POSTGRESQL_DEPENDENCIES += libxml2
|
|
POSTGRESQL_CONF_OPTS += -Dlibxml=enabled
|
|
POSTGRESQL_CONF_ENV += XML2_CONFIG=$(STAGING_DIR)/usr/bin/xml2-config
|
|
else
|
|
POSTGRESQL_CONF_OPTS += -Dlibxml=disabled
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_ZSTD),y)
|
|
POSTGRESQL_DEPENDENCIES += host-pkgconf zstd
|
|
POSTGRESQL_CONF_OPTS += -Dzstd=enabled
|
|
else
|
|
POSTGRESQL_CONF_OPTS += -Dzstd=disabled
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LZ4),y)
|
|
POSTGRESQL_DEPENDENCIES += host-pkgconf lz4
|
|
POSTGRESQL_CONF_OPTS += -Dlz4=enabled
|
|
else
|
|
POSTGRESQL_CONF_OPTS += -Dlz4=disabled
|
|
endif
|
|
|
|
# required for postgresql.service Type=notify
|
|
ifeq ($(BR2_PACKAGE_SYSTEMD),y)
|
|
POSTGRESQL_DEPENDENCIES += systemd
|
|
POSTGRESQL_CONF_OPTS += -Dsystemd=enabled
|
|
else
|
|
POSTGRESQL_CONF_OPTS += -Dsystemd=disabled
|
|
endif
|
|
|
|
POSTGRESQL_CFLAGS = $(TARGET_CFLAGS)
|
|
|
|
ifneq ($(BR2_TOOLCHAIN_HAS_GCC_BUG_43744)$(BR2_TOOLCHAIN_HAS_GCC_BUG_85180),)
|
|
POSTGRESQL_CFLAGS += -O0
|
|
endif
|
|
|
|
POSTGRESQL_CONF_ENV += CFLAGS="$(POSTGRESQL_CFLAGS)"
|
|
|
|
define POSTGRESQL_USERS
|
|
postgres -1 postgres -1 * /var/lib/pgsql /bin/sh - PostgreSQL Server
|
|
endef
|
|
|
|
define POSTGRESQL_INSTALL_TARGET_FIXUP
|
|
$(INSTALL) -dm 0700 $(TARGET_DIR)/var/lib/pgsql
|
|
$(RM) -rf $(TARGET_DIR)/usr/lib/postgresql/pgxs
|
|
endef
|
|
|
|
POSTGRESQL_POST_INSTALL_TARGET_HOOKS += POSTGRESQL_INSTALL_TARGET_FIXUP
|
|
|
|
define POSTGRESQL_INSTALL_CUSTOM_PG_CONFIG
|
|
$(INSTALL) -m 0755 -D package/postgresql/pg_config \
|
|
$(STAGING_DIR)/usr/bin/pg_config
|
|
$(SED) "s|@POSTGRESQL_CONF_OPTIONS@|$(POSTGRESQL_CONF_OPTS)|g" $(STAGING_DIR)/usr/bin/pg_config
|
|
$(SED) "s|@POSTGRESQL_VERSION@|$(POSTGRESQL_VERSION)|g" $(STAGING_DIR)/usr/bin/pg_config
|
|
$(SED) "s|@TARGET_CFLAGS@|$(TARGET_CFLAGS)|g" $(STAGING_DIR)/usr/bin/pg_config
|
|
$(SED) "s|@TARGET_CC@|$(TARGET_CC)|g" $(STAGING_DIR)/usr/bin/pg_config
|
|
endef
|
|
|
|
POSTGRESQL_POST_INSTALL_STAGING_HOOKS += POSTGRESQL_INSTALL_CUSTOM_PG_CONFIG
|
|
|
|
define POSTGRESQL_INSTALL_INIT_SYSV
|
|
$(INSTALL) -m 0755 -D package/postgresql/S50postgresql \
|
|
$(TARGET_DIR)/etc/init.d/S50postgresql
|
|
endef
|
|
|
|
define POSTGRESQL_INSTALL_INIT_SYSTEMD
|
|
$(INSTALL) -D -m 644 package/postgresql/postgresql.service \
|
|
$(TARGET_DIR)/usr/lib/systemd/system/postgresql.service
|
|
endef
|
|
|
|
$(eval $(meson-package))
|