From 09bbdc3eadeeec4ffd8ff24a6fb2a07471d2f361 Mon Sep 17 00:00:00 2001 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:47:24 +0200 Subject: gnu: postgresql-15: Update to 16.4. [security fixes] This fixes CVE-2024-7348. * /gnu/packages/databases.scm (postgresql-15): Move from here... (postgresql-16): ... to here. [version]: Update to 16.4. [source]: Adapt source and add patch. [native-inputs]: Add pkg-config. [inputs]: Add icu4c. * gnu/packages/patches/postgresql-disable-normalize_exec_path.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. Signed-off-by: Maxim Cournoyer Change-Id: I57771ebcf462bdeca73eda157274db089816fd12 --- .../postgresql-disable-normalize_exec_path.patch | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 gnu/packages/patches/postgresql-disable-normalize_exec_path.patch (limited to 'gnu/packages/patches/postgresql-disable-normalize_exec_path.patch') diff --git a/gnu/packages/patches/postgresql-disable-normalize_exec_path.patch b/gnu/packages/patches/postgresql-disable-normalize_exec_path.patch new file mode 100644 index 0000000000..0397bd5a35 --- /dev/null +++ b/gnu/packages/patches/postgresql-disable-normalize_exec_path.patch @@ -0,0 +1,22 @@ +diff --git a/src/common/exec.c b/src/common/exec.c +index f209b93..ed42202 100644 +--- a/src/common/exec.c ++++ b/src/common/exec.c +@@ -238,6 +238,14 @@ find_my_exec(const char *argv0, char *retpath) + static int + normalize_exec_path(char *path) + { ++ /* ++ * Guix specific patch: postgresql extensions need to be located in the ++ * same directory as postgresql. ++ * In Guix we currently use directory-unions to create extended postgresql ++ * packages. Directory unions use symlinks, that's why we need to be able ++ * to use symlinks. ++ */ ++ return 0; + /* + * We used to do a lot of work ourselves here, but now we just let + * realpath(3) do all the heavy lifting. +-- +2.46.0 + -- cgit v1.2.3