Repository navigation

Backport CVE fixes from 16.15 - #1891

Merged

reshke merged 26 commits into

mainfrom

backport_cve

Aug 17, 2026

Merged

Backport CVE fixes from 16.15#1891
reshke merged 26 commits into
mainfrom
backport_cve

Commits on Aug 14, 2026
- Harden tsvector code against overflows.
  
  tglsfdc
  authored and
  reshke
  committed
  c163743
- Harden tsquery code against overflows.
  
  tglsfdc
  authored and
  reshke
  committed
  7d2170a
- Fix potential buffer overrun in regexp match/split functions.
  
  MasahikoSawada
  authored and
  reshke
  committed
  16364f5
- Harden PL/Perl code against "tied" Perl arrays and hashes.
  
  tglsfdc
  authored and
  reshke
  committed
  a11a579
- Be more wary about constant's datatype in scalarineqsel().
  
  tglsfdc
  authored and
  reshke
  committed
  8463075
- Replace fixed-size, too-short array with a palloc'd one.
  
  tglsfdc
  authored and
  reshke
  committed
  1e1a6fe
- pg_dump: avoid assuming how long pg_proc.protrftypes can be.
  
  tglsfdc
  authored and
  reshke
  committed
  0d3b04c
- Protect some fixed-size arrays that have FUNC_MAX_ARGS elements.
  
  tglsfdc
  authored and
  reshke
  committed
  918078b
- Reject calls from SQL to functions that take or return type internal.
  
  tglsfdc
  authored and
  reshke
  committed
  732f2a8
- Return nulls honestly in aggregate "combine" functions.
  
  tglsfdc
  authored and
  reshke
  committed
  c7aa1e1
- Fix pg_trgm's picksplit function with all-true datums
  
  hlinnaka
  authored and
  reshke
  committed
  3b340d7
- Use palloc_array() in pltcl and plperl to avoid overflow
  
  hlinnaka
  authored and
  reshke
  committed
  1798a7f
- ecpg: Fix out-of-bound writes due to processing of invalid bytea data
  
  michaelpq
  authored and
  reshke
  committed
  ae4c7c1
- Obstruct EXTRACT() field name deparse injection.
  
  nathan-bossart
  authored and
  reshke
  committed
  895314a
- Use value of scram_iterations in mock_scram_secret().
  
  nathan-bossart
  authored and
  reshke
  committed
  ed048bc
- Empty search_path in amcheck.
  
  nmisch
  authored and
  reshke
  committed
  40f76ca
- Cross-check the type of a portal running EXECUTE or FETCH.
  
  robertmhaas
  authored and
  reshke
  committed
  ad3b13d
- Avoid overflow in Levenshtein distance calculations.
  
  nathan-bossart
  authored and
  reshke
  committed
  6f39b92
- Check for USAGE privilege on the subtype in CREATE TYPE AS RANGE.
  
  nathan-bossart
  authored and
  reshke
  committed
  8a11d65
- Check for USAGE privilege on the composite type in ALTER TABLE OF.
  
  nathan-bossart
  authored and
  reshke
  committed
  09cf4fe
- Invalidate plan cache after role changes.
  
  nathan-bossart
  authored and
  reshke
  committed
  a368525
- Save/restore more lexer state when skipping text due to \if.
  
  tglsfdc
  authored and
  reshke
  committed
  00e4d80
- Fix errorhandling for PGP encryption
  
  danielgustafsson
  authored and
  reshke
  committed
  223b2e6
- pgcrypto: Add option to revert to prior decryption behavior
  
  jchampio
  authored and
  reshke
  committed
  159eb9a
- psql: Don't do backquote expansion in \unrestrict.
  
  nathan-bossart
  authored and
  reshke
  committed
  8e3e5f4
- Backport adaptations
  reshke
  committed
  57a2a77

Commits

Commits on Aug 14, 2026