[packages/postgresql/POSTGRESQL_15] up to 15.19 (multiple security fixes)

[arekm]

commit 514c325a9cbaceec5420f202302abf513ceead93
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Thu Aug 13 22:49:35 2026 +0200

    up to 15.19 (multiple security fixes)
    
    Also drop dead/obsolete patches.
    
    CVE-2026-6471, CVE-2026-14663, CVE-2026-6464, CVE-2026-16239, CVE-2026-14669,
    CVE-2026-14664, CVE-2026-18024, CVE-2026-16238, CVE-2026-14668, CVE-2026-14662,
    CVE-2026-14679, CVE-2026-14680, CVE-2026-6469, CVE-2026-15741, CVE-2026-6470,
    CVE-2026-14666, CVE-2026-14681, CVE-2026-14672, CVE-2026-16241, CVE-2025-8714,
    CVE-2026-18408, CVE-2026-19385, CVE-2026-14670, CVE-2026-6473, CVE-2026-14677,
    CVE-2026-14673, CVE-2026-15742, CVE-2026-14676, CVE-2026-14678, CVE-2026-14671,
    CVE-2026-6637

 ac.patch                          | 13 +++----------
 postgresql-absolute_dbpaths.patch | 11 -----------
 postgresql.spec                   | 16 ++++++----------
 3 files changed, 9 insertions(+), 31 deletions(-)
---
diff --git a/postgresql.spec b/postgresql.spec
index d0eaf41..cc08a9f 100644
--- a/postgresql.spec
+++ b/postgresql.spec
@@ -16,8 +16,6 @@
 %bcond_without	selinux			# sepgsql contrib module
 %bcond_without	systemd			# systemd (notify) support
 %bcond_with	systemtap		# systemtap/dtrace probes
-%bcond_with	absolute_dbpaths	# enable absolute paths to create database
-					# (disabled by default because it is a security risk)
 #
 
 %define mver 15
@@ -33,12 +31,12 @@ Summary(tr.UTF-8):	Veri Tabanı Yönetim Sistemi
 Summary(uk.UTF-8):	PostgreSQL - система керування базами даних
 Summary(zh_CN.UTF-8):	PostgreSQL 客户端程序和库文件
 Name:		postgresql
-Version:	%{mver}.18
-Release:	2
+Version:	%{mver}.19
+Release:	1
 License:	BSD
 Group:		Applications/Databases
 Source0:	https://ftp.postgresql.org/pub/source/v%{version}/%{name}-%{version}.tar.bz2
-# Source0-md5:	bcf6d9b634d0950e74cdf332dee32ef8
+# Source0-md5:	40f950b7f4b235e6e9d563a6bc43826e
 Source1:	%{name}.init
 Source2:	pgsql-Database-HOWTO-html.tar.gz
 # Source2-md5:	5b656ddf1db41965761f85204a14398e
@@ -47,7 +45,6 @@ Source4:	%{name}@.service
 Source5:	%{name}.service
 Source6:	%{name}.target
 Patch0:		%{name}-conf.patch
-Patch1:		%{name}-absolute_dbpaths.patch
 Patch2:		%{name}-ecpg-includedir.patch
 Patch3:		ac.patch
 Patch5:		%{name}-heimdal.patch
@@ -129,6 +126,7 @@ BuildRoot:	%{tmpdir}/%{name}-%{version}-root-%(id -u -n)
 
 %define		_ulibdir	/usr/lib
 
+# clang, used for the LLVM JIT bitcode, errors out on this GCC-only flag
 %define          filterout_c     -fvar-tracking-assignments
 %define          filterout_cxx   -fvar-tracking-assignments
 
@@ -800,7 +798,6 @@ Różne moduły dołączone do PostgreSQL-a.
 %prep
 %setup -q
 %patch -P0 -p1
-%{?with_absolute_dbpaths:%patch -P1 -p1}
 %patch -P2 -p1
 %patch -P3 -p1
 %patch -P5 -p1
@@ -820,7 +817,7 @@ march="-mx32"
 %{__autoconf}
 %{__autoheader}
 %configure \
-	CFLAGS="%{rpmcflags} $march -DNEED_REENTRANT_FUNCS" \
+	CFLAGS="%{rpmcflags} $march" \
 	CPPFLAGS="%{rpmcppflags} $march" \
 	CXXFLAGS="%{rpmcxxflags} $march" \
 	BITCODE_CFLAGS="%{rpmcflags}" \
@@ -828,7 +825,6 @@ march="-mx32"
 	--disable-rpath \
 	--enable-depend \
 	%{?with_systemtap:--enable-dtrace} \
-	--enable-integer-datetimes \
 	--enable-nls \
 	--enable-thread-safety \
 	%{?with_bonjour:--with-bonjour} \
@@ -850,7 +846,7 @@ march="-mx32"
 %{__make}
 
 for mod in %{contrib_modules}; do \
-	flags="%{rpmcflags} %{rpmcppflags} -DNEED_REENTRANT_FUNCS"
+	flags="%{rpmcflags} %{rpmcppflags}"
 	if [ $mod = "xml2"      ]; then flags="$flags -I/usr/include/libxml2"; fi
 	%{__make} -C contrib/$mod CFLAGS="$flags"
 done
diff --git a/ac.patch b/ac.patch
index 2d2cabc..a652390 100644
--- a/ac.patch
+++ b/ac.patch
@@ -1,14 +1,7 @@
---- postgresql-14.0/configure.ac~	2021-11-09 09:38:02.000000000 +0100
-+++ postgresql-14.0/configure.ac	2021-11-09 09:38:45.296275820 +0100
-@@ -19,10 +19,6 @@ m4_pattern_forbid(^PGAC_)dnl to catch un
- 
- AC_INIT([PostgreSQL], [15.18], [pgsql-bugs at lists.postgresql.org], [], [https://www.postgresql.org/])
- 
+--- postgresql-15.19/configure.ac~
++++ postgresql-15.19/configure.ac
+@@ -22,4 +21,0 @@
 -m4_if(m4_defn([m4_PACKAGE_VERSION]), [2.69], [], [m4_fatal([Autoconf version 2.69 is required.
 -Untested combinations of 'autoconf' and PostgreSQL versions are not
 -recommended.  You can remove the check from 'configure.ac' but it is then
 -your responsibility whether the result works or not.])])
- AC_COPYRIGHT([Copyright (c) 1996-2022, PostgreSQL Global Development Group])
- AC_CONFIG_SRCDIR([src/backend/access/common/heaptuple.c])
- AC_CONFIG_AUX_DIR(config)
-
diff --git a/postgresql-absolute_dbpaths.patch b/postgresql-absolute_dbpaths.patch
deleted file mode 100644
index 820b65f..0000000
--- a/postgresql-absolute_dbpaths.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- postgresql-7.3.1/configure.in-orig	Thu Jan 16 19:53:28 2003
-+++ postgresql-7.3.1/configure.in	Thu Jan 16 19:54:20 2003
-@@ -539,7 +539,7 @@
- 
- 
- 
--CPPFLAGS="$CPPFLAGS $INCLUDES"
-+CPPFLAGS="$CPPFLAGS -DALLOW_ABSOLUTE_DBPATHS $INCLUDES"
- LDFLAGS="$LDFLAGS $LIBDIRS"
- 
- AC_MSG_NOTICE([using CPPFLAGS=$CPPFLAGS])
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/postgresql.git/commitdiff/514c325a9cbaceec5420f202302abf513ceead93