postgresql-14 updated to version 14.12-1.pgdg+1

The package postgresql-14 was updated on apt.postgresql.org.

apt-listchanges: Changelogs
---------------------------

postgresql-14 (14.12-1.pgdg+1) sid-pgdg; urgency=medium

* Rebuild for sid-pgdg.
* Changes applied by generate-pgdg-source:
+ Moving lib packages to component 14.
+ Enabling cassert.

-- PostgreSQL on Debian and Ubuntu <pgsql-pkg-debian(at)lists(dot)postgresql(dot)org> Tue, 07 May 2024 11:24:26 +0200

postgresql-14 (14.12-1) unstable; urgency=medium

* New upstream version.

+ Restrict visibility of pg_stats_ext and pg_stats_ext_exprs entries to
the table owner (Nathan Bossart)

These views failed to hide statistics for expressions that involve
columns the accessing user does not have permission to read. View
columns such as most_common_vals might expose security-relevant data.
The potential interactions here are not fully clear, so in the interest
of erring on the side of safety, make rows in these views visible only
to the owner of the associated table.

The PostgreSQL Project thanks Lukas Fittl for reporting this problem.
(CVE-2024-4317)

By itself, this fix will only fix the behavior in newly initdb'd
database clusters. If you wish to apply this change in an existing
cluster, you will need to do the following:

In each database of the cluster, run the fix-CVE-2024-4317.sql script
as superuser. In psql this would look like
\i /usr/share/postgresql/14/fix-CVE-2024-4317.sql
Any error probably indicates that you've used the wrong script
version. It will not hurt to run the script more than once.

Do not forget to include the template0 and template1 databases, or the
vulnerability will still exist in databases you create later. To fix
template0, you'll need to temporarily make it accept connections. Do
that with
ALTER DATABASE template0 WITH ALLOW_CONNECTIONS true;
and then after fixing template0, undo it with
ALTER DATABASE template0 WITH ALLOW_CONNECTIONS false;

-- Christoph Berg <myon(at)debian(dot)org> Tue, 07 May 2024 11:24:26 +0200

New version 14.12-1.pgdg+1:

postgresql-14 | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x, source
postgresql-14 | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-14 | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-14 | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-14 | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386, source
postgresql-14 | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-14 | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-14 | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64, source
postgresql-14 | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-14 | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-14-dbgsym | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-14-dbgsym | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-14-dbgsym | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-14-dbgsym | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-14-dbgsym | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386
postgresql-14-dbgsym | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-14-dbgsym | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-14-dbgsym | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-14-dbgsym | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-14-dbgsym | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14 | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-client-14 | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14 | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14 | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14 | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386
postgresql-client-14 | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-client-14 | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14 | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-client-14 | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14 | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14-dbgsym | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-client-14-dbgsym | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14-dbgsym | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14-dbgsym | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14-dbgsym | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386
postgresql-client-14-dbgsym | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-client-14-dbgsym | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14-dbgsym | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-client-14-dbgsym | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-14-dbgsym | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-14 | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-doc-14 | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-14 | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-14 | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-14 | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-doc-14 | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-14 | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-doc-14 | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-14 | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14 | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-plperl-14 | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14 | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14 | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14 | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386
postgresql-plperl-14 | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-plperl-14 | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14 | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-plperl-14 | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14 | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14-dbgsym | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-plperl-14-dbgsym | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14-dbgsym | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14-dbgsym | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14-dbgsym | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386
postgresql-plperl-14-dbgsym | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-plperl-14-dbgsym | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14-dbgsym | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-plperl-14-dbgsym | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-14-dbgsym | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14 | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-plpython3-14 | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14 | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14 | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14 | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386
postgresql-plpython3-14 | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-plpython3-14 | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14 | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-plpython3-14 | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14 | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14-dbgsym | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-plpython3-14-dbgsym | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14-dbgsym | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14-dbgsym | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14-dbgsym | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386
postgresql-plpython3-14-dbgsym | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-plpython3-14-dbgsym | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14-dbgsym | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-plpython3-14-dbgsym | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-14-dbgsym | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14 | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-pltcl-14 | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14 | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14 | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14 | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386
postgresql-pltcl-14 | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-pltcl-14 | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14 | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-pltcl-14 | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14 | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14-dbgsym | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-pltcl-14-dbgsym | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14-dbgsym | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14-dbgsym | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14-dbgsym | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386
postgresql-pltcl-14-dbgsym | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-pltcl-14-dbgsym | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14-dbgsym | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-pltcl-14-dbgsym | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-14-dbgsym | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-14 | 14.12-1.pgdg+1 | sid-pgdg | amd64, arm64, i386, ppc64el, s390x
postgresql-server-dev-14 | 14.12-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-14 | 14.12-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-14 | 14.12-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-14 | 14.12-1.pgdg100+1 | buster-pgdg | amd64, arm64, i386
postgresql-server-dev-14 | 14.11-1.pgdg100+1 | buster-pgdg | ppc64el, s390x
postgresql-server-dev-14 | 14.12-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-14 | 14.12-1.pgdg23.10+1 | mantic-pgdg | amd64
postgresql-server-dev-14 | 14.12-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-14 | 14.12-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x

The public mirrors serving apt.postgresql.org are synced hourly,
the updated packages will be available there shortly.