The package postgresql-15 was updated on apt.postgresql.org.
apt-listchanges: Changelogs
---------------------------
postgresql-15 (15.11-1.pgdg+1) sid-pgdg; urgency=medium
* Rebuild for sid-pgdg.
* Changes applied by generate-pgdg-source:
+ Moving lib packages to component 15.
+ Enabling cassert.
-- PostgreSQL on Debian and Ubuntu <pgsql-pkg-debian@lists.postgresql.org> Tue, 11 Feb 2025 11:27:41 +0100
postgresql-15 (15.11-1) unstable; urgency=medium
* New upstream version 15.11.
+ Harden PQescapeString and allied functions against invalidly-encoded
input strings (Andres Freund, Noah Misch)
Data-quoting functions supplied by libpq now fully check the encoding
validity of their input. If invalid characters are detected, they
report an error if possible. For the ones that lack an error return
convention, the output string is adjusted to ensure that the server will
report invalid encoding and no intervening processing will be fooled by
bytes that might happen to match single quote, backslash, etc.
The purpose of this change is to guard against SQL-injection attacks
that are possible if one of these functions is used to quote crafted
input. There is no hazard when the resulting string is sent directly to
a PostgreSQL server (which would check its encoding anyway), but there
is a risk when it is passed through psql or other client-side code.
Historically such code has not carefully vetted encoding, and in many
cases it's not clear what it should do if it did detect such a problem.
This fix is effective only if the data-quoting function, the server, and
any intermediate processing agree on the character encoding that's being
used. Applications that insert untrusted input into SQL commands should
take special care to ensure that that's true.
Applications and drivers that quote untrusted input without using these
libpq functions may be at risk of similar problems. They should first
confirm the data is valid in the encoding expected by the server.
The PostgreSQL Project thanks Stephen Fewer for reporting this problem.
(CVE-2025-1094)
* B-D on postgresql-common-dev.
* Test-depend only our server packages, i.e. allow libpq5 to be newer.
-- Christoph Berg <myon@debian.org> Tue, 11 Feb 2025 11:27:41 +0100
New version 15.11-1.pgdg+1:
postgresql-15 | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-15 | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-15 | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-15 | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-15 | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64, source
postgresql-15 | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-15 | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-15 | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x, source
postgresql-15-dbgsym | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-15-dbgsym | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-15-dbgsym | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-15-dbgsym | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-15-dbgsym | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-15-dbgsym | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-15-dbgsym | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-15-dbgsym | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15 | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15 | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15 | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15 | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15 | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-client-15 | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15 | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15 | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15-dbgsym | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15-dbgsym | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15-dbgsym | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15-dbgsym | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15-dbgsym | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-client-15-dbgsym | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15-dbgsym | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-client-15-dbgsym | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-15 | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-15 | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-15 | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-15 | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-15 | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-doc-15 | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-15 | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-doc-15 | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15 | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15 | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15 | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15 | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15 | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-plperl-15 | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15 | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15 | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15-dbgsym | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15-dbgsym | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15-dbgsym | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15-dbgsym | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15-dbgsym | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-plperl-15-dbgsym | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15-dbgsym | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plperl-15-dbgsym | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15 | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15 | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15 | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15 | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15 | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-plpython3-15 | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15 | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15 | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15-dbgsym | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15-dbgsym | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15-dbgsym | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15-dbgsym | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15-dbgsym | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-plpython3-15-dbgsym | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15-dbgsym | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-plpython3-15-dbgsym | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15 | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15 | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15 | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15 | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15 | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-pltcl-15 | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15 | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15 | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15-dbgsym | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15-dbgsym | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15-dbgsym | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15-dbgsym | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15-dbgsym | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-pltcl-15-dbgsym | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15-dbgsym | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-pltcl-15-dbgsym | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-15 | 15.11-1.pgdg+1 | sid-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-15 | 15.11-1.pgdg130+1 | trixie-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-15 | 15.11-1.pgdg120+1 | bookworm-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-15 | 15.11-1.pgdg110+1 | bullseye-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-15 | 15.11-1.pgdg24.10+1 | oracular-pgdg | amd64
postgresql-server-dev-15 | 15.11-1.pgdg24.04+1 | noble-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-15 | 15.11-1.pgdg22.04+1 | jammy-pgdg | amd64, arm64, ppc64el, s390x
postgresql-server-dev-15 | 15.11-1.pgdg20.04+1 | focal-pgdg | amd64, arm64, ppc64el, s390x
The public mirrors serving apt.postgresql.org are synced hourly,
the updated packages will be available there shortly.
