From 91d070c7bb1480247cb834c36c89b15a7db5f82d Mon Sep 17 00:00:00 2001
From: Tom Lane
Date: Mon, 10 Nov 2025 13:36:13 -0500
Subject: Last-minute updates for release notes.
Security: CVE-2025-12817, CVE-2025-12818
---
doc/src/sgml/release-18.sgml | 61 ++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 61 insertions(+)
diff --git a/doc/src/sgml/release-18.sgml b/doc/src/sgml/release-18.sgml
index 7b04859d32f..f35082861e0 100644
--- a/doc/src/sgml/release-18.sgml
+++ b/doc/src/sgml/release-18.sgml
@@ -30,6 +30,67 @@
+
+ Check for CREATE privileges on the schema
+ in CREATE STATISTICS (Jelte Fennema-Nio)
+ §
+
+
+
+ This omission allowed table owners to create statistics in any
+ schema, potentially leading to unexpected naming conflicts.
+
+
+
+ The PostgreSQL Project thanks
+ Jelte Fennema-Nio for reporting this problem.
+ (CVE-2025-12817)
+
+
+
+
+
+
+ Avoid integer overflow in allocation-size calculations
+ within libpq (Jacob Champion)
+ §
+
+
+
+ Several places in libpq were not
+ sufficiently careful about computing the required size of a memory
+ allocation. Sufficiently large inputs could cause integer overflow,
+ resulting in an undersized buffer, which would then lead to writing
+ past the end of the buffer.
+
+
+
+ The PostgreSQL Project thanks Aleksey
+ Solovev of Positive Technologies for reporting this problem.
+ (CVE-2025-12818)
+
+
+
+
+