New upstream microreleases 12.14 and 14.7

Bug #2006406 reported by Sergio Durigan Junior
14
This bug affects 1 person
Affects Status Importance Assigned to Milestone
postgresql-12 (Ubuntu)
Fix Released
Undecided
Unassigned
Focal
Fix Released
Undecided
Athos Ribeiro
postgresql-14 (Ubuntu)
Invalid
Undecided
Unassigned
Jammy
Fix Released
Undecided
Sergio Durigan Junior
Kinetic
Fix Released
Undecided
Sergio Durigan Junior

Bug Description

[Impact]

 * MRE for latest stable fixes of Postgres 12 and 14 released on February 2023.

[Test Case]

 * The Postgres MREs traditionally rely on the large set of autopkgtests
   to run for verification. In a PPA those are all already pre-checked to
   be good for this upload.

[Regression Potential]

 * Upstreams tests are usually great and in additon in the Archive there
   are plenty of autopkgtests that in the past caught issues before being
   released.
   But nevertheless there always is a risk for something to break. Since
   these are general stable releases I can't pinpoint them to a most-likely area.
   - usually this works smoothly except a few test hickups (flaky) that need to be clarified to be sure. Pre-checks will catch those to be discussed upfront (as last time)

[Other Info]

 * This is a reoccurring MRE, see below and all the references
 * CVEs addressed by this MRE:
   - CVE-2022-41862

Current versions in supported releases that got updates:
 postgresql-12 | 12.13-0ubuntu0.20.04.1 | focal-updates | source, amd64, arm64, armhf, i386, ppc64el, riscv64, s390x
 postgresql-14 | 14.6-0ubuntu0.22.04.1 | jammy-updates | source, amd64, arm64, armhf, i386, ppc64el, riscv64, s390x
 postgresql-14 | 14.6-0ubuntu0.22.10.1 | kinetic-updates | source, amd64, arm64, armhf, i386, ppc64el, riscv64, s390x

Special cases:
- We will try to upgrade Lunar to 15.2 before the Feature Freeze.

Standing MRE - Consider last updates as template:
- pad.lv/1637236
- pad.lv/1664478
- pad.lv/1690730
- pad.lv/1713979
- pad.lv/1730661
- pad.lv/1747676
- pad.lv/1752271
- pad.lv/1786938
- pad.lv/1815665
- pad.lv/1828012
- pad.lv/1833211
- pad.lv/1839058
- pad.lv/1863108
- pad.lv/1892335
- pad.lv/1915254
- pad.lv/1928773
- pad.lv/1939396
- pad.lv/1950268
- pad.lv/1961127
- pad.lv/1973627
- pad.lv/1978249
- pad.lv/1984012
- pad.lv/1996770

As usual we test and prep from the PPA and then push through SRU/Security as applicable.

Related branches

CVE References

no longer affects: postgresql-15 (Ubuntu)
no longer affects: postgresql-12 (Ubuntu Jammy)
no longer affects: postgresql-12 (Ubuntu Kinetic)
no longer affects: postgresql-14 (Ubuntu Focal)
Changed in postgresql-14 (Ubuntu Jammy):
assignee: nobody → Sergio Durigan Junior (sergiodj)
Changed in postgresql-14 (Ubuntu Kinetic):
assignee: nobody → Sergio Durigan Junior (sergiodj)
Changed in postgresql-12 (Ubuntu Focal):
assignee: nobody → Athos Ribeiro (athos-ribeiro)
tags: added: server-todo
description: updated
Changed in postgresql-14 (Ubuntu Jammy):
status: New → In Progress
Changed in postgresql-14 (Ubuntu Kinetic):
status: New → In Progress
Revision history for this message
Athos Ribeiro (athos-ribeiro) wrote :

All the linked MPs look good. We are currently waiting for test results for them.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package postgresql-12 - 12.14-0ubuntu0.20.04.1

---------------
postgresql-12 (12.14-0ubuntu0.20.04.1) focal-security; urgency=medium

  * New upstream version (LP: #2006406).

    + A dump/restore is not required for those running 12.X.

    + Also, if you are upgrading from a version earlier than 12.10, see
      those release notes as well please.

    + libpq can leak memory contents after GSSAPI transport encryption
      initiation fails (Jacob Champion).
      (CVE-2022-41862)

    + Details about these and many further changes can be found at:
      https://www.postgresql.org/docs/12/release-12-14.html

 -- Athos Ribeiro <email address hidden> Thu, 09 Feb 2023 18:44:37 -0300

Changed in postgresql-12 (Ubuntu Focal):
status: New → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package postgresql-14 - 14.7-0ubuntu0.22.10.1

---------------
postgresql-14 (14.7-0ubuntu0.22.10.1) kinetic-security; urgency=medium

  * New upstream version (LP: #2006406).

    + A dump/restore is not required for those running 14.X.

    + Also, if you are upgrading from a version earlier than 14.4, see
      those release notes as well please.

    + libpq can leak memory contents after GSSAPI transport encryption
      initiation fails (Jacob Champion).
      (CVE-2022-41862)

    + Fix calculation of which GENERATED columns need to be updated in
      child tables during an UPDATE on a partitioned table or inheritance
      tree (Amit Langote, Tom Lane).

    + Details about these and many further changes can be found at:
      https://www.postgresql.org/docs/14/release-14-7.html

 -- Sergio Durigan Junior <email address hidden> Thu, 09 Feb 2023 15:24:34 -0500

Changed in postgresql-14 (Ubuntu Kinetic):
status: In Progress → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package postgresql-14 - 14.7-0ubuntu0.22.04.1

---------------
postgresql-14 (14.7-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * New upstream version (LP: #2006406).

    + A dump/restore is not required for those running 14.X.

    + Also, if you are upgrading from a version earlier than 14.4, see
      those release notes as well please.

    + libpq can leak memory contents after GSSAPI transport encryption
      initiation fails (Jacob Champion).
      (CVE-2022-41862)

    + Fix calculation of which GENERATED columns need to be updated in
      child tables during an UPDATE on a partitioned table or inheritance
      tree (Amit Langote, Tom Lane).

    + Details about these and many further changes can be found at:
      https://www.postgresql.org/docs/14/release-14-7.html

 -- Sergio Durigan Junior <email address hidden> Thu, 09 Feb 2023 15:18:50 -0500

Changed in postgresql-14 (Ubuntu Jammy):
status: In Progress → Fix Released
Changed in postgresql-14 (Ubuntu):
status: New → Invalid
Changed in postgresql-12 (Ubuntu):
status: New → Fix Released
tags: removed: server-todo
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.