From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Thu, 25 Dec 2025 19:08:36 +0100   
   Source: postgresql-15   
   Architecture: source   
   Version: 15.15-0+deb12u1   
   Distribution: bookworm   
   Urgency: medium   
   Maintainer: Debian PostgreSQL Maintainers    
   Changed-By: Christoph Berg    
   Changes:   
    postgresql-15 (15.15-0+deb12u1) bookworm; urgency=medium   
    .   
      * New upstream version 15.15.   
    .   
        + Check for CREATE privileges on the schema in CREATE STATISTICS   
          (Jelte Fennema-Nio)   
    .   
          This omission allowed table owners to create statistics in any schema,   
          potentially leading to unexpected naming conflicts.   
    .   
          The PostgreSQL Project thanks Jelte Fennema-Nio for reporting this   
          problem. (CVE-2025-12817)   
    .   
        + Avoid integer overflow in allocation-size calculations within libpq   
          (Jacob Champion)   
    .   
          Several places in libpq were not sufficiently careful about computing   
          the required size of a memory allocation.  Sufficiently large inputs   
          could cause integer overflow, resulting in an undersized buffer, which   
          would then lead to writing past the end of the buffer.   
    .   
          The PostgreSQL Project thanks Aleksey Solovev of Positive Technologies   
          for reporting this problem. (CVE-2025-12818)   
   Checksums-Sha1:   
    3fcc0fe06ed3b393f168ea2fb8b7c490fe9a80ae 3926 postgresql-15_15.   
   5-0+deb12u1.dsc   
    8833e4dd4ff75186451415bf61cd5f1d60078d50 23246368 postgresql-15   
   15.15.orig.tar.bz2   
    c207d10af2517b31b6b3ff822afc3816bfb5641f 29532 postgresql-15_15   
   15-0+deb12u1.debian.tar.xz   
   Checksums-Sha256:   
    c9ead6801944f2715b561b88df836535cc90c93f1a00f6616f8df6a298543120 3926   
   postgresql-15_15.15-0+deb12u1.dsc   
    5753aaeb8b09cbf61016f78aa69bf5cbdf01b43263f010cbf168c82896213aaa 23246368   
   postgresql-15_15.15.orig.tar.bz2   
    83751a83673b099d333f287860b83f75e12114d92010d8d3d43affdf9268ac80 29532   
   postgresql-15_15.15-0+deb12u1.debian.tar.xz   
   Files:   
    59ced5828fe2453f48fbf953b4268232 3926 database optional postgre   
   ql-15_15.15-0+deb12u1.dsc   
    75fc7269cee615dc35c3558264b4733b 23246368 database optional pos   
   gresql-15_15.15.orig.tar.bz2   
    20e80e8df79f3c338f884800524efcf7 29532 database optional postgr   
   sql-15_15.15-0+deb12u1.debian.tar.xz   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQIzBAEBCgAdFiEEXEj+YVf0kXlZcIfGTFprqxLSp64FAmlNfg4ACgkQTFprqxLS   
   p66k4Q/+Mrybn6SDZNO65M8y+OrNgGnS1MP6t8+T6gttSd4oE+ESdLdWhXhiMMTU   
   RoQqJUqRRDW/WvYz+cp0cSowfkApmCz6ceAqgGB04BFZ2gR9qfuLN49XyRiCOLF/   
   4cFJFGmbjTk/XuGeQ4gPLAeLahYC9IBQgGm5rDr2PAeGXFkEAa6XWoDRutOueaO1   
   giSq8PfG1KKZrmR9XulVlo2UC5trI/O6i6z2yjOYt9UyfCY4BpaBKRWyDTOlT4GP   
   yL711DA77Gv/VR6sfiVOql8DBD4BIXA4YwxLtNwXncrrx5ucZaqwXSnEMPtr64EZ   
   H1VmSVV/UlXgqc+tdWJ0HuxubhWm/PYr8EQSOno/MJYKz/XR1nQboRdKzYnTK94r   
   I2EFaXbaJLrNuCDghuIk5NWGBaA4JAOL+MC7OJok1ASTae2uJMtL47h55HyfIQYj   
   gVE44J9Jdzb/8OZVAVRc48eIDoQdMEDqxKmvKaO4hJHHbgo/WI3heNaHtuIai/zm   
   wE4NPbb4rJT3FqdwPmVV8eouGbZp/Zf5AMXBpaYbi9NdTdEvF2aNU5xp4bxq2tPi   
   5CHKymruuKrxIJ0EcHiGblUFgCbB6CrkQjr2eXmoH46dSny731YjTBRr8NCJ36/Q   
   sLZ+8YIrX04hcp8OqlXVt6UIqGjj+282XNcvsPAHXx84Ea+8YU0=   
   =pzL4   
   -----END PGP SIGNATURE-----   
      
      
   --==============I03239225154056080=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaVZwZgAKCRCb9qggYcy5   
   ISJFAQDSlVpSqNo8t+L5umx7jPpgYEvcIoXDE+Dbp0hca4bDhAEA9H1wMgFgUee7   
   UzjD1mCmFmyPHjUfWvFDT0I2Wo1r6w8=x5k/   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)