Opened 11 months ago

Closed 11 months ago

Last modified 8 months ago

#22389 closed enhancement (fixed)

postgresql-18.1

Reported by: Bruce Dubbs Owned by: Douglas R. Reno
Priority: elevated Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New minor version.

Change History (7)

comment:1 by Douglas R. Reno, 11 months ago

Priority: normal → elevated

Two security fixes here:

  • CVE-2025-12817: PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege (3.7 Low)
  • CVE-2025-12818: PostgreSQL libpq undersizes allocations, via integer wraparound (5.9 Medium)

Note that we will need to advise users to upgrade to 17.7 if they don't want to update their database to 18.x

comment:2 by Bruce Dubbs, 11 months ago

Owner: changed from blfs-book to Bruce Dubbs
Status: new → assigned

comment:4 by Bruce Dubbs, 11 months ago

Fixed at commit 67f02868f6.

Leaving open for security advisory.

comment:5 by Bruce Dubbs, 11 months ago

Owner: changed from Bruce Dubbs to Douglas R. Reno
Status: assigned → new

Reassigning to renodr for security advisories.

comment:6 by zeckma, 11 months ago

Resolution: → fixed
Status: new → closed

SA-12.4-040 filed.

comment:7 by Bruce Dubbs, 8 months ago

Milestone: 12.5 → 13.0

Milestone renamed

Note: See TracTickets for help on using tickets.