Skip to content

Commit e9238c6

Browse files
jkatzjkatz
committed
2026-08-13 update release
1 parent 73aab74 commit e9238c6

30 files changed

Lines changed: 2934 additions & 1 deletion

‎data/releases/2026-08-13.yaml‎

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
date: 2026-08-13
2+
versions:
3+
- 19beta3
4+
- 18.6
5+
- 17.11
6+
- 16.15
7+
- 15.19
8+
- 14.24
9+
news:
10+
id: 3365
11+
cve:
12+
- 2026-6464
13+
- 2026-6469
14+
- 2026-6470
15+
- 2026-6471
16+
- 2026-14662
17+
- 2026-14663
18+
- 2026-14664
19+
- 2026-14666
20+
- 2026-14668
21+
- 2026-14669
22+
- 2026-14670
23+
- 2026-14671
24+
- 2026-14672
25+
- 2026-14673
26+
- 2026-14676
27+
- 2026-14677
28+
- 2026-14678
29+
- 2026-14679
30+
- 2026-14680
31+
- 2026-14681
32+
- 2026-15741
33+
- 2026-15742
34+
- 2026-16238
35+
- 2026-16239
36+
- 2026-16241
37+
- 2026-18024
38+
- 2026-18408
39+
- 2026-19385

‎data/security/cve/CVE-2026-14662.json‎

Lines changed: 101 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,101 @@
1+
{
2+
"dataType": "CVE_RECORD",
3+
"dataVersion": "5.0",
4+
"cveMetadata": {
5+
"assignerShortName": "PostgreSQL",
6+
"assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
7+
"cveId": "CVE-2026-14662",
8+
"state": "PUBLISHED"
9+
},
10+
"containers": {
11+
"cna": {
12+
"providerMetadata": {
13+
"orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
14+
"shortName": "PostgreSQL"
15+
},
16+
"title": "PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound",
17+
"x_postgresql": {
18+
"component": "core server"
19+
},
20+
"descriptions": [
21+
{
22+
"lang": "en",
23+
"value": "Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected."
24+
}
25+
],
26+
"affected": [
27+
{
28+
"defaultStatus": "unaffected",
29+
"product": "PostgreSQL",
30+
"vendor": "n/a",
31+
"versions": [
32+
{
33+
"lessThan": "18.5",
34+
"status": "affected",
35+
"version": "18",
36+
"versionType": "rpm"
37+
},
38+
{
39+
"lessThan": "17.11",
40+
"status": "affected",
41+
"version": "17",
42+
"versionType": "rpm"
43+
},
44+
{
45+
"lessThan": "16.15",
46+
"status": "affected",
47+
"version": "16",
48+
"versionType": "rpm"
49+
},
50+
{
51+
"lessThan": "15.19",
52+
"status": "affected",
53+
"version": "15",
54+
"versionType": "rpm"
55+
},
56+
{
57+
"lessThan": "14.24",
58+
"status": "affected",
59+
"version": "0",
60+
"versionType": "rpm"
61+
}
62+
]
63+
}
64+
],
65+
"problemTypes": [
66+
{
67+
"descriptions": [
68+
{
69+
"lang": "en",
70+
"cweId": "CWE-190",
71+
"type": "CWE",
72+
"description": "Integer Overflow or Wraparound"
73+
}
74+
]
75+
}
76+
],
77+
"references": [
78+
{
79+
"url": "https://www.postgresql.org/support/security/CVE-2026-14662/"
80+
}
81+
],
82+
"metrics": [
83+
{
84+
"format": "CVSS",
85+
"cvssV3_1": {
86+
"version": "3.1",
87+
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
88+
"baseScore": 8.8,
89+
"baseSeverity": "HIGH"
90+
}
91+
}
92+
],
93+
"credits": [
94+
{
95+
"lang": "en",
96+
"value": "The PostgreSQL project thanks Yuhang Wu, Zhenpeng Lin, Zheng Yu, and Hcamael for reporting this problem."
97+
}
98+
]
99+
}
100+
}
101+
}

‎data/security/cve/CVE-2026-14663.json‎

Lines changed: 119 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,119 @@
1+
{
2+
"dataType": "CVE_RECORD",
3+
"dataVersion": "5.0",
4+
"cveMetadata": {
5+
"assignerShortName": "PostgreSQL",
6+
"assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
7+
"cveId": "CVE-2026-14663",
8+
"state": "PUBLISHED"
9+
},
10+
"containers": {
11+
"cna": {
12+
"providerMetadata": {
13+
"orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
14+
"shortName": "PostgreSQL"
15+
},
16+
"title": "PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext",
17+
"x_postgresql": {
18+
"component": "contrib module"
19+
},
20+
"descriptions": [
21+
{
22+
"lang": "en",
23+
"value": "Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed even with the wrong key. This in turn loses the modest protection from the Modification Detection Code (MDC). Affected functions are pgp_sym_encrypt, pgp_sym_decrypt, pgp_pub_encrypt, pgp_pub_decrypt, pgp_sym_encrypt_bytea, pgp_sym_decrypt_bytea, pgp_pub_encrypt_bytea, and pgp_pub_decrypt_bytea. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected."
24+
}
25+
],
26+
"affected": [
27+
{
28+
"defaultStatus": "unaffected",
29+
"product": "PostgreSQL",
30+
"vendor": "n/a",
31+
"versions": [
32+
{
33+
"lessThan": "18.5",
34+
"status": "affected",
35+
"version": "18",
36+
"versionType": "rpm"
37+
},
38+
{
39+
"lessThan": "17.11",
40+
"status": "affected",
41+
"version": "17",
42+
"versionType": "rpm"
43+
},
44+
{
45+
"lessThan": "16.15",
46+
"status": "affected",
47+
"version": "16",
48+
"versionType": "rpm"
49+
},
50+
{
51+
"lessThan": "15.19",
52+
"status": "affected",
53+
"version": "15",
54+
"versionType": "rpm"
55+
},
56+
{
57+
"lessThan": "14.24",
58+
"status": "affected",
59+
"version": "0",
60+
"versionType": "rpm"
61+
}
62+
]
63+
}
64+
],
65+
"problemTypes": [
66+
{
67+
"descriptions": [
68+
{
69+
"lang": "en",
70+
"cweId": "CWE-313",
71+
"type": "CWE",
72+
"description": "Cleartext Storage in a File or on Disk"
73+
},
74+
{
75+
"lang": "en",
76+
"cweId": "CWE-345",
77+
"type": "CWE",
78+
"description": "Insufficient Verification of Data Authenticity"
79+
}
80+
]
81+
}
82+
],
83+
"references": [
84+
{
85+
"url": "https://www.postgresql.org/support/security/CVE-2026-14663/"
86+
}
87+
],
88+
"metrics": [
89+
{
90+
"format": "CVSS",
91+
"cvssV3_1": {
92+
"version": "3.1",
93+
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
94+
"baseScore": 6.5,
95+
"baseSeverity": "MEDIUM"
96+
}
97+
}
98+
],
99+
"configurations": [
100+
{
101+
"lang": "en",
102+
"value": "A data owner is managing encrypted data with the pgcrypto extension."
103+
}
104+
],
105+
"workarounds": [
106+
{
107+
"lang": "en",
108+
"value": "Use FIPS-compliant ciphers or other OpenSSL-enabled ciphers"
109+
}
110+
],
111+
"credits": [
112+
{
113+
"lang": "en",
114+
"value": "The PostgreSQL project thanks Shishir Sharma for reporting this problem."
115+
}
116+
]
117+
}
118+
}
119+
}

‎data/security/cve/CVE-2026-14664.json‎

Lines changed: 101 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,101 @@
1+
{
2+
"dataType": "CVE_RECORD",
3+
"dataVersion": "5.0",
4+
"cveMetadata": {
5+
"assignerShortName": "PostgreSQL",
6+
"assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
7+
"cveId": "CVE-2026-14664",
8+
"state": "PUBLISHED"
9+
},
10+
"containers": {
11+
"cna": {
12+
"providerMetadata": {
13+
"orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
14+
"shortName": "PostgreSQL"
15+
},
16+
"title": "PostgreSQL regexp heap buffer overflow executes arbitrary code",
17+
"x_postgresql": {
18+
"component": "core server"
19+
},
20+
"descriptions": [
21+
{
22+
"lang": "en",
23+
"value": "Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when round-tripped through pg_wchar. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected."
24+
}
25+
],
26+
"affected": [
27+
{
28+
"defaultStatus": "unaffected",
29+
"product": "PostgreSQL",
30+
"vendor": "n/a",
31+
"versions": [
32+
{
33+
"lessThan": "18.5",
34+
"status": "affected",
35+
"version": "18",
36+
"versionType": "rpm"
37+
},
38+
{
39+
"lessThan": "17.11",
40+
"status": "affected",
41+
"version": "17",
42+
"versionType": "rpm"
43+
},
44+
{
45+
"lessThan": "16.15",
46+
"status": "affected",
47+
"version": "16",
48+
"versionType": "rpm"
49+
},
50+
{
51+
"lessThan": "15.19",
52+
"status": "affected",
53+
"version": "15",
54+
"versionType": "rpm"
55+
},
56+
{
57+
"lessThan": "14.24",
58+
"status": "affected",
59+
"version": "0",
60+
"versionType": "rpm"
61+
}
62+
]
63+
}
64+
],
65+
"problemTypes": [
66+
{
67+
"descriptions": [
68+
{
69+
"lang": "en",
70+
"cweId": "CWE-122",
71+
"type": "CWE",
72+
"description": "Heap-based Buffer Overflow"
73+
}
74+
]
75+
}
76+
],
77+
"references": [
78+
{
79+
"url": "https://www.postgresql.org/support/security/CVE-2026-14664/"
80+
}
81+
],
82+
"metrics": [
83+
{
84+
"format": "CVSS",
85+
"cvssV3_1": {
86+
"version": "3.1",
87+
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
88+
"baseScore": 8.8,
89+
"baseSeverity": "HIGH"
90+
}
91+
}
92+
],
93+
"credits": [
94+
{
95+
"lang": "en",
96+
"value": "The PostgreSQL project thanks Francesco Verardi for reporting this problem."
97+
}
98+
]
99+
}
100+
}
101+
}

0 commit comments

Comments
 (0)