Release date:
2026-10-27 16:49:30 UTC
Description:
* SECURITY UPDATE: integer overflows in libpq size calculations, where several client functions computed buffer sizes in int or unchecked size_t arithmetic from very large inputs that could come from a remote or untrusted source, so the sum could wrap around and the resulting buffer would be too small for the data written into it
- debian/patches/CVE-2025-12818.patch: switch the affected sizes from
int to size_t and add overflow checks (a new add_size_overflow()
helper, SIZE_MAX and INT_MAX bounds), failing cleanly on overflow,
in PQescapeInternal(),
PQescapeByteaInternal(), pqResultAlloc(), PQsetvalue() and
pqRowProcessor() in src/interfaces/libpq/fe-exec.c, in
build_startup_packet(), pqBuildStartupPacket3() and
reportErrorPosition() in src/interfaces/libpq/fe-protocol3.c, in
PQprint() and its do_header() and do_field() helpers in
src/interfaces/libpq/fe-print.c, and in parse_comma_separated_list()
and ldapServiceLookup() in src/interfaces/libpq/fe-connect.c
- CVE-2025-12818
Updated packages:
-
libecpg-compat3-11_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:b7d63527f97bf2eb033a67e1a0178f3b1c4cd547
-
libecpg-dev-11_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:8dfe2ecc782db8f735a236c893eb4eead08072f6
-
libecpg6-11_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:92ceb7fe90fcdabb7f02283940441e61d44b0cf6
-
libpgtypes3-11_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:b2707c34b18f30690b351ce693be365501aa0bc1
-
libpq-dev-11_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:fe6c95cd5b11abffc527471bb676810ff8ce3489
-
libpq5-11_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:09d6ebe8e454e8e49370b8e1f929ba9abb2b13d9
-
postgresql11_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:de428ebd3da04803ad2f8d37e766de0dc6f04cc7
-
postgresql11-client_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:e3d4285ff9877e2315e62a70b9003ba08a58e0f8
-
postgresql11-doc_11.22-1~trixie+tuxcare.els21_all.deb
sha:486b63eb4fcc0dfa43b526d2a34b1afcbcf579f4
-
postgresql11-plperl_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:9c012fee19c0a61367660934376d31b08481485f
-
postgresql11-plpython3_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:9a4b051734face5fe57dad3383a99df00bc79b38
-
postgresql11-pltcl_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:f73b2dffce9cf173c5bb9aa2eb39ed8b231f9a09
-
postgresql11-server-dev_11.22-1~trixie+tuxcare.els21_amd64.deb
sha:4ed54211302a7ae9ebc9cb4e4ad56dadf9a2939c
-
libecpg-compat3-11_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:c5d9e75c0f2de138aa7d5fa8a107d7f02485b264
-
libecpg-dev-11_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:b32a2be6ab446a5bb82c4979cb3cc5f4de3fa05a
-
libecpg6-11_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:19f309ada013923f9c4162b93473ed6e240669e6
-
libpgtypes3-11_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:48e7b7acd71b756b45468c92739bd35af40baa0d
-
libpq-dev-11_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:3c86905f929c8fc887d4ccae6458fff6961ad0fd
-
libpq5-11_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:5a9793d48c3ae25371a8447dbd6314720bffb405
-
postgresql11_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:24c3a188ba3879edb77f66b85089b91025cdbe83
-
postgresql11-client_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:fa425fa55971ec35d9d09754d751e75dabc33d13
-
postgresql11-plperl_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:d94195848e634ed3a90befc7b90bbbd9e4e34d8d
-
postgresql11-plpython3_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:29c5cc0461af461b4ecabbe8b806a3ce4dde5f79
-
postgresql11-pltcl_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:44728268e5436c374cf6e025a7418a41501ec1a7
-
postgresql11-server-dev_11.22-1~trixie+tuxcare.els21_arm64.deb
sha:f9f4b45841be93b2a8ec441466f418d274047f83
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
