-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 25 Dec 2025 19:08:36 +0100 Source: postgresql-15 Binary: postgresql-doc-15 Architecture: all Version: 15.15-0+deb12u1 Distribution: bookworm Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Christoph Berg Description: postgresql-doc-15 - documentation for the PostgreSQL database management system Changes: postgresql-15 (15.15-0+deb12u1) bookworm; urgency=medium . * New upstream version 15.15. . + Check for CREATE privileges on the schema in CREATE STATISTICS (Jelte Fennema-Nio) . This omission allowed table owners to create statistics in any schema, potentially leading to unexpected naming conflicts. . The PostgreSQL Project thanks Jelte Fennema-Nio for reporting this problem. (CVE-2025-12817) . + Avoid integer overflow in allocation-size calculations within libpq (Jacob Champion) . Several places in libpq were not sufficiently careful about computing the required size of a memory allocation. Sufficiently large inputs could cause integer overflow, resulting in an undersized buffer, which would then lead to writing past the end of the buffer. . The PostgreSQL Project thanks Aleksey Solovev of Positive Technologies for reporting this problem. (CVE-2025-12818) Checksums-Sha1: c47d08cc44bab2b978499a2349833c30023b867a 10668 postgresql-15_15.15-0+deb12u1_all-buildd.buildinfo a2046916baf65c50947a2c77271d1fa3aa79939b 2082616 postgresql-doc-15_15.15-0+deb12u1_all.deb Checksums-Sha256: b519bdfce4cdb5d89b489a5fabcfd33bbb6d94cdbfdedfd353cc150123a60b56 10668 postgresql-15_15.15-0+deb12u1_all-buildd.buildinfo 684f572ac93c538939bb3356946c0c7c0501bfc8ea9594a00d1a7e999768aa19 2082616 postgresql-doc-15_15.15-0+deb12u1_all.deb Files: 19d613074ae6da829176c16e1fcd9935 10668 database optional postgresql-15_15.15-0+deb12u1_all-buildd.buildinfo 347b7b0955748e606890fa384f4e4f5f 2082616 doc optional postgresql-doc-15_15.15-0+deb12u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELusn8jY95Sf7obGlx30Wh8LXl/YFAmlWc4QACgkQx30Wh8LX l/Y5XRAA2ZX1yl8DgIQJ325VpeAOfQrLW/xxtgSEvMnkG6YOV4XtL+WDLA7bUVA3 vrPV9oYBdKpIIx73Z2Y6mgyiRp2340egRCT0n7PUTgrkzF2Lbe1nKh/DA3tnUY6J S5ThbDh36OyZjfaIV4jKG0/DXFlkh/Mp6apdMy3obsa0wG1CMDux1wxPZlwOwYnn h3Ap6NKDx60Fk7gGUzbCf/zw9n01846rq86SZbFp9tIn1mVhlFIFK0EW+lKvdMeR 1P2nts3wCAUEX6lE/Qyp9weYsFcRUqv9KSw9W/XTOKEwwcjBz3I6D5fjNCIdP385 9PA7SOMWME4ELyCEZJ/NMVxMkIF4RRmF7gWl0qG4eu/kab4aerni1jSXBk4MY1eL +vFqF3OEo6mt01vxgqYIxzM8dbF4zLLOW+4EgjN8MXsXEi8JjTsHDPJcSmFG3nde WK4KkeNX9a2KWmo4acabHuQDIcmAaDP3Odp5XqsYiicS1D6vprFExtXRm0o+RmdS q+DILBbsB5I00Bwehx4Elm2wr3lq92ysJvbuW0UUdD3X57bf9OuCGbIGhn6YlliQ tZlj7bCGsySPdU63usZxTzkFxSHcRoS31Bln5POWu/xbAQo1+4NK6ZijnxIilbUk nPuSInXrnjtGy4Jy7yrYHx3ly+RVBvJMybHix5JP8Vahqkp1MRA= =doO+ -----END PGP SIGNATURE-----