diff options
| author | Nicolas Graves <ngraves@ngraves.fr> | 2024-10-27 00:47:24 +0200 |
|---|---|---|
| committer | Maxim Cournoyer <maxim.cournoyer@gmail.com> | 2024-11-12 17:41:38 +0900 |
| commit | 09bbdc3eadeeec4ffd8ff24a6fb2a07471d2f361 (patch) | |
| tree | 09faa33adf1f525bf985adfef0a2a8b2477d0c6e /gnu/packages/databases.scm | |
| parent | 168001df9639b9b2ebb4a36882b923f3fe627a26 (diff) | |
| download | guix-09bbdc3eadeeec4ffd8ff24a6fb2a07471d2f361.tar.gz guix-09bbdc3eadeeec4ffd8ff24a6fb2a07471d2f361.zip | |
gnu: postgresql-15: Update to 16.4. [security fixes]
This fixes CVE-2024-7348.
* /gnu/packages/databases.scm
(postgresql-15): Move from here...
(postgresql-16): ... to here.
[version]: Update to 16.4.
[source]: Adapt source and add patch.
[native-inputs]: Add pkg-config.
[inputs]: Add icu4c.
* gnu/packages/patches/postgresql-disable-normalize_exec_path.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Change-Id: I57771ebcf462bdeca73eda157274db089816fd12
Diffstat (limited to 'gnu/packages/databases.scm')
| -rw-r--r-- | gnu/packages/databases.scm | 34 |
1 files changed, 28 insertions, 6 deletions
diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm index 17b7a97f87..96eb4b99b5 100644 --- a/gnu/packages/databases.scm +++ b/gnu/packages/databases.scm @@ -1289,18 +1289,19 @@ and high-availability (HA).") (license license:gpl2))) ;'COPYING' says "version 2" only ;; Don't forget to update the other postgresql packages when upgrading this one. -(define-public postgresql-15 +(define-public postgresql-16 (package (name "postgresql") - (version "15.7") + (version "16.4") (source (origin (method url-fetch) (uri (string-append "https://ftp.postgresql.org/pub/source/v" version "/postgresql-" version ".tar.bz2")) (sha256 (base32 - "1xwq1592k1r64ki9bmkcyw39416kymabdfxbkpiqaqxbhnaf8vx4")) - (patches (search-patches "postgresql-disable-resolve_symlinks.patch")))) + "0vvd73rzj0sl294v15bh8yslakqv412bxqzlkqxyjwxa8pb6c5wp")) + (patches (search-patches + "postgresql-disable-normalize_exec_path.patch")))) (build-system gnu-build-system) (arguments (list @@ -1338,8 +1339,10 @@ and high-availability (HA).") (invoke "make" "postgres.info") (install-file "postgres.info" (string-append #$output "/share/info")))))))) - (native-inputs (list docbook-xml-4.5 docbook2x libxml2 perl texinfo)) - (inputs (list readline `(,util-linux "lib") openssl zlib)) + (native-inputs + (list docbook-xml-4.5 docbook2x libxml2 perl pkg-config texinfo)) + (inputs + (list icu4c readline `(,util-linux "lib") openssl zlib)) (home-page "https://www.postgresql.org/") (synopsis "Powerful object-relational database system") (description @@ -1351,6 +1354,25 @@ TIMESTAMP. It also supports storage of binary large objects, including pictures, sounds, or video.") (license (license:x11-style "file://COPYRIGHT")))) +(define-public postgresql-15 + (package + (inherit postgresql-16) + (name "postgresql") + (version "15.8") + (source (origin + (inherit (package-source postgresql-16)) + (uri (string-append "https://ftp.postgresql.org/pub/source/v" + version "/postgresql-" version ".tar.bz2")) + (sha256 + (base32 + "0snbxmlygf7m4cxjpscmz3yjn4lnqsw313y9xgpv7vk9k9gm20s4")) + (patches (search-patches + "postgresql-disable-resolve_symlinks.patch")))) + (native-inputs (modify-inputs (package-native-inputs postgresql-16) + (delete "pkg-config"))) + (inputs (modify-inputs (package-inputs postgresql-16) + (delete "icu4c"))))) + (define-public postgresql-14 (package (inherit postgresql-15) |