Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <pgsql-committers-owner+archive@lists.postgresql.org>)
	id 1wBC1U-000pMK-32
	for pgsql-committers@arkaria.postgresql.org;
	Fri, 10 Apr 2026 13:35:49 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.96)
	(envelope-from <pgsql-committers-owner+archive@lists.postgresql.org>)
	id 1wBC1T-00C6io-1B
	for pgsql-committers@arkaria.postgresql.org;
	Fri, 10 Apr 2026 13:35:48 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <andrew@dunslane.net>)
	id 1wBByS-00C50g-1c
	for pgsql-committers@lists.postgresql.org;
	Fri, 10 Apr 2026 13:32:41 +0000
Received: from mahout.postgresql.org ([2001:4800:3e1:1::227])
	by makus.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.2)
	(envelope-from <andrew@dunslane.net>)
	id 1wBByQ-00000000KzT-1178
	for pgsql-committers@lists.postgresql.org;
	Fri, 10 Apr 2026 13:32:40 +0000
Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198])
	by mahout.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <andrew@dunslane.net>)
	id 1wBByP-000xHo-1w
	for pgsql-committers@lists.postgresql.org;
	Fri, 10 Apr 2026 13:32:38 +0000
Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org)
	by gemulon.postgresql.org with esmtp (Exim 4.96)
	(envelope-from <andrew@dunslane.net>)
	id 1wBByO-000Iyp-24
	for pgsql-committers@lists.postgresql.org;
	Fri, 10 Apr 2026 13:32:37 +0000
Content-Type: multipart/mixed; boundary="===============3096461087531814414=="
MIME-Version: 1.0
From: Andrew Dunstan <andrew@dunslane.net>
To: pgsql-committers@lists.postgresql.org
Subject: pgsql: Fix heap-buffer-overflow in pglz_decompress() on corrupt
 input.
X-Auto-Response-Suppress: All
Auto-Submitted: auto-generated
Message-Id: <E1wBByO-000Iyp-24@gemulon.postgresql.org>
Date: Fri, 10 Apr 2026 13:32:37 +0000
List-Id: <pgsql-committers.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-committers@lists.postgresql.org>
List-Owner: <mailto:pgsql-committers-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-committers>
Archived-At: 
 <https://www.postgresql.org/message-id/E1wBByO-000Iyp-24%40gemulon.postgresql.org>
Precedence: bulk

--===============3096461087531814414==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
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--===============3096461087531814414==--