* [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6
@ 2026-08-15 14:00 Bernd Kuhls
2026-08-15 14:39 ` Julien Olivain via buildroot
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Bernd Kuhls @ 2026-08-15 14:00 UTC (permalink / raw)
To: buildroot; +Cc: Maxim Kochetkov
https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
"This release skips PostgreSQL 18 versions from PostgreSQL 18.4 to 18.6.
18.5 was not shipped due to a regression."
Fixes the following CVEs:
CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands (CVSS v3.1: 8.1)
CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership (CVSS v3.1: 3.8)
CVE-2026-6470: Fails to check type USAGE privilege (CVSS v3.1: 4.3)
CVE-2026-6471: Logical decoding can dlopen arbitrary file (CVSS v3.1: 7.2)
CVE-2026-14662: tsvector and tsquery undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
CVE-2026-14663: pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext (CVSS v3.1: 6.5)
CVE-2026-14664: Regexp heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-14666: Row security caching disregards role modifications (CVSS v3.1: 4.2)
CVE-2026-14668: ctid type confusion in selectivity estimator discloses derivative of arbitrary read (CVSS v3.1: 8.1)
CVE-2026-14669: to_char heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-14670: plperl tied object heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-14671: refint plan cache type confusion executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-14672: Observable response discrepancy with non-default scram_iterations provides user existence oracle (CVSS v3.1: 5.3)
CVE-2026-14673: amcheck does not clear untrusted search path (CVSS v3.1: 3.8)
CVE-2026-14676: pg_stat_statements heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-14677: 32-bit pltcl and plperl undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
CVE-2026-14678: pg_trgm picksplit reads past end of buffer (CVSS v3.1: 4.3)
CVE-2026-14679: Stack buffer overflow in argument match writes 0x0 and 0x1 to server memory (CVSS v3.1: 8.2)
CVE-2026-14680: Type confusion via "internal" arguments (CVSS v3.1: 8.8)
CVE-2026-14681: Improper enforcement of GSSAPI encryption when coupled with SSL (CVSS v3.1: 4.2)
CVE-2026-15741: Expression deparse allows SQL injection via EXTRACT argument (CVSS v3.1: 8.8)
CVE-2026-15742: fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound (CVSS v3.1: 8.8)
CVE-2026-16238: Type confusion in pg_restore_attribute_stats() executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-16239: Type confusion in cursor CLOSE + DECLARE executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-16241: ECPG integer underflow can crash the client (CVSS v3.1: 3.8)
CVE-2026-18024: ascii() function reads past end of buffer (CVSS v3.1: 4.3)
CVE-2026-18408: psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client (CVSS v3.1: 8.8)
CVE-2026-19385: pg_dump heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/b2e8c5fddbe0154ce378f3f27d076e8f123b217b
package/postgresql/postgresql.hash | 4 ++--
package/postgresql/postgresql.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/postgresql/postgresql.hash b/package/postgresql/postgresql.hash
index be57f216f1..da6c37b519 100644
--- a/package/postgresql/postgresql.hash
+++ b/package/postgresql/postgresql.hash
@@ -1,4 +1,4 @@
-# From https://ftp.postgresql.org/pub/source/v18.4/postgresql-18.4.tar.bz2.sha256
-sha256 81a81ec695fb0c7901407defaa1d2f7973617154cf27ba74e3a7ab8e64436094 postgresql-18.4.tar.bz2
+# From https://ftp.postgresql.org/pub/source/v18.6/postgresql-18.6.tar.bz2.sha256
+sha256 555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f postgresql-18.6.tar.bz2
# License file, Locally calculated
sha256 3d6af92ff8a4c2cdf69afb1cf44edea727922f5cd0cf8b5f72b11cdecac8fdfd COPYRIGHT
diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk
index 16ed591df4..d852dc0e1e 100644
--- a/package/postgresql/postgresql.mk
+++ b/package/postgresql/postgresql.mk
@@ -4,7 +4,7 @@
#
################################################################################
-POSTGRESQL_VERSION = 18.4
+POSTGRESQL_VERSION = 18.6
POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2
POSTGRESQL_SITE = https://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION)
POSTGRESQL_LICENSE = PostgreSQL
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6
2026-08-15 14:00 [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6 Bernd Kuhls
@ 2026-08-15 14:39 ` Julien Olivain via buildroot
2026-08-17 4:13 ` Maxim Kochetkov via buildroot
2026-08-22 12:34 ` Titouan Christophe via buildroot
2 siblings, 0 replies; 4+ messages in thread
From: Julien Olivain via buildroot @ 2026-08-15 14:39 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Maxim Kochetkov
On 15/08/2026 16:00, Bernd Kuhls wrote:
> https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
> "This release skips PostgreSQL 18 versions from PostgreSQL 18.4 to
> 18.6.
> 18.5 was not shipped due to a regression."
>
> Fixes the following CVEs:
>
> CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines
> as psql commands (CVSS v3.1: 8.1)
> CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics
> ownership (CVSS v3.1: 3.8)
> CVE-2026-6470: Fails to check type USAGE privilege (CVSS v3.1: 4.3)
> CVE-2026-6471: Logical decoding can dlopen arbitrary file (CVSS v3.1:
> 7.2)
> CVE-2026-14662: tsvector and tsquery undersize allocations, via integer
> wraparound (CVSS v3.1: 8.8)
> CVE-2026-14663: pgcrypto, for OpenSSL-disabled ciphers, silently
> encrypts to and decrypts from cleartext (CVSS v3.1: 6.5)
> CVE-2026-14664: Regexp heap buffer overflow executes arbitrary code
> (CVSS v3.1: 8.8)
> CVE-2026-14666: Row security caching disregards role modifications
> (CVSS v3.1: 4.2)
> CVE-2026-14668: ctid type confusion in selectivity estimator discloses
> derivative of arbitrary read (CVSS v3.1: 8.1)
> CVE-2026-14669: to_char heap buffer overflow executes arbitrary code
> (CVSS v3.1: 8.8)
> CVE-2026-14670: plperl tied object heap buffer overflow executes
> arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14671: refint plan cache type confusion executes arbitrary
> code (CVSS v3.1: 8.8)
> CVE-2026-14672: Observable response discrepancy with non-default
> scram_iterations provides user existence oracle (CVSS v3.1: 5.3)
> CVE-2026-14673: amcheck does not clear untrusted search path (CVSS
> v3.1: 3.8)
> CVE-2026-14676: pg_stat_statements heap buffer overflow executes
> arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14677: 32-bit pltcl and plperl undersize allocations, via
> integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-14678: pg_trgm picksplit reads past end of buffer (CVSS v3.1:
> 4.3)
> CVE-2026-14679: Stack buffer overflow in argument match writes 0x0 and
> 0x1 to server memory (CVSS v3.1: 8.2)
> CVE-2026-14680: Type confusion via "internal" arguments (CVSS v3.1:
> 8.8)
> CVE-2026-14681: Improper enforcement of GSSAPI encryption when coupled
> with SSL (CVSS v3.1: 4.2)
> CVE-2026-15741: Expression deparse allows SQL injection via EXTRACT
> argument (CVSS v3.1: 8.8)
> CVE-2026-15742: fuzzystrmatch writes effectively-arbitrary addresses,
> via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-16238: Type confusion in pg_restore_attribute_stats() executes
> arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16239: Type confusion in cursor CLOSE + DECLARE executes
> arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16241: ECPG integer underflow can crash the client (CVSS v3.1:
> 3.8)
> CVE-2026-18024: ascii() function reads past end of buffer (CVSS v3.1:
> 4.3)
> CVE-2026-18408: psql \unrestrict lets superuser of pg_dump origin
> server execute arbitrary code in psql client (CVSS v3.1: 8.8)
> CVE-2026-19385: pg_dump heap buffer overflow executes arbitrary code
> (CVSS v3.1: 8.8)
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6
2026-08-15 14:00 [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6 Bernd Kuhls
2026-08-15 14:39 ` Julien Olivain via buildroot
@ 2026-08-17 4:13 ` Maxim Kochetkov via buildroot
2026-08-22 12:34 ` Titouan Christophe via buildroot
2 siblings, 0 replies; 4+ messages in thread
From: Maxim Kochetkov via buildroot @ 2026-08-17 4:13 UTC (permalink / raw)
To: Bernd Kuhls, buildroot
15.08.2026 17:00, Bernd Kuhls wrote:
> https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
> "This release skips PostgreSQL 18 versions from PostgreSQL 18.4 to 18.6.
> 18.5 was not shipped due to a regression."
>
> Fixes the following CVEs:
>
> CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands (CVSS v3.1: 8.1)
> CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership (CVSS v3.1: 3.8)
> CVE-2026-6470: Fails to check type USAGE privilege (CVSS v3.1: 4.3)
> CVE-2026-6471: Logical decoding can dlopen arbitrary file (CVSS v3.1: 7.2)
> CVE-2026-14662: tsvector and tsquery undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-14663: pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext (CVSS v3.1: 6.5)
> CVE-2026-14664: Regexp heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14666: Row security caching disregards role modifications (CVSS v3.1: 4.2)
> CVE-2026-14668: ctid type confusion in selectivity estimator discloses derivative of arbitrary read (CVSS v3.1: 8.1)
> CVE-2026-14669: to_char heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14670: plperl tied object heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14671: refint plan cache type confusion executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14672: Observable response discrepancy with non-default scram_iterations provides user existence oracle (CVSS v3.1: 5.3)
> CVE-2026-14673: amcheck does not clear untrusted search path (CVSS v3.1: 3.8)
> CVE-2026-14676: pg_stat_statements heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14677: 32-bit pltcl and plperl undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-14678: pg_trgm picksplit reads past end of buffer (CVSS v3.1: 4.3)
> CVE-2026-14679: Stack buffer overflow in argument match writes 0x0 and 0x1 to server memory (CVSS v3.1: 8.2)
> CVE-2026-14680: Type confusion via "internal" arguments (CVSS v3.1: 8.8)
> CVE-2026-14681: Improper enforcement of GSSAPI encryption when coupled with SSL (CVSS v3.1: 4.2)
> CVE-2026-15741: Expression deparse allows SQL injection via EXTRACT argument (CVSS v3.1: 8.8)
> CVE-2026-15742: fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-16238: Type confusion in pg_restore_attribute_stats() executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16239: Type confusion in cursor CLOSE + DECLARE executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16241: ECPG integer underflow can crash the client (CVSS v3.1: 3.8)
> CVE-2026-18024: ascii() function reads past end of buffer (CVSS v3.1: 4.3)
> CVE-2026-18408: psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client (CVSS v3.1: 8.8)
> CVE-2026-19385: pg_dump heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6
2026-08-15 14:00 [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6 Bernd Kuhls
2026-08-15 14:39 ` Julien Olivain via buildroot
2026-08-17 4:13 ` Maxim Kochetkov via buildroot
@ 2026-08-22 12:34 ` Titouan Christophe via buildroot
2 siblings, 0 replies; 4+ messages in thread
From: Titouan Christophe via buildroot @ 2026-08-22 12:34 UTC (permalink / raw)
To: Bernd Kuhls, buildroot; +Cc: Maxim Kochetkov
On 15/08/26 16:00, Bernd Kuhls wrote:
> https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
> "This release skips PostgreSQL 18 versions from PostgreSQL 18.4 to 18.6.
> 18.5 was not shipped due to a regression."
>
> Fixes the following CVEs:
>
> CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands (CVSS v3.1: 8.1)
> CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership (CVSS v3.1: 3.8)
> CVE-2026-6470: Fails to check type USAGE privilege (CVSS v3.1: 4.3)
> CVE-2026-6471: Logical decoding can dlopen arbitrary file (CVSS v3.1: 7.2)
> CVE-2026-14662: tsvector and tsquery undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-14663: pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext (CVSS v3.1: 6.5)
> CVE-2026-14664: Regexp heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14666: Row security caching disregards role modifications (CVSS v3.1: 4.2)
> CVE-2026-14668: ctid type confusion in selectivity estimator discloses derivative of arbitrary read (CVSS v3.1: 8.1)
> CVE-2026-14669: to_char heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14670: plperl tied object heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14671: refint plan cache type confusion executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14672: Observable response discrepancy with non-default scram_iterations provides user existence oracle (CVSS v3.1: 5.3)
> CVE-2026-14673: amcheck does not clear untrusted search path (CVSS v3.1: 3.8)
> CVE-2026-14676: pg_stat_statements heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14677: 32-bit pltcl and plperl undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-14678: pg_trgm picksplit reads past end of buffer (CVSS v3.1: 4.3)
> CVE-2026-14679: Stack buffer overflow in argument match writes 0x0 and 0x1 to server memory (CVSS v3.1: 8.2)
> CVE-2026-14680: Type confusion via "internal" arguments (CVSS v3.1: 8.8)
> CVE-2026-14681: Improper enforcement of GSSAPI encryption when coupled with SSL (CVSS v3.1: 4.2)
> CVE-2026-15741: Expression deparse allows SQL injection via EXTRACT argument (CVSS v3.1: 8.8)
> CVE-2026-15742: fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-16238: Type confusion in pg_restore_attribute_stats() executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16239: Type confusion in cursor CLOSE + DECLARE executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16241: ECPG integer underflow can crash the client (CVSS v3.1: 3.8)
> CVE-2026-18024: ascii() function reads past end of buffer (CVSS v3.1: 4.3)
> CVE-2026-18408: psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client (CVSS v3.1: 8.8)
> CVE-2026-19385: pg_dump heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> ---
Applied to 2026.05.x, thanks !
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2026-08-22 12:35 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-15 14:00 [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6 Bernd Kuhls
2026-08-15 14:39 ` Julien Olivain via buildroot
2026-08-17 4:13 ` Maxim Kochetkov via buildroot
2026-08-22 12:34 ` Titouan Christophe via buildroot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.