Release date:
2026-10-27 16:45:49 UTC
Description:
* SECURITY UPDATE: integer overflows in libpq size calculations, where several client functions computed buffer sizes in int or unchecked size_t arithmetic from very large inputs that could come from a remote or untrusted source, so the sum could wrap around and the resulting buffer would be too small for the data written into it
- debian/patches/CVE-2025-12818.patch: switch the affected sizes from
int to size_t and add overflow checks (a new add_size_overflow()
helper, SIZE_MAX and INT_MAX bounds), failing cleanly on overflow,
in PQescapeInternal(),
PQescapeByteaInternal(), pqResultAlloc(), PQsetvalue() and
pqRowProcessor() in src/interfaces/libpq/fe-exec.c, in
build_startup_packet(), pqBuildStartupPacket3() and
reportErrorPosition() in src/interfaces/libpq/fe-protocol3.c, in
PQprint() and its do_header() and do_field() helpers in
src/interfaces/libpq/fe-print.c, and in parse_comma_separated_list()
and ldapServiceLookup() in src/interfaces/libpq/fe-connect.c
- CVE-2025-12818
Updated packages:
-
libecpg-compat3-11_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:9add1096bfbc27b47320f4b2ecd259434a2fc0a0
-
libecpg-dev-11_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:37e67f43e9b1c3d99f1eb406ca2e558717cb8756
-
libecpg6-11_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:ce7147f61203f7e531a3dc40b04effb33ca4f4dc
-
libpgtypes3-11_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:1f05169ed9b18a9bb1c652fcc693fb8feaf9d040
-
libpq-dev-11_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:c252c3f3da9d80797b23d170f3941dfa97f7d90a
-
libpq5-11_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:bf9930ac32ecc564ee21c15d6e66d7c8ccc2138a
-
postgresql11_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:e7bd62cc8790db603c99ed36701698370a8e234e
-
postgresql11-client_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:57e512787f5a4046104ab3707f7728796061d1e1
-
postgresql11-doc_11.22-1~bookworm+tuxcare.els21_all.deb
sha:03e2af5e8385d0c17feeb0e433595fed18a9251e
-
postgresql11-plperl_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:f35fb0d59cf5a09b16839e9210a00c63262f9fc4
-
postgresql11-plpython3_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:9bae32e86b573c06677de91e234f3538cd1d1051
-
postgresql11-pltcl_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:44607890adc797002de261e4571fc16519fab8e3
-
postgresql11-server-dev_11.22-1~bookworm+tuxcare.els21_amd64.deb
sha:29b148e1e8604ccf998fbd7898de8b33b8e9de12
-
libecpg-compat3-11_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:003d1fafc1140f8fa26f31ee4723de8e556ea8d5
-
libecpg-dev-11_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:7b4ee8154f7b00288443f496fcf369a2dfe97ca8
-
libecpg6-11_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:df23fec03e6ec9ebdf3413b5f21f5c9ff1fe7618
-
libpgtypes3-11_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:7d4e26d6d70a31750323eb6e0f6ccfcfd0e54383
-
libpq-dev-11_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:2516b660c83b4182caa54f1c5d48725bfea6da93
-
libpq5-11_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:b6355e52971a47873b6509347681c52804ed77ee
-
postgresql11_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:bb0fccdf698b8433f11578c586b7da1dee16f704
-
postgresql11-client_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:b78fd3aab9a0864eb47a8d09e847c9b7b1f891e2
-
postgresql11-plperl_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:ca449655bffd55cf6d05fa6989c722779def0a18
-
postgresql11-plpython3_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:da2dadc77850288791c12caa13252ae9e8ec5d10
-
postgresql11-pltcl_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:74fb067aa8903a8c729e68bb1b25d1bb465b8593
-
postgresql11-server-dev_11.22-1~bookworm+tuxcare.els21_arm64.deb
sha:fe10df610b68e81afc42de1c7ee85e6b14823c23
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
