From ecbe349e9128b678311a2b8e328cbe258d7807ed Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Mon, 5 May 2025 11:29:49 -0400 Subject: Last-minute updates for release notes. Security: CVE-2025-4207 --- doc/src/sgml/release-17.sgml | 37 +++++++++++++++++++++++++++++++++++-- 1 file changed, 35 insertions(+), 2 deletions(-) diff --git a/doc/src/sgml/release-17.sgml b/doc/src/sgml/release-17.sgml index fdb5205a2bf..dddc3229f94 100644 --- a/doc/src/sgml/release-17.sgml +++ b/doc/src/sgml/release-17.sgml @@ -25,13 +25,13 @@ However, if you have any self-referential foreign key constraints on partitioned tables, it may be necessary to recreate those constraints - to ensure that they are being enforced correctly. See the first + to ensure that they are being enforced correctly. See the second changelog entry below. Also, if you have any BRIN bloom indexes, it may be advisable to - reindex them after updating. See the second changelog entry below. + reindex them after updating. See the third changelog entry below. @@ -47,6 +47,39 @@ + + Avoid one-byte buffer overread when examining invalidly-encoded + strings that are claimed to be in GB18030 encoding + (Noah Misch, Andres Freund) + § + § + + + + While unlikely, a SIGSEGV crash could occur if an incomplete + multibyte character appeared at the end of memory. This was + possible both in the server and + in libpq-using applications. + (CVE-2025-4207) + + + + +