From c8ff7ecace940e934c2ea730e4afc86ab55a5b3f Mon Sep 17 00:00:00 2001 From: eabdullin Date: Tue, 11 Aug 2026 16:36:50 +0300 Subject: [PATCH] Apply patch to fix CVE-2026-6479 --- SPECS/postgresql.spec | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/SPECS/postgresql.spec b/SPECS/postgresql.spec index 108a720..a5aecf7 100644 --- a/SPECS/postgresql.spec +++ b/SPECS/postgresql.spec @@ -60,7 +60,7 @@ Summary: PostgreSQL client programs Name: postgresql %global majorversion 12 Version: %{majorversion}.22 -Release: 8%{?dist} +Release: 9%{?dist} # The PostgreSQL license is very similar to other MIT licenses, but the OSI # recognizes it as an independent license, so we do as well. @@ -392,6 +392,7 @@ benchmarks. %patch17 -p1 %patch18 -p1 %patch19 -p1 +%patch20 -p1 # We used to run autoconf here, but there's no longer any real need to, # since Postgres ships with a reasonably modern configure script. @@ -1247,6 +1248,9 @@ make -C postgresql-setup-%{setup_version} check %changelog +* Tue Aug 11 2026 Eduard Abdullin - 12.22-9 +- Apply patch to fix CVE-2026-6479 + * Sat Aug 2 2026 Filip Janus - 12.22-8 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion)