Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vqXzN-00CsP2-2M for pgsql-committers@arkaria.postgresql.org; Thu, 12 Feb 2026 14:48:18 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vqXzM-0093Ic-3A for pgsql-committers@arkaria.postgresql.org; Thu, 12 Feb 2026 14:48:17 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vpDmz-008kCi-1u for pgsql-committers@lists.postgresql.org; Sun, 08 Feb 2026 23:02:01 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1vpDmw-00000001BmD-3DpZ for pgsql-committers@lists.postgresql.org; Sun, 08 Feb 2026 23:02:00 +0000 Received: from gemulon.postgresql.org ([72.32.157.198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vpDmv-0052gb-22 for pgsql-committers@lists.postgresql.org; Sun, 08 Feb 2026 23:01:58 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vpDmv-001wIM-03 for pgsql-committers@lists.postgresql.org; Sun, 08 Feb 2026 23:01:57 +0000 Content-Type: multipart/mixed; boundary="===============4632890523497723867==" MIME-Version: 1.0 From: Michael Paquier To: pgsql-committers@lists.postgresql.org Subject: pgsql: pgcrypto: Fix buffer overflow in pgp_pub_decrypt_bytea() X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Sun, 08 Feb 2026 23:01:57 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============4632890523497723867== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 cGdjcnlwdG86IEZpeCBidWZmZXIgb3ZlcmZsb3cgaW4gcGdwX3B1Yl9kZWNyeXB0X2J5dGVhKCkK CnBncF9wdWJfZGVjcnlwdF9ieXRlYSgpIHdhcyBtaXNzaW5nIGEgc2FmZWd1YXJkIGZvciB0aGUg c2Vzc2lvbiBrZXkKbGVuZ3RoIHJlYWQgZnJvbSB0aGUgbWVzc2FnZSBkYXRhLCB0aGF0IGNhbiBi ZSBnaXZlbiBpbiBpbnB1dCBvZgpwZ3BfcHViX2RlY3J5cHRfYnl0ZWEoKS4gIFRoaXMgY2FuIHJl c3VsdCBpbiB0aGUgcG9zc2liaWxpdHkgb2YgYSBidWZmZXIKb3ZlcmZsb3cgZm9yIHRoZSBzZXNz aW9uIGtleSBkYXRhLCB3aGVuIHRoZSBsZW5ndGggc3BlY2lmaWVkIGlzIGxvbmdlcgp0aGFuIFBH UF9NQVhfS0VZLCB3aGljaCBpcyB0aGUgbWF4aW11bSBzaXplIG9mIHRoZSBidWZmZXIgd2hlcmUg dGhlCnNlc3Npb24gZGF0YSBpcyBjb3BpZWQgdG8uCgpBIHNjcmlwdCBhYmxlIHRvIHJlYnVpbGQg dGhlIG1lc3NhZ2UgYW5kIGtleSBkYXRhIHRoYXQgY2FuIHRyaWdnZXIgdGhlCm92ZXJmbG93IGlz IGluY2x1ZGVkIGluIHRoaXMgY29tbWl0LCBiYXNlZCBvbiBzb21lIGNvbnRlbnRzIHByb3ZpZGVk IGJ5CnRoZSByZXBvcnRlciwgaGVhdmlseSBlZGl0dGVkIGJ5IG1lLiAgQSBTUUwgdGVzdCBpcyBh ZGRlZCwgYmFzZWQgb24gdGhlCmRhdGEgZ2VuZXJhdGVkIGJ5IHRoZSBzY3JpcHQuCgpSZXBvcnRl ZC1ieTogVGVhbSBYaW50IENvZGUgYXMgcGFydCBvZiB6ZXJvZGF5LmNsb3VkCkF1dGhvcjogTWlj aGFlbCBQYXF1aWVyIDxtaWNoYWVsQHBhcXVpZXIueHl6PgpSZXZpZXdlZC1ieTogTm9haCBNaXNj aCA8bm9haEBsZWFkYm9hdC5jb20+ClNlY3VyaXR5OiBDVkUtMjAyNi0yMDA1CkJhY2twYXRjaC10 aHJvdWdoOiAxNAoKQnJhbmNoCi0tLS0tLQpSRUxfMTRfU1RBQkxFCgpEZXRhaWxzCi0tLS0tLS0K aHR0cHM6Ly9naXQucG9zdGdyZXNxbC5vcmcvcGcvY29tbWl0ZGlmZi8wMWRlMmUzMmRmN2I1YjQ2 NzIwZjY0MDY4YTI2NzRjM2JkMjhhZTNmCgpNb2RpZmllZCBGaWxlcwotLS0tLS0tLS0tLS0tLQpj b250cmliL3BnY3J5cHRvL01ha2VmaWxlICAgICAgICAgICAgICAgICAgICAgICAgfCAgIDMgKy0K Y29udHJpYi9wZ2NyeXB0by9leHBlY3RlZC9wZ3AtcHVia2V5LXNlc3Npb24ub3V0IHwgIDQ3ICsr Kwpjb250cmliL3BnY3J5cHRvL3BncC1wdWJkZWMuYyAgICAgICAgICAgICAgICAgICAgfCAgMTEg Ky0KY29udHJpYi9wZ2NyeXB0by9weC5jICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAx ICsKY29udHJpYi9wZ2NyeXB0by9weC5oICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAy ICstCmNvbnRyaWIvcGdjcnlwdG8vc2NyaXB0cy9wZ3Bfc2Vzc2lvbl9kYXRhLnB5ICAgICB8IDQ5 MSArKysrKysrKysrKysrKysrKysrKysrKwpjb250cmliL3BnY3J5cHRvL3NxbC9wZ3AtcHVia2V5 LXNlc3Npb24uc3FsICAgICAgfCAgNDYgKysrCjcgZmlsZXMgY2hhbmdlZCwgNTk4IGluc2VydGlv bnMoKyksIDMgZGVsZXRpb25zKC0pCgo= --===============4632890523497723867==--