* [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6
@ 2026-08-15 14:00 Bernd Kuhls
2026-08-15 14:39 ` Julien Olivain via buildroot
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Bernd Kuhls @ 2026-08-15 14:00 UTC (permalink / raw)
To: buildroot; +Cc: Maxim Kochetkov
https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
"This release skips PostgreSQL 18 versions from PostgreSQL 18.4 to 18.6.
18.5 was not shipped due to a regression."
Fixes the following CVEs:
CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands (CVSS v3.1: 8.1)
CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership (CVSS v3.1: 3.8)
CVE-2026-6470: Fails to check type USAGE privilege (CVSS v3.1: 4.3)
CVE-2026-6471: Logical decoding can dlopen arbitrary file (CVSS v3.1: 7.2)
CVE-2026-14662: tsvector and tsquery undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
CVE-2026-14663: pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext (CVSS v3.1: 6.5)
CVE-2026-14664: Regexp heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-14666: Row security caching disregards role modifications (CVSS v3.1: 4.2)
CVE-2026-14668: ctid type confusion in selectivity estimator discloses derivative of arbitrary read (CVSS v3.1: 8.1)
CVE-2026-14669: to_char heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-14670: plperl tied object heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-14671: refint plan cache type confusion executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-14672: Observable response discrepancy with non-default scram_iterations provides user existence oracle (CVSS v3.1: 5.3)
CVE-2026-14673: amcheck does not clear untrusted search path (CVSS v3.1: 3.8)
CVE-2026-14676: pg_stat_statements heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-14677: 32-bit pltcl and plperl undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
CVE-2026-14678: pg_trgm picksplit reads past end of buffer (CVSS v3.1: 4.3)
CVE-2026-14679: Stack buffer overflow in argument match writes 0x0 and 0x1 to server memory (CVSS v3.1: 8.2)
CVE-2026-14680: Type confusion via "internal" arguments (CVSS v3.1: 8.8)
CVE-2026-14681: Improper enforcement of GSSAPI encryption when coupled with SSL (CVSS v3.1: 4.2)
CVE-2026-15741: Expression deparse allows SQL injection via EXTRACT argument (CVSS v3.1: 8.8)
CVE-2026-15742: fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound (CVSS v3.1: 8.8)
CVE-2026-16238: Type confusion in pg_restore_attribute_stats() executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-16239: Type confusion in cursor CLOSE + DECLARE executes arbitrary code (CVSS v3.1: 8.8)
CVE-2026-16241: ECPG integer underflow can crash the client (CVSS v3.1: 3.8)
CVE-2026-18024: ascii() function reads past end of buffer (CVSS v3.1: 4.3)
CVE-2026-18408: psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client (CVSS v3.1: 8.8)
CVE-2026-19385: pg_dump heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/b2e8c5fddbe0154ce378f3f27d076e8f123b217b
package/postgresql/postgresql.hash | 4 ++--
package/postgresql/postgresql.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/postgresql/postgresql.hash b/package/postgresql/postgresql.hash
index be57f216f1..da6c37b519 100644
--- a/package/postgresql/postgresql.hash
+++ b/package/postgresql/postgresql.hash
@@ -1,4 +1,4 @@
-# From https://ftp.postgresql.org/pub/source/v18.4/postgresql-18.4.tar.bz2.sha256
-sha256 81a81ec695fb0c7901407defaa1d2f7973617154cf27ba74e3a7ab8e64436094 postgresql-18.4.tar.bz2
+# From https://ftp.postgresql.org/pub/source/v18.6/postgresql-18.6.tar.bz2.sha256
+sha256 555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f postgresql-18.6.tar.bz2
# License file, Locally calculated
sha256 3d6af92ff8a4c2cdf69afb1cf44edea727922f5cd0cf8b5f72b11cdecac8fdfd COPYRIGHT
diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk
index 16ed591df4..d852dc0e1e 100644
--- a/package/postgresql/postgresql.mk
+++ b/package/postgresql/postgresql.mk
@@ -4,7 +4,7 @@
#
################################################################################
-POSTGRESQL_VERSION = 18.4
+POSTGRESQL_VERSION = 18.6
POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2
POSTGRESQL_SITE = https://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION)
POSTGRESQL_LICENSE = PostgreSQL
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6
2026-08-15 14:00 [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6 Bernd Kuhls
@ 2026-08-15 14:39 ` Julien Olivain via buildroot
2026-08-17 4:13 ` Maxim Kochetkov via buildroot
2026-08-22 12:34 ` Titouan Christophe via buildroot
2 siblings, 0 replies; 4+ messages in thread
From: Julien Olivain via buildroot @ 2026-08-15 14:39 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Maxim Kochetkov
On 15/08/2026 16:00, Bernd Kuhls wrote:
> https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
> "This release skips PostgreSQL 18 versions from PostgreSQL 18.4 to
> 18.6.
> 18.5 was not shipped due to a regression."
>
> Fixes the following CVEs:
>
> CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines
> as psql commands (CVSS v3.1: 8.1)
> CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics
> ownership (CVSS v3.1: 3.8)
> CVE-2026-6470: Fails to check type USAGE privilege (CVSS v3.1: 4.3)
> CVE-2026-6471: Logical decoding can dlopen arbitrary file (CVSS v3.1:
> 7.2)
> CVE-2026-14662: tsvector and tsquery undersize allocations, via integer
> wraparound (CVSS v3.1: 8.8)
> CVE-2026-14663: pgcrypto, for OpenSSL-disabled ciphers, silently
> encrypts to and decrypts from cleartext (CVSS v3.1: 6.5)
> CVE-2026-14664: Regexp heap buffer overflow executes arbitrary code
> (CVSS v3.1: 8.8)
> CVE-2026-14666: Row security caching disregards role modifications
> (CVSS v3.1: 4.2)
> CVE-2026-14668: ctid type confusion in selectivity estimator discloses
> derivative of arbitrary read (CVSS v3.1: 8.1)
> CVE-2026-14669: to_char heap buffer overflow executes arbitrary code
> (CVSS v3.1: 8.8)
> CVE-2026-14670: plperl tied object heap buffer overflow executes
> arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14671: refint plan cache type confusion executes arbitrary
> code (CVSS v3.1: 8.8)
> CVE-2026-14672: Observable response discrepancy with non-default
> scram_iterations provides user existence oracle (CVSS v3.1: 5.3)
> CVE-2026-14673: amcheck does not clear untrusted search path (CVSS
> v3.1: 3.8)
> CVE-2026-14676: pg_stat_statements heap buffer overflow executes
> arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14677: 32-bit pltcl and plperl undersize allocations, via
> integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-14678: pg_trgm picksplit reads past end of buffer (CVSS v3.1:
> 4.3)
> CVE-2026-14679: Stack buffer overflow in argument match writes 0x0 and
> 0x1 to server memory (CVSS v3.1: 8.2)
> CVE-2026-14680: Type confusion via "internal" arguments (CVSS v3.1:
> 8.8)
> CVE-2026-14681: Improper enforcement of GSSAPI encryption when coupled
> with SSL (CVSS v3.1: 4.2)
> CVE-2026-15741: Expression deparse allows SQL injection via EXTRACT
> argument (CVSS v3.1: 8.8)
> CVE-2026-15742: fuzzystrmatch writes effectively-arbitrary addresses,
> via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-16238: Type confusion in pg_restore_attribute_stats() executes
> arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16239: Type confusion in cursor CLOSE + DECLARE executes
> arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16241: ECPG integer underflow can crash the client (CVSS v3.1:
> 3.8)
> CVE-2026-18024: ascii() function reads past end of buffer (CVSS v3.1:
> 4.3)
> CVE-2026-18408: psql \unrestrict lets superuser of pg_dump origin
> server execute arbitrary code in psql client (CVSS v3.1: 8.8)
> CVE-2026-19385: pg_dump heap buffer overflow executes arbitrary code
> (CVSS v3.1: 8.8)
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6
2026-08-15 14:00 [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6 Bernd Kuhls
2026-08-15 14:39 ` Julien Olivain via buildroot
@ 2026-08-17 4:13 ` Maxim Kochetkov via buildroot
2026-08-22 12:34 ` Titouan Christophe via buildroot
2 siblings, 0 replies; 4+ messages in thread
From: Maxim Kochetkov via buildroot @ 2026-08-17 4:13 UTC (permalink / raw)
To: Bernd Kuhls, buildroot
15.08.2026 17:00, Bernd Kuhls wrote:
> https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
> "This release skips PostgreSQL 18 versions from PostgreSQL 18.4 to 18.6.
> 18.5 was not shipped due to a regression."
>
> Fixes the following CVEs:
>
> CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands (CVSS v3.1: 8.1)
> CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership (CVSS v3.1: 3.8)
> CVE-2026-6470: Fails to check type USAGE privilege (CVSS v3.1: 4.3)
> CVE-2026-6471: Logical decoding can dlopen arbitrary file (CVSS v3.1: 7.2)
> CVE-2026-14662: tsvector and tsquery undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-14663: pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext (CVSS v3.1: 6.5)
> CVE-2026-14664: Regexp heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14666: Row security caching disregards role modifications (CVSS v3.1: 4.2)
> CVE-2026-14668: ctid type confusion in selectivity estimator discloses derivative of arbitrary read (CVSS v3.1: 8.1)
> CVE-2026-14669: to_char heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14670: plperl tied object heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14671: refint plan cache type confusion executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14672: Observable response discrepancy with non-default scram_iterations provides user existence oracle (CVSS v3.1: 5.3)
> CVE-2026-14673: amcheck does not clear untrusted search path (CVSS v3.1: 3.8)
> CVE-2026-14676: pg_stat_statements heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14677: 32-bit pltcl and plperl undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-14678: pg_trgm picksplit reads past end of buffer (CVSS v3.1: 4.3)
> CVE-2026-14679: Stack buffer overflow in argument match writes 0x0 and 0x1 to server memory (CVSS v3.1: 8.2)
> CVE-2026-14680: Type confusion via "internal" arguments (CVSS v3.1: 8.8)
> CVE-2026-14681: Improper enforcement of GSSAPI encryption when coupled with SSL (CVSS v3.1: 4.2)
> CVE-2026-15741: Expression deparse allows SQL injection via EXTRACT argument (CVSS v3.1: 8.8)
> CVE-2026-15742: fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-16238: Type confusion in pg_restore_attribute_stats() executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16239: Type confusion in cursor CLOSE + DECLARE executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16241: ECPG integer underflow can crash the client (CVSS v3.1: 3.8)
> CVE-2026-18024: ascii() function reads past end of buffer (CVSS v3.1: 4.3)
> CVE-2026-18408: psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client (CVSS v3.1: 8.8)
> CVE-2026-19385: pg_dump heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6
2026-08-15 14:00 [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6 Bernd Kuhls
2026-08-15 14:39 ` Julien Olivain via buildroot
2026-08-17 4:13 ` Maxim Kochetkov via buildroot
@ 2026-08-22 12:34 ` Titouan Christophe via buildroot
2 siblings, 0 replies; 4+ messages in thread
From: Titouan Christophe via buildroot @ 2026-08-22 12:34 UTC (permalink / raw)
To: Bernd Kuhls, buildroot; +Cc: Maxim Kochetkov
On 15/08/26 16:00, Bernd Kuhls wrote:
> https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
> "This release skips PostgreSQL 18 versions from PostgreSQL 18.4 to 18.6.
> 18.5 was not shipped due to a regression."
>
> Fixes the following CVEs:
>
> CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands (CVSS v3.1: 8.1)
> CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership (CVSS v3.1: 3.8)
> CVE-2026-6470: Fails to check type USAGE privilege (CVSS v3.1: 4.3)
> CVE-2026-6471: Logical decoding can dlopen arbitrary file (CVSS v3.1: 7.2)
> CVE-2026-14662: tsvector and tsquery undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-14663: pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext (CVSS v3.1: 6.5)
> CVE-2026-14664: Regexp heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14666: Row security caching disregards role modifications (CVSS v3.1: 4.2)
> CVE-2026-14668: ctid type confusion in selectivity estimator discloses derivative of arbitrary read (CVSS v3.1: 8.1)
> CVE-2026-14669: to_char heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14670: plperl tied object heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14671: refint plan cache type confusion executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14672: Observable response discrepancy with non-default scram_iterations provides user existence oracle (CVSS v3.1: 5.3)
> CVE-2026-14673: amcheck does not clear untrusted search path (CVSS v3.1: 3.8)
> CVE-2026-14676: pg_stat_statements heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-14677: 32-bit pltcl and plperl undersize allocations, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-14678: pg_trgm picksplit reads past end of buffer (CVSS v3.1: 4.3)
> CVE-2026-14679: Stack buffer overflow in argument match writes 0x0 and 0x1 to server memory (CVSS v3.1: 8.2)
> CVE-2026-14680: Type confusion via "internal" arguments (CVSS v3.1: 8.8)
> CVE-2026-14681: Improper enforcement of GSSAPI encryption when coupled with SSL (CVSS v3.1: 4.2)
> CVE-2026-15741: Expression deparse allows SQL injection via EXTRACT argument (CVSS v3.1: 8.8)
> CVE-2026-15742: fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound (CVSS v3.1: 8.8)
> CVE-2026-16238: Type confusion in pg_restore_attribute_stats() executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16239: Type confusion in cursor CLOSE + DECLARE executes arbitrary code (CVSS v3.1: 8.8)
> CVE-2026-16241: ECPG integer underflow can crash the client (CVSS v3.1: 3.8)
> CVE-2026-18024: ascii() function reads past end of buffer (CVSS v3.1: 4.3)
> CVE-2026-18408: psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client (CVSS v3.1: 8.8)
> CVE-2026-19385: pg_dump heap buffer overflow executes arbitrary code (CVSS v3.1: 8.8)
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> ---
Applied to 2026.05.x, thanks !
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2026-08-22 12:35 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-15 14:00 [Buildroot] [PATCH 1/1] package/postgresql: security bump version to 18.6 Bernd Kuhls
2026-08-15 14:39 ` Julien Olivain via buildroot
2026-08-17 4:13 ` Maxim Kochetkov via buildroot
2026-08-22 12:34 ` Titouan Christophe via buildroot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox