Update to PostgreSQL 18.4

Fixes:

* CVE-2026-6472: PostgreSQL CREATE TYPE does not check multirange schema
  CREATE privilege
* CVE-2026-6473: PostgreSQL server undersizes allocations, via integer
  wraparound
* CVE-2026-6474: PostgreSQL timeofday() can disclose portions of server
  memory
* CVE-2026-6475: PostgreSQL pg_basebackup and pg_rewind can overwrite
  unrelated files of origin superuser choice
* CVE-2026-6476: PostgreSQL pg_createsubscriber allows SQL injection via
  subscription name
* CVE-2026-6477: PostgreSQL libpq lo_* functions let server superuser
  overwrite client stack
* CVE-2026-6478: PostgreSQL discloses MD5-hashed passwords via covert
  timing channel
* CVE-2026-6479: PostgreSQL SSL/GSS init causes denial of service, via
  uncontrolled recursion
* CVE-2026-6575: PostgreSQL pg_restore_attribute_stats accepts values
  that cause query planning to read past end of stats array
* CVE-2026-6637: PostgreSQL refint allows stack buffer overflow and SQL
  injection
* CVE-2026-6638: PostgreSQL REFRESH PUBLICATION allows SQL injection via
  table name

From Mark Patruck
This commit is contained in:
jeremy
2026-05-25 00:36:13 +00:00
parent f9ac7ffab4
commit af78d2007e
3 changed files with 4 additions and 3 deletions
+1 -1
View File
@@ -5,7 +5,7 @@ COMMENT-contrib=PostgreSQL RDBMS contributions
COMMENT-plpython=Python procedural language for PostgreSQL
COMMENT-pg_upgrade=Support for upgrading PostgreSQL data from previous version
VERSION= 18.3
VERSION= 18.4
PREV_MAJOR= 17
DISTNAME= postgresql-${VERSION}
PKGNAME-main= postgresql-client-${VERSION}
+2 -2
View File
@@ -1,2 +1,2 @@
SHA256 (postgresql-18.3.tar.gz) = ngVP/W4BPaLCyaG/1uBiyYh100DfCAUWVRyWubCSalk=
SIZE (postgresql-18.3.tar.gz) = 29416481
SHA256 (postgresql-18.4.tar.gz) = RQqo8toGxG+CIZFugq4GsE+xBA+PAGQ9v4t9ZjyqwLk=
SIZE (postgresql-18.4.tar.gz) = 29477735
+1
View File
@@ -707,6 +707,7 @@ share/doc/postgresql/html/regress.html
share/doc/postgresql/html/release-18-1.html
share/doc/postgresql/html/release-18-2.html
share/doc/postgresql/html/release-18-3.html
share/doc/postgresql/html/release-18-4.html
share/doc/postgresql/html/release-18.html
share/doc/postgresql/html/release-prior.html
share/doc/postgresql/html/release.html