15:09 Palle Girgensohn (girgen) 

databases/postgresql??-*: update to latest version

PostgreSQL 16.1, 15.5, 14.10, 13.13, 12.17, and 11.22 Released!

The PostgreSQL Global Development Group has released an update to all
supported versions of PostgreSQL, including 16.1, 15.5, 14.10, 13.13,
12.17, and 11.22 This release fixes three security vulnerabilities and
over 55 bugs reported over the last several months.

Release
notes:	https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
Security:	CVE-2023-5868, CVE-2023-5869, CVE-2023-5870
Security:	31f45d06-7f0e-11ee-94b4-6cc21735f730
Security:	0f445859-7f0e-11ee-94b4-6cc21735f730
Security:	bbb18fcb-7f0d-11ee-94b4-6cc21735f730

    a5d53f4

15:42 Palle Girgensohn (girgen) 

databases/postgresql??-server: update to latest version

The PostgreSQL Global Development Group has released an update to all
supported versions of PostgreSQL, including 15.3, 14.8, 13.11, 12.15,
and 11.20. This release fixes two security vulnerabilities over 80 bugs
reported over the last several months.

CVE-2023-2454: CREATE SCHEMA ... schema_element defeats protective search_path
changes.

This enabled an attacker having database-level CREATE privilege to
execute arbitrary code as the bootstrap superuser. Database owners have
that right by default, and explicit grants may extend it to other users.

CVE-2023-2455: Row security policies disregard user ID changes after inlining.

While CVE-2016-2193 fixed most interaction between row security and user
ID changes, it missed a scenario involving function inlining. This leads
to potentially incorrect policies being applied in cases where
role-specific policies are used and a given query is planned under one
role and then executed under other roles. This scenario can happen under
security definer functions or when a common user and query is planned
initially and then re-used across multiple SET ROLEs. Applying an
incorrect policy may permit a user to complete otherwise-forbidden reads
and modifications. This affects only databases that have used CREATE
POLICY to define a row security policy.

Security:	fbb5a260-f00f-11ed-bbae-6cc21735f730
Security:	4b636f50-f011-11ed-bbae-6cc21735f730
Release-notes:	https://www.postgresql.org/docs/release/

    3fd6f20

14:52 Palle Girgensohn (girgen) 

databases/postgresql??-*: upgrade to latest versions

The PostgreSQL Global Development Group has released an update to all
supported versions of PostgreSQL, including 15.2, 14.7, 13.10, 12.14,
and 11.19. This release closes one security vulnerability and fixes over
60 bugs reported over the last several months.

Release notes:	https://www.postgresql.org/docs/release/
Security:	CVE-2022-41862: Client memory disclosure when
		connecting, with Kerberos, to modified server.

    8f04ac8

08:13 Po-Chuan Hsieh (sunpoet) 

databases/postgresql15-server: Fix PLIST substitution for consistency

- Change %%PG_USER%%-15.mo to postgres-15.mo
- Change foo-15.mo to foo-%%PG_VERSION%%.mo

Approved by:	portmgr (blanket)

    39811fe

16:23 Palle Girgensohn (girgen) 

databases/postgresq??-*: update to latest version

PostgreSQL 15.1, 14.6, 13.9, 12.13, 11.18, and 10.23 Released!

The PostgreSQL Global Development Group has released an update to all
supported versions of PostgreSQL, including 15.1, 14.6, 13.9, 12.13,
11.18, and 10.23. This release fixes 25 bugs reported over the last
several months.

This is the final release of PostgreSQL 10. PostgreSQL 10 will no longer
receive security and bug fixes. If you are running PostgreSQL 10 in a
production environment, we suggest that you make plans to upgrade.

Release notes:	https://www.postgresql.org/docs/release/

    792a1db

14:04 Palle Girgensohn (girgen) 

databases/postgresql15-*: Update to 15.0

The PostgreSQL Global Development Group today announced the release of
PostgreSQL 15, the latest version of the world’s most advanced open
source database.

PostgreSQL 15 builds on the performance improvements of recent releases
with noticeable gains for managing workloads in both local and
distributed deployments, including improved sorting. This release
improves the developer experience with the addition of the popular MERGE
command, and adds more capabilities for observing the state of the
database.

Release
notes:	https://www.postgresql.org/about/news/postgresql-15-released-2526/

    f46b3a4

02:18 Po-Chuan Hsieh (sunpoet) 

databases/postgresql15-server: Fix PLIST

===>  Building package for postgresql15-server-15.r1
pkg-static: Unable to access file
/usr/ports/works/usr/ports/databases/postgresql15-server/work/stage/usr/local/share/postgresql/timezone/Etc/GMT-15:No
such file or directory
*** Error code 1

Stop.
make: stopped in /usr/ports/databases/postgresql15-server

Approved by:	portmgr (blanket)

    9fca338

14:24 Palle Girgensohn (girgen) 

databases/postgresql15-*: Upgrade to 15.0-rc1

The PostgreSQL Global Development Group announces that the first release
candidate of PostgreSQL 15 is now available for download. As a release
candidate, PostgreSQL 15 RC 1 will be mostly identical to the initial
release of PostgreSQL 15, though some more fixes may be applied prior to
the general availability of PostgreSQL 15.

To upgrade to PostgreSQL 15 RC 1 from earlier versions of PostgreSQL,
you will need to use a major version upgrade strategy, e.g. pg_upgrade
or pg_dump / pg_restore. For more information, please visit the
documentation section on upgrading.

URL: https://www.postgresql.org/docs/15/upgrading.html

    7078210

13:49 Palle Girgensohn (girgen) 

databases/postgresql15-server: update to 15beta5

This release contains previews of all features that will be available
when PostgreSQL 15 is made generally available, though some details of
the release can change during the beta period.

To upgrade to PostgreSQL 15 Beta 4 from an earlier beta or previous
version of PostgreSQL, you will need to use a strategy similar to
upgrading between major versions of PostgreSQL (e.g. pg_upgrade or
pg_dump / pg_restore). For more information, please visit the
documentation section on upgrading.

URL:		https://www.postgresql.org/about/news/postgresql-15-beta-4-released-2507/
Release notes:	https://www.postgresql.org/docs/15/release-15.html

    31290cc

09:05 Palle Girgensohn (girgen) 

databases/postgresql??-*: Update to latest version

The PostgreSQL Global Development Group has released an update to all
supported versions of PostgreSQL, including 14.5, 13.8, 12.12, 11.17,
and 10.22, as well as the third beta release of PostgreSQL 15. This
release closes one security vulnerability and fixes over 40 bugs
reported over the last three months.

PostgreSQL 10 will stop receiving fixes on November 10, 2022. If you are
running PostgreSQL 10 in a production environment, we strongly advise
that you make plans to upgrade to a newer, supported version of
PostgreSQL so you can continue to receive bug and security fixes.

Security:	CVE-2022-2625
Release
notes:	https://www.postgresql.org/about/news/postgresql-145-138-1212-1117-1022-and-15-beta-3-released-2496/

    2e7e556

10:46 Palle Girgensohn (girgen) 

postgresql??-server: fix regression in the rc script

The rc script was converted to use a SUB_LIST variable, but I failed to
introduce the variable correctly in the Makefile. [1]

The plist for postgresql15-server was incorrect. Fixed this as well.

PR:	264097 [1]

    9230d75

13:36 Palle Girgensohn (girgen) 

databases/postgresql??-*: add postgresql-15 to the ports tree

Introduce PostgreSQL-15 to the ports tree.

Make version 15 the master port, and add plist parameter for the
postgresql version.

Release notes:	https://www.postgresql.org/docs/devel/release.html

    5b11f47