Apply patch to fix CVE-2026-6479

This commit is contained in:
eabdullin 2026-08-11 16:36:50 +03:00
parent 719e89f039
commit c8ff7ecace

View File

@ -60,7 +60,7 @@ Summary: PostgreSQL client programs
Name: postgresql Name: postgresql
%global majorversion 12 %global majorversion 12
Version: %{majorversion}.22 Version: %{majorversion}.22
Release: 8%{?dist} Release: 9%{?dist}
# The PostgreSQL license is very similar to other MIT licenses, but the OSI # The PostgreSQL license is very similar to other MIT licenses, but the OSI
# recognizes it as an independent license, so we do as well. # recognizes it as an independent license, so we do as well.
@ -392,6 +392,7 @@ benchmarks.
%patch17 -p1 %patch17 -p1
%patch18 -p1 %patch18 -p1
%patch19 -p1 %patch19 -p1
%patch20 -p1
# We used to run autoconf here, but there's no longer any real need to, # We used to run autoconf here, but there's no longer any real need to,
# since Postgres ships with a reasonably modern configure script. # since Postgres ships with a reasonably modern configure script.
@ -1247,6 +1248,9 @@ make -C postgresql-setup-%{setup_version} check
%changelog %changelog
* Tue Aug 11 2026 Eduard Abdullin <eabdullin@almalinux.org> - 12.22-9
- Apply patch to fix CVE-2026-6479
* Sat Aug 2 2026 Filip Janus <fjanus@redhat.com> - 12.22-8 * Sat Aug 2 2026 Filip Janus <fjanus@redhat.com> - 12.22-8
- Backport fix for CVE-2026-6479 from PostgreSQL 14.23 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23
(SSL/GSS init causes denial of service via uncontrolled recursion) (SSL/GSS init causes denial of service via uncontrolled recursion)