-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 25 Dec 2025 19:08:36 +0100 Source: postgresql-15 Architecture: source Version: 15.15-0+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian PostgreSQL Maintainers <[email protected]> Changed-By: Christoph Berg <[email protected]> Changes: postgresql-15 (15.15-0+deb12u1) bookworm; urgency=medium . * New upstream version 15.15. . + Check for CREATE privileges on the schema in CREATE STATISTICS (Jelte Fennema-Nio) . This omission allowed table owners to create statistics in any schema, potentially leading to unexpected naming conflicts. . The PostgreSQL Project thanks Jelte Fennema-Nio for reporting this problem. (CVE-2025-12817) . + Avoid integer overflow in allocation-size calculations within libpq (Jacob Champion) . Several places in libpq were not sufficiently careful about computing the required size of a memory allocation. Sufficiently large inputs could cause integer overflow, resulting in an undersized buffer, which would then lead to writing past the end of the buffer. . The PostgreSQL Project thanks Aleksey Solovev of Positive Technologies for reporting this problem. (CVE-2025-12818) Checksums-Sha1: 3fcc0fe06ed3b393f168ea2fb8b7c490fe9a80ae 3926 postgresql-15_15.15-0+deb12u1.dsc 8833e4dd4ff75186451415bf61cd5f1d60078d50 23246368 postgresql-15_15.15.orig.tar.bz2 c207d10af2517b31b6b3ff822afc3816bfb5641f 29532 postgresql-15_15.15-0+deb12u1.debian.tar.xz Checksums-Sha256: c9ead6801944f2715b561b88df836535cc90c93f1a00f6616f8df6a298543120 3926 postgresql-15_15.15-0+deb12u1.dsc 5753aaeb8b09cbf61016f78aa69bf5cbdf01b43263f010cbf168c82896213aaa 23246368 postgresql-15_15.15.orig.tar.bz2 83751a83673b099d333f287860b83f75e12114d92010d8d3d43affdf9268ac80 29532 postgresql-15_15.15-0+deb12u1.debian.tar.xz Files: 59ced5828fe2453f48fbf953b4268232 3926 database optional postgresql-15_15.15-0+deb12u1.dsc 75fc7269cee615dc35c3558264b4733b 23246368 database optional postgresql-15_15.15.orig.tar.bz2 20e80e8df79f3c338f884800524efcf7 29532 database optional postgresql-15_15.15-0+deb12u1.debian.tar.xz
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXEj+YVf0kXlZcIfGTFprqxLSp64FAmlNfg4ACgkQTFprqxLS p66k4Q/+Mrybn6SDZNO65M8y+OrNgGnS1MP6t8+T6gttSd4oE+ESdLdWhXhiMMTU RoQqJUqRRDW/WvYz+cp0cSowfkApmCz6ceAqgGB04BFZ2gR9qfuLN49XyRiCOLF/ 4cFJFGmbjTk/XuGeQ4gPLAeLahYC9IBQgGm5rDr2PAeGXFkEAa6XWoDRutOueaO1 giSq8PfG1KKZrmR9XulVlo2UC5trI/O6i6z2yjOYt9UyfCY4BpaBKRWyDTOlT4GP yL711DA77Gv/VR6sfiVOql8DBD4BIXA4YwxLtNwXncrrx5ucZaqwXSnEMPtr64EZ H1VmSVV/UlXgqc+tdWJ0HuxubhWm/PYr8EQSOno/MJYKz/XR1nQboRdKzYnTK94r I2EFaXbaJLrNuCDghuIk5NWGBaA4JAOL+MC7OJok1ASTae2uJMtL47h55HyfIQYj gVE44J9Jdzb/8OZVAVRc48eIDoQdMEDqxKmvKaO4hJHHbgo/WI3heNaHtuIai/zm wE4NPbb4rJT3FqdwPmVV8eouGbZp/Zf5AMXBpaYbi9NdTdEvF2aNU5xp4bxq2tPi 5CHKymruuKrxIJ0EcHiGblUFgCbB6CrkQjr2eXmoH46dSny731YjTBRr8NCJ36/Q sLZ+8YIrX04hcp8OqlXVt6UIqGjj+282XNcvsPAHXx84Ea+8YU0= =pzL4 -----END PGP SIGNATURE-----
pgpY3q74hMq9t.pgp
Description: PGP signature
