From 5dff5ce8636660772f23493918e69af91c820321 Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Mon, 5 May 2025 11:29:49 -0400 Subject: [PATCH] Last-minute updates for release notes. Security: CVE-2025-4207 --- doc/src/sgml/release-13.sgml | 35 ++++++++++++++++++++++++++++++++++- 1 file changed, 34 insertions(+), 1 deletion(-) diff --git a/doc/src/sgml/release-13.sgml b/doc/src/sgml/release-13.sgml index 165d7067ac3..2bc1476d956 100644 --- a/doc/src/sgml/release-13.sgml +++ b/doc/src/sgml/release-13.sgml @@ -31,7 +31,7 @@ However, if you have any self-referential foreign key constraints on partitioned tables, it may be necessary to recreate those constraints - to ensure that they are being enforced correctly. See the first + to ensure that they are being enforced correctly. See the second changelog entry below. @@ -48,6 +48,39 @@ + + Avoid one-byte buffer overread when examining invalidly-encoded + strings that are claimed to be in GB18030 encoding + (Noah Misch, Andres Freund) + § + § + + + + While unlikely, a SIGSEGV crash could occur if an incomplete + multibyte character appeared at the end of memory. This was + possible both in the server and + in libpq-using applications. + (CVE-2025-4207) + + + + +