Release date:
2026-10-30 10:46:43 UTC
Description:
* SECURITY UPDATE: buffer over-read with GB18030 encoding, where the length of a multibyte character was taken from the byte following the lead byte even when the input ended at the lead byte, so unterminated GB18030 input could read one byte past the end of the allocation and crash the server through convert(), convert_from() or length(bytea, name), or crash a libpq client through PQescapeLiteral(), PQescapeIdentifier(), PQescapeStringConn() or PQescapeString()
- debian/patches/CVE-2025-4207.patch: add
pg_encoding_mblen_or_incomplete() to src/backend/utils/mb/wchar.c and
use it in report_invalid_encoding() and report_untranslatable_char(),
and in PQescapeStringInternal() and PQescapeInternal() in
src/interfaces/libpq/fe-exec.c
- CVE-2025-4207
Updated packages:
-
libecpg-compat3-11_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:0e8649bd0310f36a349be3cdf3dcc743f6d3f22e
-
libecpg-dev-11_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:80fef6d5e0e530f4d22542d3742c229529ce29f0
-
libecpg6-11_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:6af4dedff84973ca81b330fe14f54441fedaf186
-
libpgtypes3-11_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:948c92ffa5efd404376e73ba6c8ab224624bada8
-
libpq-dev-11_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:426755d773c46ee63ca68595b3491940230d5cbd
-
libpq5-11_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:8041f0aa1236139d058c569b9408163a98d8e612
-
postgresql11_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:cf361820ba3767dfe9e8ea4feccef8d9dc4a2f5f
-
postgresql11-client_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:2268765c314c169ebff543d7b52b0aab554dc05c
-
postgresql11-doc_11.22-1~bookworm+tuxcare.els22_all.deb
sha:cb91a6e448b0ba9db29cface1cea7ccd46609ca8
-
postgresql11-plperl_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:0137227991b1ceb8c6c15ddd3b87b402d088f951
-
postgresql11-plpython3_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:39e4d802cde8fb319aac0d79066818f0994ea979
-
postgresql11-pltcl_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:36b9416468b42d35e4837321b9759ad6c1600028
-
postgresql11-server-dev_11.22-1~bookworm+tuxcare.els22_amd64.deb
sha:ed36e9253838af33c4f90cba19f568c565e988d1
-
libecpg-compat3-11_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:bfb80a41190c9395b662685d1e92123bd4956067
-
libecpg-dev-11_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:a772342c6ed256320c16ad536087c8bde5e8e516
-
libecpg6-11_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:8b36d08d5b391ab7f7230f1b42b8a40f15ad1bea
-
libpgtypes3-11_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:fb088a860c19c70309077209946be42eaf150f08
-
libpq-dev-11_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:b6fcc73b6a6810ef9b7c1ccc179a75cf7fa3dd28
-
libpq5-11_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:54bb48c2f859a1c6c4e617fdebe378b67f0a2eb1
-
postgresql11_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:ec5b140b8f4b303006564e2825523a47c907c08e
-
postgresql11-client_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:60a528d15641ea76ec224db19269e0659c7abf7e
-
postgresql11-plperl_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:b4eba2a1c4012930ff270a5ef3952001db704229
-
postgresql11-plpython3_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:18d4cdf0f045b2b1c90e26fdb4141d75f5189b49
-
postgresql11-pltcl_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:ea492dd657d7c333cd7e3629a9a8f3d077cfeebd
-
postgresql11-server-dev_11.22-1~bookworm+tuxcare.els22_arm64.deb
sha:cd023312aeba27f2360b004331b33460b7394b73
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
