Re: Encoding protection for pgcrypto - Mailing list pgsql-hackers

From Noah Misch
Subject Re: Encoding protection for pgcrypto
Date
Msg-id 20260212164712.67@rfd.leadboat.com
Whole thread Raw
In response to Re: Encoding protection for pgcrypto  (shihao zhong <zhong950419@gmail.com>)
List pgsql-hackers
On Mon, Feb 12, 2024 at 11:21:41PM -0500, shihao zhong wrote:
> The goal for this patch is to fix the
> encoding for the TEXT return value because by default the PostgreSQL
> TEXT type should have the same encoding as the database encoding.

Pushed as commits d536aee and c5dc754.  A report about a security exploit of
invalid values of type "text", CVE-2026-2006, brought me to this after the
long delay.  After the main fix for CVE-2026-2006, invalid text in a database
is no longer a vulnerability.  Even so, we took the opportunity to adopt
$SUBJECT, too.

Thanks,
nm



pgsql-hackers by date:

Previous
From: Álvaro Herrera
Date:
Subject: Re: pgsql: Introduce pg_shmem_allocations_numa view
Next
From: Robert Haas
Date:
Subject: Re: Add 64-bit XIDs into PostgreSQL 15