Backport CVE on REL_2_STABLE - #1903

Open

reshke wants to merge 19 commits into

apache:REL_2_STABLEfrom

reshke:backport_cve_rel_2

Commits on Aug 18, 2026

Harden tsvector code against overflows.

tglsfdc
authored and
reshke
committed
acc919b
Harden tsquery code against overflows.

tglsfdc
authored and
reshke
committed
d5c1178
Fix potential buffer overrun in regexp match/split functions.

MasahikoSawada
authored and
reshke
committed
299f532
Be more wary about constant's datatype in scalarineqsel().

tglsfdc
authored and
reshke
committed
849a839
Replace fixed-size, too-short array with a palloc'd one.

tglsfdc
authored and
reshke
committed
da28a0c
Protect some fixed-size arrays that have FUNC_MAX_ARGS elements.

tglsfdc
authored and
reshke
committed
c858f91
Fix pg_trgm's picksplit function with all-true datums

hlinnaka
authored and
reshke
committed
6b82127
Use palloc_array() in pltcl and plperl to avoid overflow

hlinnaka
authored and
reshke
committed
bc9ae6e
ecpg: Fix out-of-bound writes due to processing of invalid bytea data

michaelpq
authored and
reshke
committed
210cce1
Obstruct EXTRACT() field name deparse injection.

nathan-bossart
authored and
reshke
committed
e20f0d6
Cross-check the type of a portal running EXECUTE or FETCH.

robertmhaas
authored and
reshke
committed
4a06582
Check for USAGE privilege on the subtype in CREATE TYPE AS RANGE.

nathan-bossart
authored and
reshke
committed
1802fb2
Check for USAGE privilege on the composite type in ALTER TABLE OF.

nathan-bossart
authored and
reshke
committed
ac4bd2f
Invalidate plan cache after role changes.

nathan-bossart
authored and
reshke
committed
c68d412
Save/restore more lexer state when skipping text due to \if.

tglsfdc
authored and
reshke
committed
8513d2a
Fix errorhandling for PGP encryption

danielgustafsson
authored and
reshke
committed
28bd2ef
pgcrypto: Add option to revert to prior decryption behavior

jchampio
authored and
reshke
committed
d0df0a7
psql: Don't do backquote expansion in \unrestrict.

nathan-bossart
authored and
reshke
committed
1659d45
Guard against overlength time zone abbreviations in to_char().

tglsfdc
authored and
reshke
committed
c4ffaf8

Navigation Menu

Uh oh!

Backport CVE on REL_2_STABLE - #1903

Backport CVE on REL_2_STABLE#1903
reshke wants to merge 19 commits into
apache:REL_2_STABLEfrom
reshke:backport_cve_rel_2

Commits on Aug 18, 2026

Harden tsvector code against overflows.

Harden tsquery code against overflows.

Fix potential buffer overrun in regexp match/split functions.

Be more wary about constant's datatype in scalarineqsel().

Replace fixed-size, too-short array with a palloc'd one.

Protect some fixed-size arrays that have FUNC_MAX_ARGS elements.

Fix pg_trgm's picksplit function with all-true datums

Use palloc_array() in pltcl and plperl to avoid overflow

ecpg: Fix out-of-bound writes due to processing of invalid bytea data

Obstruct EXTRACT() field name deparse injection.

Cross-check the type of a portal running EXECUTE or FETCH.

Check for USAGE privilege on the subtype in CREATE TYPE AS RANGE.

Check for USAGE privilege on the composite type in ALTER TABLE OF.

Invalidate plan cache after role changes.

Save/restore more lexer state when skipping text due to \if.

Fix errorhandling for PGP encryption

pgcrypto: Add option to revert to prior decryption behavior

psql: Don't do backquote expansion in \unrestrict.

Guard against overlength time zone abbreviations in to_char().