Michael Paquier 457b8737ab ecpg: Fix out-of-bound writes due to processing of invalid bytea data ...

ECPG assumes that any bytea data it receives from a backend starts with
'\x' as its first two bytes, but a check was missed to enforce that.  A
rogue server sending some garbage bytea data would be able to crash a
client, resulting in a client-side DoS, in the most common cases.

Reported-by: ylwangtju <ylwangtju@qq.com>
Backpatch-through: 14
Security: CVE-2026-16241

2026-08-10 06:38:05 -07:00

..

ecpg

ecpg: Fix out-of-bound writes due to processing of invalid bytea data

2026-08-10 06:38:05 -07:00

libpq

Translation updates

2026-08-10 12:10:27 +02:00

libpq-oauth

libpq-oauth: Avoid overflow for very large intervals

2026-07-31 11:13:41 -07:00

Makefile

oauth: Move the builtin flow into a separate module

2025-05-01 09:14:30 -07:00

meson.build

Update copyright for 2026

2026-01-01 13:24:10 -05:00