pgextwlist (1.19-1+deb13u1) trixie-security; urgency=medium * Reject substituting extension schemas or owners matching ["$'\]. The extwlist.custom_path script mechanism was vulnerable to SQL injection via crafted schema and user names. The same problem was fixed in August 2023 in PostgreSQL (cd5f2a3570), and is now fixed in pgextwlist as well. Substitutions that attempt to insert any of "$'\ are now simply rejected. (We don't try to quote the values as we don't know which quoting context we are in.) CVE-2023-39417 -- Christoph Berg Wed, 08 Jul 2026 18:12:26 +0200 pgextwlist (1.19-1) unstable; urgency=medium * PG18 Support, take 2: Revert CreateQueryDesc change. (Upstream 525392d57) -- Christoph Berg Thu, 12 Jun 2025 14:38:58 +0200 pgextwlist (1.18-1) unstable; urgency=medium * Support PostgreSQL 18. -- Christoph Berg Wed, 23 Apr 2025 15:12:22 +0200 pgextwlist (1.17-3) unstable; urgency=medium * Upload for PostgreSQL 17. * Restrict to 64-bit architectures. * Mark postgresql-all as . -- Christoph Berg Sat, 14 Sep 2024 19:01:25 +0200 pgextwlist (1.17-2) unstable; urgency=medium * Upload for PostgreSQL 16. * Use ${postgresql:Depends}. -- Christoph Berg Mon, 18 Sep 2023 13:37:33 +0200 pgextwlist (1.17-1) unstable; urgency=medium * New upstream version. -- Christoph Berg Wed, 09 Aug 2023 11:44:28 +0200 pgextwlist (1.16-1) unstable; urgency=medium * New version with PG16 support. -- Christoph Berg Fri, 30 Jun 2023 22:31:48 +0200 pgextwlist (1.15-2) unstable; urgency=medium * Upload for PostgreSQL 15. -- Christoph Berg Fri, 21 Oct 2022 11:57:27 +0200 pgextwlist (1.15-1) unstable; urgency=medium * New version with drop hooks. -- Christoph Berg Wed, 28 Sep 2022 12:57:35 +0200 pgextwlist (1.14-1) unstable; urgency=medium * Fix GUC handling in _PG_init. -- Christoph Berg Tue, 23 Aug 2022 17:04:26 +0200 pgextwlist (1.13-1) unstable; urgency=medium * New version with PG15 support, thanks Polina Bungina! -- Christoph Berg Thu, 07 Jul 2022 11:39:12 +0200 pgextwlist (1.12-1) unstable; urgency=medium * New version with PG14 support, thanks Ronan Dunklau! -- Christoph Berg Tue, 02 Nov 2021 10:26:57 +0100 pgextwlist (1.11-4) unstable; urgency=medium * Work around extension_destdir bug with missing extension directory. -- Christoph Berg Fri, 09 Oct 2020 16:22:49 +0200 pgextwlist (1.11-3) unstable; urgency=medium * R³: no. -- Christoph Berg Fri, 09 Oct 2020 10:50:24 +0200 pgextwlist (1.11-2) unstable; urgency=medium * Upload for PostgreSQL 13. * Use dh --with pgxs_loop and run tests at build time as well. * debian/tests: Use pg_buildext installcheck. -- Christoph Berg Tue, 06 Oct 2020 15:13:07 +0200 pgextwlist (1.11-1) unstable; urgency=medium * New version with PG13 support. * Source format 3.0 (quilt). * DH 13, bump S-V. -- Christoph Berg Sun, 24 May 2020 20:53:50 +0200 pgextwlist (1.10-1) unstable; urgency=medium [ Mika Eloranta ] * Use explicit collation for @@ substibutions. [ Christoph Berg ] * Include custom scripts in regression tests. -- Christoph Berg Tue, 29 Oct 2019 14:48:29 +0100 pgextwlist (1.9-1) unstable; urgency=medium * New upstream version with PostgreSQL 12 support. -- Christoph Berg Wed, 05 Jun 2019 12:44:56 +0200 pgextwlist (1.8-2) unstable; urgency=medium * Recompile against new heap_getattr() API in PostgreSQL 11.2. -- Christoph Berg Tue, 12 Feb 2019 15:08:44 +0100 pgextwlist (1.8-1) unstable; urgency=medium * Upload for PostgreSQL 11. * Update PostgreSQL team address. -- Christoph Berg Fri, 12 Oct 2018 13:23:58 +0200 pgextwlist (1.7-1) unstable; urgency=medium * New upstream version with PostgreSQL 11 support. -- Christoph Berg Mon, 23 Jul 2018 11:53:24 +0200 pgextwlist (1.6-1) unstable; urgency=medium * New upstream version with PostgreSQL 10 support, patch by Oskari Saarenmaa. (Closes: #876851) * Update Dimitri's email address. -- Christoph Berg Sun, 15 Oct 2017 13:21:54 +0200 pgextwlist (1.5-1) unstable; urgency=medium * New upstream version with 9.6 support. -- Christoph Berg Tue, 27 Sep 2016 18:39:03 +0200 pgextwlist (1.4-1) unstable; urgency=medium * New upstream version with 9.5 support. (Closes: #811135) -- Christoph Berg Tue, 02 Feb 2016 12:56:49 +0100 pgextwlist (1.3-3) unstable; urgency=medium * Upload to unstable for 9.4. -- Christoph Berg Sun, 27 Jul 2014 11:13:25 +0200 pgextwlist (1.3-2) experimental; urgency=medium * B-D on pg-common 158 to build against 9.3 and 9.4. -- Christoph Berg Sun, 06 Jul 2014 17:11:21 +0200 pgextwlist (1.3-1) unstable; urgency=medium * Set team as Maintainer. * Use 9.1+ in debian/pgversions. * Update regression tests. -- Christoph Berg Mon, 16 Jun 2014 18:30:07 +0200 pgextwlist (1.2-1) unstable; urgency=medium * Add regression tests and run them using autopkgtest. * Include the plugins/pgextwlist.so symlink in the package. * Add watch file. -- Christoph Berg Wed, 05 Feb 2014 15:25:54 +0100 pgextwlist (1.1-1) unstable; urgency=low * Initial release -- Dimitri Fontaine Mon, 30 Dec 2013 18:36:43 +0400