Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vqXyz-00CsGQ-1n for pgsql-committers@arkaria.postgresql.org; Thu, 12 Feb 2026 14:47:54 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vqXyx-0090t8-1R for pgsql-committers@arkaria.postgresql.org; Thu, 12 Feb 2026 14:47:52 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vpDmz-008kCh-1d for pgsql-committers@lists.postgresql.org; Sun, 08 Feb 2026 23:02:01 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1vpDmw-00000001BmE-3AIg for pgsql-committers@lists.postgresql.org; Sun, 08 Feb 2026 23:02:00 +0000 Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vpDmv-0052gW-2B for pgsql-committers@lists.postgresql.org; Sun, 08 Feb 2026 23:01:58 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vpDmu-001wIA-2u for pgsql-committers@lists.postgresql.org; Sun, 08 Feb 2026 23:01:57 +0000 Content-Type: multipart/mixed; boundary="===============2523885158301211794==" MIME-Version: 1.0 From: Michael Paquier To: pgsql-committers@lists.postgresql.org Subject: pgsql: pgcrypto: Fix buffer overflow in pgp_pub_decrypt_bytea() X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Sun, 08 Feb 2026 23:01:57 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============2523885158301211794== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 cGdjcnlwdG86IEZpeCBidWZmZXIgb3ZlcmZsb3cgaW4gcGdwX3B1Yl9kZWNyeXB0X2J5dGVhKCkK CnBncF9wdWJfZGVjcnlwdF9ieXRlYSgpIHdhcyBtaXNzaW5nIGEgc2FmZWd1YXJkIGZvciB0aGUg c2Vzc2lvbiBrZXkKbGVuZ3RoIHJlYWQgZnJvbSB0aGUgbWVzc2FnZSBkYXRhLCB0aGF0IGNhbiBi ZSBnaXZlbiBpbiBpbnB1dCBvZgpwZ3BfcHViX2RlY3J5cHRfYnl0ZWEoKS4gIFRoaXMgY2FuIHJl c3VsdCBpbiB0aGUgcG9zc2liaWxpdHkgb2YgYSBidWZmZXIKb3ZlcmZsb3cgZm9yIHRoZSBzZXNz aW9uIGtleSBkYXRhLCB3aGVuIHRoZSBsZW5ndGggc3BlY2lmaWVkIGlzIGxvbmdlcgp0aGFuIFBH UF9NQVhfS0VZLCB3aGljaCBpcyB0aGUgbWF4aW11bSBzaXplIG9mIHRoZSBidWZmZXIgd2hlcmUg dGhlCnNlc3Npb24gZGF0YSBpcyBjb3BpZWQgdG8uCgpBIHNjcmlwdCBhYmxlIHRvIHJlYnVpbGQg dGhlIG1lc3NhZ2UgYW5kIGtleSBkYXRhIHRoYXQgY2FuIHRyaWdnZXIgdGhlCm92ZXJmbG93IGlz IGluY2x1ZGVkIGluIHRoaXMgY29tbWl0LCBiYXNlZCBvbiBzb21lIGNvbnRlbnRzIHByb3ZpZGVk IGJ5CnRoZSByZXBvcnRlciwgaGVhdmlseSBlZGl0dGVkIGJ5IG1lLiAgQSBTUUwgdGVzdCBpcyBh ZGRlZCwgYmFzZWQgb24gdGhlCmRhdGEgZ2VuZXJhdGVkIGJ5IHRoZSBzY3JpcHQuCgpSZXBvcnRl ZC1ieTogVGVhbSBYaW50IENvZGUgYXMgcGFydCBvZiB6ZXJvZGF5LmNsb3VkCkF1dGhvcjogTWlj aGFlbCBQYXF1aWVyIDxtaWNoYWVsQHBhcXVpZXIueHl6PgpSZXZpZXdlZC1ieTogTm9haCBNaXNj aCA8bm9haEBsZWFkYm9hdC5jb20+ClNlY3VyaXR5OiBDVkUtMjAyNi0yMDA1CkJhY2twYXRjaC10 aHJvdWdoOiAxNAoKQnJhbmNoCi0tLS0tLQptYXN0ZXIKCkRldGFpbHMKLS0tLS0tLQpodHRwczov L2dpdC5wb3N0Z3Jlc3FsLm9yZy9wZy9jb21taXRkaWZmLzM3OTY5NWQzY2M3MGQwNDBiNTQ3ZDkx MmNlNDg0MjA5MGQ5MTdlY2UKCk1vZGlmaWVkIEZpbGVzCi0tLS0tLS0tLS0tLS0tCmNvbnRyaWIv cGdjcnlwdG8vTWFrZWZpbGUgICAgICAgICAgICAgICAgICAgICAgICB8ICAgMyArLQpjb250cmli L3BnY3J5cHRvL2V4cGVjdGVkL3BncC1wdWJrZXktc2Vzc2lvbi5vdXQgfCAgNDcgKysrCmNvbnRy aWIvcGdjcnlwdG8vbWVzb24uYnVpbGQgICAgICAgICAgICAgICAgICAgICB8ICAgMSArCmNvbnRy aWIvcGdjcnlwdG8vcGdwLXB1YmRlYy5jICAgICAgICAgICAgICAgICAgICB8ICAxMSArLQpjb250 cmliL3BnY3J5cHRvL3B4LmMgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgIDEgKwpjb250 cmliL3BnY3J5cHRvL3B4LmggICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgIDIgKy0KY29u dHJpYi9wZ2NyeXB0by9zY3JpcHRzL3BncF9zZXNzaW9uX2RhdGEucHkgICAgIHwgNDkxICsrKysr KysrKysrKysrKysrKysrKysrCmNvbnRyaWIvcGdjcnlwdG8vc3FsL3BncC1wdWJrZXktc2Vzc2lv bi5zcWwgICAgICB8ICA0NiArKysKOCBmaWxlcyBjaGFuZ2VkLCA1OTkgaW5zZXJ0aW9ucygrKSwg MyBkZWxldGlvbnMoLSkKCg== --===============2523885158301211794==--