Version in base suite: 248 Base version: postgresql-common_248 Target version: postgresql-common_248+deb12u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/p/postgresql-common/postgresql-common_248.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/p/postgresql-common/postgresql-common_248+deb12u1.dsc PgCommon.pm | 2 +- debian/changelog | 8 ++++++++ 2 files changed, 9 insertions(+), 1 deletion(-) diff -Nru postgresql-common-248/PgCommon.pm postgresql-common-248+deb12u1/PgCommon.pm --- postgresql-common-248/PgCommon.pm 2023-03-14 14:17:12.000000000 +0000 +++ postgresql-common-248+deb12u1/PgCommon.pm 2025-06-03 13:03:54.000000000 +0000 @@ -95,7 +95,7 @@ delete $ENV{$_}; } - $ENV{'PATH'} = ''; + $ENV{'PATH'} = '/sbin:/bin:/usr/sbin:/usr/bin'; } # restore the environment after prepare_exec() diff -Nru postgresql-common-248/debian/changelog postgresql-common-248+deb12u1/debian/changelog --- postgresql-common-248/debian/changelog 2023-03-14 14:19:01.000000000 +0000 +++ postgresql-common-248+deb12u1/debian/changelog 2025-06-03 13:03:54.000000000 +0000 @@ -1,3 +1,11 @@ +postgresql-common (248+deb12u1) bookworm; urgency=medium + + * PgCommon.pm: Set defined path in prepare_exec. Fixes compatibility with + trixie's perl version, and also a mild security issue. Thanks Niko Tyni! + (Closes: #1107154) + + -- Christoph Berg Tue, 03 Jun 2025 15:03:54 +0200 + postgresql-common (248) unstable; urgency=medium [ Christoph Berg ]