From 84a940056470c81cf80777ea87ee408ecfe48cb1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= Date: Fri, 9 Aug 2024 15:58:37 +0200 Subject: [PATCH] postgresql_12: 12.19 -> 12.20 https://www.postgresql.org/support/security/CVE-2024-7348/ Fixes CVE-2024-7348 --- pkgs/servers/sql/postgresql/12.nix | 4 ++-- pkgs/servers/sql/postgresql/generic.nix | 19 +------------------ 2 files changed, 3 insertions(+), 20 deletions(-) diff --git a/pkgs/servers/sql/postgresql/12.nix b/pkgs/servers/sql/postgresql/12.nix index 74098e91f2eb..42e8ef960d42 100644 --- a/pkgs/servers/sql/postgresql/12.nix +++ b/pkgs/servers/sql/postgresql/12.nix @@ -1,4 +1,4 @@ import ./generic.nix { - version = "12.19"; - hash = "sha256-YX495Swi6CL09X0B1bIkBQPhmKnsyvWYqFEQm9GOb7s="; + version = "12.20"; + hash = "sha256-LVQ68wCf7H/VrzX3pwyVCF0+72tQjlF6qUk+mbFenqk="; } diff --git a/pkgs/servers/sql/postgresql/generic.nix b/pkgs/servers/sql/postgresql/generic.nix index 907646dc722b..61ffe38d8999 100644 --- a/pkgs/servers/sql/postgresql/generic.nix +++ b/pkgs/servers/sql/postgresql/generic.nix @@ -19,7 +19,7 @@ let , version, hash, muslPatches ? {} # for tests - , testers, nixosTests + , testers # JIT , jitSupport @@ -119,23 +119,6 @@ let src = ./patches/locale-binary-path.patch; locale = "${if stdenv.isDarwin then darwin.adv_cmds else lib.getBin stdenv.cc.libc}/bin/locale"; }) - - ( - if atLeast "16" then - fetchpatch { - name = "libxml2-2.13-compat.patch"; - # This one is for 16 branch upstream. - url = "https://github.com/postgres/postgres/commit/f85c91a1867b45742bb28e4578ca2b4a0976383f.diff"; - hash = "sha256-4YcXfo98uVuCu+ybVw3bM4x8Y0I1xfjdjBZOlhyF21w="; - } - else - fetchpatch { - name = "libxml2-2.13-compat.patch"; - # This one is for 15 branch upstream, but it also applies well to all our older branches. - url = "https://github.com/postgres/postgres/commit/f68d6aabb7e2c803818185b49a3d356bdb2b2974.diff"; - hash = "sha256-Nelb0mbjx0Xq9UJuVv7cs3ifCtUPP7UZraPMPGb2wyQ="; - } - ) ] ++ lib.optionals stdenv'.hostPlatform.isMusl ( # Using fetchurl instead of fetchpatch on purpose: https://github.com/NixOS/nixpkgs/issues/240141 map fetchurl (lib.attrValues muslPatches)