postgresql-8.0 (8.0.7-2build1) dapper; urgency=low * Fake sync from Debian. -- Martin Pitt Mon, 13 Mar 2006 18:52:08 +0100 postgresql-8.0 (8.0.7-2) unstable; urgency=low * debian/patches/07-relax-sslkey-permscheck.patch: Do not check for any particular group if the SSL key is group readable, to allow sharing a common SSL certificate with other server processes. * Fix CVE in previous changelog. * Re-enable 'do not run as root' check from upstream: - Move debian/patches/12-disable-root-check.patch to debian/disable-root-check.patch. - debian/rules: Move test suite to binary/predeb and apply disable-root-check.patch manually right before calling the test suite. - With this, the test suite can happily run as (fake)root during package build without disabling the check in the actual packages. -- Martin Pitt Mon, 13 Mar 2006 11:33:58 +0100 postgresql-8.0 (8.0.7-1) unstable; urgency=low * New upstream bugfix release: - Fix potential crash in "SET SESSION AUTHORIZATION" (CVE-2006-0678). An unprivileged user could crash the server process, resulting in momentary denial of service to other users, if the server has been compiled with Asserts enabled (which is not the default). Thanks to Akio Ishida for reporting this problem. - See the upstream HISTORY file for a detailled list of other bug fixes. * debian/control: Add ${shlibs:Depends} to packages which need it. (See bug #348066). * debian/rules: Use --as-needed linker option to avoid excessive library dependencies. * debian/control: Remove unnecessary dependencies from PL/Python and PL/Tcl packages. -- Martin Pitt Fri, 17 Feb 2006 13:08:20 +0100 postgresql-8.0 (8.0.6-1) unstable; urgency=medium * New upstream bugfix release: - Fix bug introduced in 8.0 that could allow ReadBuffer to return an already-used page as new, potentially causing loss of recently-committed data. - Fix for protocol-level Describe messages issued outside a transaction or in a failed transaction. - Fix character string comparison for locales that consider different character combinations as equal, such as Hungarian. This might require "REINDEX" to fix existing indexes on textual columns. - Set locale environment variables during postmaster startup to ensure that plperl won't change the locale later. This fixes a problem that occurred if the postmaster was started with environment variables specifying a different locale than what initdb had been told. Under these conditions, any use of plperl was likely to lead to corrupt indexes. You may need "REINDEX" to fix existing indexes on textual columns if this has happened to you. (postgresql-common already checks this condition and aborts on it.) - Allow more flexible relocation of installation directories. Previous releases supported relocation only if all installation directory paths were the same except for the last component. (This makes the test suite work with Debian's directory structure, so that the horology test can find the timezones again and pass.) - Fix longstanding bug in strpos() and regular expression handling in certain rarely used Asian multi-byte character sets. - Various fixes for functions returning RECORDs. - Fix bug in "/contrib/pgcrypto" gen_salt, which caused it not to use all available salt space for MD5 and XDES algorithms. Salts for Blowfish and standard DES are unaffected. - Fix "/contrib/dblink" to throw an error, rather than crashing, when the number of columns specified is different from what's actually returned by the query. * Remove debian/patches/11-testsuite-ignore-horology.patch: Obsolete, horology test should now work. -- Martin Pitt Mon, 9 Jan 2006 19:00:55 +0100 postgresql-8.0 (8.0.5-1) unstable; urgency=low * New upstream bugfix release, relevant changes: - Fix race condition in transaction log management. - Fix bgwriter problems after recovering from errors. - Prevent failure if client sends Bind protocol message when current transaction is already aborted. - "/contrib/ltree" fixes. - Fix intermittent failure when log_line_prefix includes %i. - Fix missing updates of "pg_group" flat file. - Fix longstanding planning error for outer joins. - Postpone timezone initialization until after "postmaster.pid" is created. This avoids confusing startup scripts that expect the pid file to appear quickly. - Prevent core dump in pg_autovacuum when a table has been dropped. - Fix problems with whole-row references (foo.*) to subquery results. * Remove debian/patches/08-pg_group-update.patch (upstream now). * debian/postgresql-8.0.postrm: Check if a /etc/postgresql/8.0 subdirectory is really a cluster directory before trying to remove it. Closes: #342349 * debian/postgresql-8.0.postrm: Also clean start.conf if purging without pg_dropcluster. * Remove debian/patches/13-server-includedir.patch and fix --includedir configure parameter. This was an obsolete modification from the time when libpq was built from 8.0. Now p-server-dev-8.0 does not break the builds of server extensions any more. Closes: #342583 * debian/control: Remove useless libpq-dev dependency of p-server-dev-8.0. * postgresql-server-dev-8.0, Makefile.global: Change CC and CPP variables back to the canonical 'cc' and 'cc -E' values. Closes: #342740 * debian/rules: Fail the build if the test suite fails. This will happen on mips and mipsel, PostgreSQL does not work on these architectures. The mips and mipsel binaries will be removed from sid and testing. Closes: #330296 * Add debian/patches/11-testsuite-ignore-horology.patch: Ignore 'horology' test suite failure for now until the test suite can be persuaded to use the timezone data from the temporary installation instead of the installed system. * Add debian/patches/11-testsuite-ignore-stats.patch: Ignore 'stats' test suite failure for now until buildds are fixed which cannot resolve 'localhost'. -- Martin Pitt Tue, 20 Dec 2005 18:35:24 +0100 postgresql-8.0 (8.0.4-4) unstable; urgency=low * postgresql-server-dev-8.0: Ship pg_config again, since many people still seem to need 8.0. But pretty please, do not add dependencies to 8.0 to Sid any more. -- Martin Pitt Sun, 4 Dec 2005 14:46:04 +0100 postgresql-8.0 (8.0.4-3) unstable; urgency=low * Install ecpg into /usr/bin instead of /usr/lib/postgresql/... Closes: #336571 * Do not build the client libraries, they are now built from the postgresql-8.1 source package. * Add build dependency libpq-dev. -- Martin Pitt Sat, 5 Nov 2005 18:18:31 -0500 postgresql-8.0 (8.0.4-2) unstable; urgency=low * debian/postgresql-8.0.postrm: clean_dir(): Ensure that directory is not a symbolic link before attempting to rmdir it. Closes: #334967 * Add debian/patches/08-pg_group-update.patch: - Properly update pg_group when adding users. Thanks to Dennis Vshivkov. - Closes: #333854 * Clean up the installation path ./configure arguments and make pg_config report the correct libdir. - debian/rules: Use default libdir /usr/lib. - Add debian/patches/14-pkglibdir.patch: Set pkglibdir to /usr/lib/postgresql/8.0/lib instead of /usr/lib/postgresql. - Adapt debian/*.install. - Closes: #333276 -- Martin Pitt Wed, 26 Oct 2005 20:14:53 +0100 postgresql-8.0 (8.0.4-1) unstable; urgency=low * New upstream bugfix release. * Updated patches to new upstream release: - 03-gettext-domains.patch - 05-check-rlimits-nofile.patch * Removed patches which are included upstream: - 08-timezone-inttimestamps.patch - 14-s_lock-platforms.patch -- Martin Pitt Thu, 6 Oct 2005 20:06:57 +0200 postgresql-8.0 (8.0.3-16) unstable; urgency=medium * Urgency medium since this fixes two release critical bugs in testing. * libpq-dev: Add missing dependency libssl-dev. Closes: #327380 * Add debian/patches/07-relax-sslkey-permscheck.patch: - Relax security check on private SSL key file: The file is also considered safe if it has owner and/or group "root", and if it is group-readable (unless the group is something other than root or the database owner group). - Closes: #327901 * Build with gcc 3.3 on ia64, hppa, mips, mipsel, and sparc. Building with gcc 4.0 causes bus errors. See bug #329197. -- Martin Pitt Wed, 21 Sep 2005 23:20:27 +0200 postgresql-8.0 (8.0.3-15) unstable; urgency=low * debian/postgresql-8.0.postrm: Do not remove an empty /var/log/postgresql, postgresql-common now cares for it to not break log rotation. (See #325330) * debian/libpq-dev.install: Install additional include files into the correct path to not render some packages like pygresql FTBFS. These packages should not use server include files in the first place, though. * Use m68k and mips patches from upstream CVS now: - Remove debian/patches/11-s_lock.h-m68k.patch - Remove debian/patches/14-mips-gcc4.patch - Add debian/patches/14-s_lock-platforms.patch, which now contains the upstream modifications for both platforms. -- Martin Pitt Mon, 5 Sep 2005 15:54:17 +0200 postgresql-8.0 (8.0.3-14) unstable; urgency=low * debian/postgresql-8.0.prerm: Add missing VERSION definition. * Remove debian/patches/06-default-authmethod.patch and debian/patches/07-postgresql.conf.patch: pg_createcluster does this now. Bump p-common version dependency to 24. * debian/patches/14-mips-gcc4.patch: (Hopefully) fix patch to actually compile. -- Martin Pitt Tue, 23 Aug 2005 22:30:49 +0200 postgresql-8.0 (8.0.3-13) unstable; urgency=low * debian/control: Fix libpq4 description, it is compatible with servers starting from 7.3. * Move back client include files to /usr/include/postgresql/ for now to not render all client packages unbuildable which have not yet converted to pg_config: - debian/rules: Configure with include dir /usr/include/postgresql. - debian/libecpg-dev.install, debian/libpq-dev.install: Install files from and to /usr/include/postgresql - Add debian/patches/13_server_includedir.patch: Change server include directory back to /usr/include/postgresql/8.0/server since we do want to keep apart server include files. - Closes: #322085 * Drop obsolete xml contrib module, build and ship xml2 instead: - Remove debian/patches/51-contrib-xml-enable.patch - Add debian/patches/51-contrib-xml2-enable.patch - debian/control: Add build dependency libxslt1-dev. - debian/postgresql-contrib-8.0.install: Ship pgxml.so, drop pgxml_dom.so. - Closes: #322777 * Add debian/patches/14-mips-gcc4.patch: - Add a proper test-and-set function for mips and mipsel. Thanks to Thiemo Seufer for the patch and Aurelien Jarno for his help. This now also works with gcc 4. * debian/rules: Remove the --disable-spinlocks option for mips again, now that we have a proper patch for that. -- Martin Pitt Sat, 20 Aug 2005 17:34:01 +0200 postgresql-8.0 (8.0.3-12) unstable; urgency=low * debian/rules: - Robustify log output in case of a failed test suite; also print out regression.diffs if it fails. Closes: #319218 - Don't run the test suite if DEB_BUILD_OPTIONS contains "nocheck". * Add debian/check_installed_files to check for upstream installed files which are not shipped in any deb. * debian/postgresql-contrib-8.0.install: Ship pgxml_dom.so. Closes: #318922 -- Martin Pitt Sun, 24 Jul 2005 17:35:56 +0200 postgresql-8.0 (8.0.3-11) unstable; urgency=low * Add debian/patches/12-disable-root-check.patch: Disable "am I root" test in initdb and postmaster to be able to run the test suite at build time. This check is already done in pg_createcluster. * debian/rules: Remove all the chown/setuid crack and simply call "make check" now; print the log files if the test fails. * debian/patches/10-testsuite-params.patch: Disable authentication in the test suite db since ident authentication does not work with fakeroot. -- Martin Pitt Fri, 15 Jul 2005 13:31:51 +0300 postgresql-8.0 (8.0.3-10) unstable; urgency=low * debian/rules: If the test suite fails, don't let the build fail but rather cat the log files. Once the test suite calling works reliably, the previous behaviour can be restored. -- Martin Pitt Thu, 14 Jul 2005 14:19:30 +0300 postgresql-8.0 (8.0.3-9) unstable; urgency=low * Bump Standards-Version to 3.6.2. * debian/rules: Use start-stop-daemon instead of su to call the test suite since su requires a terminal. * debian/rules: Disable spinlocks on mips and mipsel for now since they FTBFS with gcc-4.0. -- Martin Pitt Wed, 13 Jul 2005 22:22:59 +0300 postgresql-8.0 (8.0.3-8) unstable; urgency=low * postgresql-client-8.0: Now suggest postgresql-8.0; clarified the description wrt the server package (see #313247). * Fix README.Debian symlink. * Add debian/patches/10-testsuite-params.patch: Use /tmp as the socket directory when running the test suite. * debian/rules: Call the test suite when building the package. Since creating databases as root is not permitted, do this as "nobody" if run by root (as on the buildds); don't do it at all if run with fakeroot. -- Martin Pitt Tue, 12 Jul 2005 19:10:03 +0300 postgresql-8.0 (8.0.3-7) unstable; urgency=low * Removed some redundant configure options which cdbs applies anyway. * configure with --enable-thread-safety-force on HPPA since the configure check triggers a kernel bug on the buildd. (See #315440) * debian/postgresql-8.0.init: autovac-* functions in postgresql-common were renamed to autovac_* to comply to POSIX shell standard (see #315551). Adaped dependencies. -- Martin Pitt Sun, 26 Jun 2005 14:23:32 +0200 postgresql-8.0 (8.0.3-6) unstable; urgency=low * Added debian/postgresql-8.0.links: Symlink README.Debian from postgresql-common. * Added debian/patches/08-timezone-inttimestamps.patch (stolen from CVS head): Fix integer timestamps in time zone handling. Closes: #249417, #311533. * debian/rules: Fix POT file generation. * Added debian/patches/09-libpq-defaultsocketdir.patch: - Set default socket directory for libpq to /var/run/postgresql. Closes: #313507, #313602 * Adjusted packages to follow upstream library SONAME change in 8.0.3: libecpg4 -> libecpg5, libecpg-compat1 -> libecpg-compat2, libpgtypes1 -> libpgtypes2. Closes: #313452, #313453, #313454 -- Martin Pitt Tue, 14 Jun 2005 19:58:10 +0200 postgresql-8.0 (8.0.3-5) unstable; urgency=low * debian/rules: Generate POT files to help translators. * Added debian/libpq-dev.manpages: Install pg_wrapper(1) manpage. Closes: #311671 * debian/control: Restrict libpq-dev conflict to postgresql-dev to versions << 7.5. Closes: #312827 -- Martin Pitt Fri, 10 Jun 2005 19:01:20 +0200 postgresql-8.0 (8.0.3-4) unstable; urgency=low * First unstable upload. * debian/control: Now build with libreadline5-dev instead of version 4. -- Martin Pitt Tue, 7 Jun 2005 12:15:43 +0200 postgresql-8.0 (8.0.3-3) experimental; urgency=low * Added libpq4 dependency to libpq-dev. * postgresql-contrib-8.0.install: Correct paths to install missing shared files and documentation. (Closes: #311553) * libpq-dev.install: Install some more header files from server/ which are required by client libraries. -- Martin Pitt Mon, 6 Jun 2005 12:24:57 +0200 postgresql-8.0 (8.0.3-2) experimental; urgency=low * Added CAN numbers to previous changelog entries. * debian/patches/07-postgresql.conf.patch: Enable listen_addresses = '*' by default. * debian/control, libpq-dev: Conflict to and replace postgresql-dev. -- Martin Pitt Tue, 31 May 2005 11:09:48 +0200 postgresql-8.0 (8.0.3-1) experimental; urgency=low * New upstream release: - Prevent calling conversion functions by users. [CAN-2005-1409] - Prevent calling tsearch2 functions by users. [CAN-2005-1410] * debian/libpq-dev.{install,links}: Install pg_config into /usr/lib/postgresql/8.0/bin to make it print correct paths, and install a symlink into /usr/bin instead. Closes: #305200 * debian/rules: Change include dir configure option to /usr/include/postgresql/8.0, so that different versions of postgresql-server-dev- do not conflict with each other. Since applications using the libpq-dev are supposed to use pg_config, this should not break them either. -- Martin Pitt Thu, 12 May 2005 23:37:56 +0200 postgresql-8.0 (8.0.2-1) experimental; urgency=low * New upstream release: - Removed debian/patches/02-libpq-soname.patch, upstream adopted SONAME change to libpq4. * Ship "reindexdb" in -contrib. * Added debian/patches/02_pager.patch: Use /usr/bin/pager as default pager in psql. Closes: #304459 * Added debian/postgresql-doc-8.0.doc-base: Register doc package in doc-base. -- Martin Pitt Tue, 19 Apr 2005 21:19:50 +1000 postgresql-8.0 (8.0.1-4) experimental; urgency=low * Ship pg_config in libpq-dev instead of postgresql-8.0; added proper package conflict. Closes: #303257 * Install pg_config in /usr/bin instead of 8.0-specific bin dir. Closes: #302368 * debian/postgresql-8.0.init: Added autovacuum functions. -- Martin Pitt Tue, 5 Apr 2005 23:15:31 +0200 postgresql-8.0 (8.0.1-3) experimental; urgency=low * Dropped pgxs package, the Makefiles are now part of postgresql-server-dev. * -contrib: Only recommend, not depend on libpg-perl and libdbd-pg-perl. * Renamed packages pg-pl*-8.0 to postgresql-pl*-8.0 for consistency. * Added debian/patches/07-postgresql.conf.patch: - Patch for Debian changes to the default configuration. - Enable stats_row_level to allow pg_autovacuum to work. -- Martin Pitt Sat, 2 Apr 2005 18:21:57 +0200 postgresql-8.0 (8.0.1-2) experimental; urgency=low * Changed dependency of pg-pltcl-8.0 from libtcl8.4 to tcl8.4 * Now depend on postgresql-common >= 3 which provides more maintainer script functions. * Compress manpages. -- Martin Pitt Sun, 20 Mar 2005 21:23:10 +0100 postgresql-8.0 (8.0.1-1) experimental; urgency=low * New upstream release. Closes: #274043, #291350 - Ignores shell backticks with invalid meta-commands. Closes: #285844 - Fixes uninitialized error strings when connecting to a server which is down. Closes: #264603, #277757 - configure script supports GNU/Hurd and GNU/k*BSD. Closes: #262081 - Fixes comma splices in HTML documentation. Closes: #243781 - Now upper() and lower() work also for Unicode characters. Closes: #139389, #290118, #290399 - New configuration variable max_stack_depth which prevents DoS situations due to infinite recursion. Closes: #239811 - Reportedly works with Turkish locale. Closes: #305886 - This version is not vulnerable against the following security issues: . Load arbitrary shared libs, execute startup function [CAN-2005-0227] . Execute functions with aggregate wrapper [CAN-2005-0244] . Buffer overflow and 64-bit issues in contrib/intagg [CAN-2005-0246] . Buffer overflows in the PL/PGSQL parser in gram.y [CAN-2005-0247] . Insecure temporary files in make_oidjoins_check [CAN-2004-0977] * Splitted development package into libpq-dev and postgresql-server-dev. Closes: #280417 * Splitted libecpg4 into libecpg4, libecpg-compat1 and libpgtypes1. * Old libpgtcl package does not exist any more. The PL/TCL procedural language is now shipped in pg-pltcl8.0, the TCL client library is not shipped by PostgreSQL any more. Closes: #280418 * Now use /var/lib/postgresql/ as (default) data directory. Closes: #285929 -- Martin Pitt Sun, 20 Feb 2005 19:17:17 +0100