{"format": 1, "mode": "release", "from_release": null, "to_release": {"date": "2026-02-26", "build": "15.17", "major": "15", "minor": 17, "manual": "15", "status": "stable", "doc_git": "", "version": "15.17", "eol_date": "2027-11-11", "date_text": "2026-02-26", "supported": true, "manual_url": "/docs/15/release-15-17.html", "source_url": "/docs/release/15.17/", "entry_count": 5, "placeholder": false, "content_hash": "b44c0f4a1cd668cb7f2601f4cdce4060ca791e5dfef634e1a5336c9486222c47", "manual_build": "15.19", "source_as_of": "", "changes_count": 5, "doc_loaded_at": "2026-09-26T02:56:38.228564", "migration_html": "<p>对于运行 15.X 的用户，不需要执行导出/恢复。</p>\n<p>但是，如果你从早于 15.14 的版本升级，请参见<a href=\"/docs/15/release-15-14.html\" title=\"E.6. 发布版本 15.14\">第 E.6 节</a>。</p>", "compatibility_count": 0, "label": "15.17", "status_label": "受支持版本", "eol": "2027-11-11", "age_days": 212, "support_days": 411}, "groups": [{"date": "2026-02-26", "build": "15.17", "major": "15", "minor": 17, "manual": "15", "status": "stable", "doc_git": "", "version": "15.17", "eol_date": "2027-11-11", "date_text": "2026-02-26", "supported": true, "manual_url": "/docs/15/release-15-17.html", "source_url": "/docs/release/15.17/", "entry_count": 5, "placeholder": false, "content_hash": "b44c0f4a1cd668cb7f2601f4cdce4060ca791e5dfef634e1a5336c9486222c47", "manual_build": "15.19", "source_as_of": "", "changes_count": 5, "doc_loaded_at": "2026-09-26T02:56:38.228564", "migration_html": "<p>对于运行 15.X 的用户，不需要执行导出/恢复。</p>\n<p>但是，如果你从早于 15.14 的版本升级，请参见<a href=\"/docs/15/release-15-14.html\" title=\"E.6. 发布版本 15.14\">第 E.6 节</a>。</p>", "compatibility_count": 0, "label": "15.17", "status_label": "受支持版本", "eol": "2027-11-11", "age_days": 212, "support_days": 411, "entries": [{"id": "15.17-b825392cb651a3f2", "cves": [], "html": "<p>修复在重放由较旧小版本生成的 WAL 多事务 ID 截断记录后发生失败的问题（Heikki Linnakangas）<a href=\"https://postgr.es/c/899de38d8\">§</a></p>\n<p>为兼容旧版本处理多事务 ID 回卷方式而编写的错误逻辑，会导致重放失败，并出现诸如 <span>“<span>could not access status of transaction</span>”</span> 之类的消息。一种典型场景是：最新小版本的备库正在消费来自较旧版本主库的 WAL。</p>", "text": "修复在重放由较旧小版本生成的 WAL 多事务 ID 截断记录后发生失败的问题（Heikki Linnakangas）§ 为兼容旧版本处理多事务 ID 回卷方式而编写的错误逻辑，会导致重放失败，并出现诸如 “could not access status of transaction” 之类的消息。一种典型场景是：最新小版本的备库正在消费来自较旧版本主库的 WAL。", "title": "修复在重放由较旧小版本生成的 WAL 多事务 ID 截断记录后发生失败的问题", "commits": ["899de38d8"], "section": "变更", "category": "bugfix", "source_url": "/docs/release/15.17/#ZH-AUTO-RELEASE-15-SECT2-2", "source_hash": "60c9aa8f85c77d0bcd9638002e6b36ecbc25056eecebe78defb7f4623965cb29", "section_path": ["变更"], "commit_groups": [["23064542f", "4a36c89f1", "547a8aaa7", "817f74600", "899de38d8"]], "identity_text": "Fix failure after replaying a multixid truncation record from WAL that was generated by an older minor version (Heikki Linnakangas) Erroneous logic for coping with the way that previous versions handled multixid wraparound led to replay failure, with messages like could not access status of transaction. A typical scenario in which this could occur is a standby server of the latest minor version consuming WAL from a primary server of an older version.", "commit_aliases": ["23064542f", "4a36c89f1", "547a8aaa7", "817f74600", "899de38d8"], "source_commits": ["899de38d8"], "source_entry_id": "15.17/changes/001", "db_id": "ac9d069b97f39c99f4c9540523c6dd01", "patch_ids": ["e8c592597fe0c522a838714ea94d192e"], "statement_hash": "cf611d327c6efbb05b8c3c3eec25baadc4b81f3015eda12031c5dfd70647d75d", "relations": [{"rule": 2, "type": "equivalent", "target": "269e20cac41b248d80f469e35fb3be04", "evidence": {"same_day": true, "patch_ids": ["e8c592597fe0c522a838714ea94d192e"], "statement_hash": "cf611d327c6efbb05b8c3c3eec25baadc4b81f3015eda12031c5dfd70647d75d"}}, {"rule": 2, "type": "equivalent", "target": "54acee06ad9ee6f00cba048e48dfdadc", "evidence": {"same_day": true, "patch_ids": ["e8c592597fe0c522a838714ea94d192e"], "statement_hash": "cf611d327c6efbb05b8c3c3eec25baadc4b81f3015eda12031c5dfd70647d75d"}}, {"rule": 2, "type": "equivalent", "target": "6d7df9238b789e2555fe1290d455a61a", "evidence": {"same_day": true, "patch_ids": ["e8c592597fe0c522a838714ea94d192e"], "statement_hash": "cf611d327c6efbb05b8c3c3eec25baadc4b81f3015eda12031c5dfd70647d75d"}}, {"rule": 2, "type": "equivalent", "target": "bb4c9dfad3173d99906963ab569e5990", "evidence": {"same_day": true, "patch_ids": ["e8c592597fe0c522a838714ea94d192e"], "statement_hash": "cf611d327c6efbb05b8c3c3eec25baadc4b81f3015eda12031c5dfd70647d75d"}}], "version": "15.17", "category_label": "BUG 修复", "also_in": [], "variants": [], "related_changes": [{"db_id": "6d7df9238b789e2555fe1290d455a61a", "kind": "equivalent", "version": "18.3", "label": "18.3", "title": "修复在重放由较旧小版本生成的 WAL 多事务 ID 截断记录后发生失败的问题", "evidence": {"same_day": true, "patch_ids": ["e8c592597fe0c522a838714ea94d192e"], "statement_hash": "cf611d327c6efbb05b8c3c3eec25baadc4b81f3015eda12031c5dfd70647d75d"}, "url": "/docs/compare/?release=18.3#18.3-ad611cd1e209983f", "source_url": "/docs/release/18.3/#RELEASE-18-3-CHANGES"}, {"db_id": "269e20cac41b248d80f469e35fb3be04", "kind": "equivalent", "version": "17.9", "label": "17.9", "title": "修复在重放由较旧小版本生成的 WAL 多事务 ID 截断记录后发生失败的问题", "evidence": {"same_day": true, "patch_ids": ["e8c592597fe0c522a838714ea94d192e"], "statement_hash": "cf611d327c6efbb05b8c3c3eec25baadc4b81f3015eda12031c5dfd70647d75d"}, "url": "/docs/compare/?release=17.9#17.9-80ecbcad5117683e", "source_url": "/docs/release/17.9/#RELEASE-17-9-CHANGES"}, {"db_id": "54acee06ad9ee6f00cba048e48dfdadc", "kind": "equivalent", "version": "16.13", "label": "16.13", "title": "修复在重放由较旧小版本生成的 WAL 多事务 ID 截断记录后发生失败的问题", "evidence": {"same_day": true, "patch_ids": ["e8c592597fe0c522a838714ea94d192e"], "statement_hash": "cf611d327c6efbb05b8c3c3eec25baadc4b81f3015eda12031c5dfd70647d75d"}, "url": "/docs/compare/?release=16.13#16.13-2ec40dc78a340503", "source_url": "/docs/release/16.13/#RELEASE-16-13-CHANGES"}, {"db_id": "bb4c9dfad3173d99906963ab569e5990", "kind": "equivalent", "version": "14.22", "label": "14.22", "title": "修复在重放由较旧小版本生成的 WAL 多事务 ID 截断记录后发生失败的问题", "evidence": {"same_day": true, "patch_ids": ["e8c592597fe0c522a838714ea94d192e"], "statement_hash": "cf611d327c6efbb05b8c3c3eec25baadc4b81f3015eda12031c5dfd70647d75d"}, "url": "/docs/compare/?release=14.22#14.22-b825392cb651a3f2", "source_url": "/docs/release/14.22/#ZH-AUTO-RELEASE-14-SECT2-2"}]}, {"id": "15.17-ed7a109835c41923", "cves": ["CVE-2026-2006"], "html": "<p>避免在对<span>“<span>经过 TOAST 处理</span>”</span>的数据应用 <code>substring()</code> 时误报无效编码（Noah Misch）<a href=\"https://postgr.es/c/a20eb248c\">§</a> <a href=\"https://postgr.es/c/ec86152e0\">§</a> <a href=\"https://postgr.es/c/5b305ebcc\">§</a></p>\n<p>针对 CVE-2026-2006 的修复过于激进，在原本合法的情况下也可能报出字符不完整错误。</p>", "text": "避免在对“经过 TOAST 处理”的数据应用 substring() 时误报无效编码（Noah Misch）§ § § 针对 CVE-2026-2006 的修复过于激进，在原本合法的情况下也可能报出字符不完整错误。", "title": "避免在对“经过 TOAST 处理”的数据应用 substring() 时误报无效编码", "commits": ["5b305ebcc", "a20eb248c", "ec86152e0"], "section": "变更", "category": "security", "source_url": "/docs/release/15.17/#ZH-AUTO-RELEASE-15-SECT2-2", "source_hash": "40b3324cd25dd3052ccd9e9f242595dedac9e24dddd5a4aef80e85f9f3745dc0", "section_path": ["变更"], "commit_groups": [["14b1fd617", "5d5232bc3", "6e045e1a6", "9f4fd119b", "a20eb248c", "bdfb37228"], ["2280ab354", "50d361f62", "8cef93d8a", "a0769e74d", "d04b34d68", "ec86152e0"], ["4174e41b9", "44fc85bbf", "45eb47230", "4644f8b23", "5b305ebcc", "8e73530f1"]], "identity_text": "Avoid incorrect complaint of invalid encoding when substring() is applied to toasted data (Noah Misch) The fix for CVE-2026-2006 was too aggressive and could raise an error about an incomplete character in cases that are actually valid.", "commit_aliases": ["14b1fd617", "2280ab354", "4174e41b9", "44fc85bbf", "45eb47230", "4644f8b23", "50d361f62", "5b305ebcc", "5d5232bc3", "6e045e1a6", "8cef93d8a", "8e73530f1", "9f4fd119b", "a0769e74d", "a20eb248c", "bdfb37228", "d04b34d68", "ec86152e0"], "source_commits": ["5b305ebcc", "a20eb248c", "ec86152e0"], "source_entry_id": "15.17/changes/002", "db_id": "2913b28e99dd666bc31951814a799735", "patch_ids": ["924bc2a7b62c922890c6948fec9b1504", "b621552d0483c3fe9118c60e77f297ab", "fe6380c6909ab3efff6be8983b7f18a1"], "statement_hash": "b34aae4222592f29a7ecee54df249e73bebb9346d81b2e5c859347ba8c1ea747", "relations": [{"rule": 2, "type": "equivalent", "target": "91516991913d971894a1428891e4772e", "evidence": {"same_day": true, "patch_ids": ["924bc2a7b62c922890c6948fec9b1504", "b621552d0483c3fe9118c60e77f297ab", "fe6380c6909ab3efff6be8983b7f18a1"], "statement_hash": "b34aae4222592f29a7ecee54df249e73bebb9346d81b2e5c859347ba8c1ea747"}}, {"rule": 2, "type": "equivalent", "target": "9b63cad6030353d772f1330dfd687e9f", "evidence": {"same_day": true, "patch_ids": ["924bc2a7b62c922890c6948fec9b1504", "b621552d0483c3fe9118c60e77f297ab", "fe6380c6909ab3efff6be8983b7f18a1"], "statement_hash": "b34aae4222592f29a7ecee54df249e73bebb9346d81b2e5c859347ba8c1ea747"}}, {"rule": 2, "type": "equivalent", "target": "da9fc04e8b825c72955bd70be9fd53ee", "evidence": {"same_day": true, "patch_ids": ["924bc2a7b62c922890c6948fec9b1504", "b621552d0483c3fe9118c60e77f297ab", "fe6380c6909ab3efff6be8983b7f18a1"], "statement_hash": "b34aae4222592f29a7ecee54df249e73bebb9346d81b2e5c859347ba8c1ea747"}}, {"rule": 2, "type": "equivalent", "target": "fe28a154c085da9085a635db8d9d4460", "evidence": {"same_day": true, "patch_ids": ["924bc2a7b62c922890c6948fec9b1504", "b621552d0483c3fe9118c60e77f297ab", "fe6380c6909ab3efff6be8983b7f18a1"], "statement_hash": "b34aae4222592f29a7ecee54df249e73bebb9346d81b2e5c859347ba8c1ea747"}}], "version": "15.17", "category_label": "安全相关", "also_in": [], "variants": [], "related_changes": [{"db_id": "9b63cad6030353d772f1330dfd687e9f", "kind": "equivalent", "version": "18.3", "label": "18.3", "title": "避免在对“经过 TOAST 处理”的数据应用 substring() 时误报无效编码", "evidence": {"same_day": true, "patch_ids": ["924bc2a7b62c922890c6948fec9b1504", "b621552d0483c3fe9118c60e77f297ab", "fe6380c6909ab3efff6be8983b7f18a1"], "statement_hash": "b34aae4222592f29a7ecee54df249e73bebb9346d81b2e5c859347ba8c1ea747"}, "url": "/docs/compare/?release=18.3#18.3-77113f5b52409590", "source_url": "/docs/release/18.3/#RELEASE-18-3-CHANGES"}, {"db_id": "91516991913d971894a1428891e4772e", "kind": "equivalent", "version": "17.9", "label": "17.9", "title": "避免在对“经过 TOAST 处理”的数据应用 substring() 时误报无效编码", "evidence": {"same_day": true, "patch_ids": ["924bc2a7b62c922890c6948fec9b1504", "b621552d0483c3fe9118c60e77f297ab", "fe6380c6909ab3efff6be8983b7f18a1"], "statement_hash": "b34aae4222592f29a7ecee54df249e73bebb9346d81b2e5c859347ba8c1ea747"}, "url": "/docs/compare/?release=17.9#17.9-24d7e69f6ec0ae9a", "source_url": "/docs/release/17.9/#RELEASE-17-9-CHANGES"}, {"db_id": "fe28a154c085da9085a635db8d9d4460", "kind": "equivalent", "version": "16.13", "label": "16.13", "title": "避免在对“经过 TOAST 处理”的数据应用 substring() 时误报无效编码", "evidence": {"same_day": true, "patch_ids": ["924bc2a7b62c922890c6948fec9b1504", "b621552d0483c3fe9118c60e77f297ab", "fe6380c6909ab3efff6be8983b7f18a1"], "statement_hash": "b34aae4222592f29a7ecee54df249e73bebb9346d81b2e5c859347ba8c1ea747"}, "url": "/docs/compare/?release=16.13#16.13-46657f359d7a6c06", "source_url": "/docs/release/16.13/#RELEASE-16-13-CHANGES"}, {"db_id": "da9fc04e8b825c72955bd70be9fd53ee", "kind": "equivalent", "version": "14.22", "label": "14.22", "title": "避免在对“经过 TOAST 处理”的数据应用 substring() 时误报无效编码", "evidence": {"same_day": true, "patch_ids": ["924bc2a7b62c922890c6948fec9b1504", "b621552d0483c3fe9118c60e77f297ab", "fe6380c6909ab3efff6be8983b7f18a1"], "statement_hash": "b34aae4222592f29a7ecee54df249e73bebb9346d81b2e5c859347ba8c1ea747"}, "url": "/docs/compare/?release=14.22#14.22-0e619c964c972dcb", "source_url": "/docs/release/14.22/#ZH-AUTO-RELEASE-14-SECT2-2"}]}, {"id": "15.17-004af2947054d2ea", "cves": [], "html": "<p>修复 <code>pg_stat_get_backend_wait_event()</code> 和 <code>pg_stat_get_backend_wait_event_type()</code>，使其能够为辅助进程返回值（Heikki Linnakangas）<a href=\"https://postgr.es/c/ebc53ca7b\">§</a></p>\n<p>此前，这些函数对辅助进程返回 NULL，但这与 <code>pg_stat_activity</code> 视图的行为不一致。</p>", "text": "修复 pg_stat_get_backend_wait_event() 和 pg_stat_get_backend_wait_event_type()，使其能够为辅助进程返回值（Heikki Linnakangas）§ 此前，这些函数对辅助进程返回 NULL，但这与 pg_stat_activity 视图的行为不一致。", "title": "修复 pg_stat_get_backend_wait_event() 和 pg_stat_get_backend_wait_event_type()，使其能够为辅助进程返回值", "commits": ["ebc53ca7b"], "section": "变更", "category": "bugfix", "source_url": "/docs/release/15.17/#ZH-AUTO-RELEASE-15-SECT2-2", "source_hash": "1d85e97e38a8fbadfd2c7483d597451ec20819bb836397911b1d1ad81ff0e2b4", "section_path": ["变更"], "commit_groups": [["2332911ae", "53463b4b2", "78a5e3074", "82b495cdd", "842473337", "ebc53ca7b"]], "identity_text": "Fix pg_stat_get_backend_wait_event() and pg_stat_get_backend_wait_event_type() to report values for auxiliary processes (Heikki Linnakangas) Previously these functions returned NULL for auxiliary processes, but that's inconsistent with the pg_stat_activity view.", "commit_aliases": ["2332911ae", "53463b4b2", "78a5e3074", "82b495cdd", "842473337", "ebc53ca7b"], "source_commits": ["ebc53ca7b"], "source_entry_id": "15.17/changes/003", "db_id": "d389f553498aab12a33e8658e42c2ebd", "patch_ids": ["54586dcff5ba8f38c9bad3069e4ffc52"], "statement_hash": "f5b50524b8ec05ef6a3e7bcc10dc01af6ebe577734eff3be2cb39b4262840b90", "relations": [{"rule": 2, "type": "equivalent", "target": "0fa32f0f7fbb9d8c7a7a1cfeaa993230", "evidence": {"same_day": true, "patch_ids": ["54586dcff5ba8f38c9bad3069e4ffc52"], "statement_hash": "f5b50524b8ec05ef6a3e7bcc10dc01af6ebe577734eff3be2cb39b4262840b90"}}, {"rule": 2, "type": "equivalent", "target": "51c535e1e5383ba40f60f95b951f7542", "evidence": {"same_day": true, "patch_ids": ["54586dcff5ba8f38c9bad3069e4ffc52"], "statement_hash": "f5b50524b8ec05ef6a3e7bcc10dc01af6ebe577734eff3be2cb39b4262840b90"}}, {"rule": 2, "type": "equivalent", "target": "b1227a7b977e0fdde28e2260fd4055ca", "evidence": {"same_day": true, "patch_ids": ["54586dcff5ba8f38c9bad3069e4ffc52"], "statement_hash": "f5b50524b8ec05ef6a3e7bcc10dc01af6ebe577734eff3be2cb39b4262840b90"}}, {"rule": 2, "type": "equivalent", "target": "ca6d569bfd12f83cd8b663f7b1b14c38", "evidence": {"same_day": true, "patch_ids": ["54586dcff5ba8f38c9bad3069e4ffc52"], "statement_hash": "f5b50524b8ec05ef6a3e7bcc10dc01af6ebe577734eff3be2cb39b4262840b90"}}], "version": "15.17", "category_label": "BUG 修复", "also_in": [], "variants": [], "related_changes": [{"db_id": "51c535e1e5383ba40f60f95b951f7542", "kind": "equivalent", "version": "18.3", "label": "18.3", "title": "修复 pg_stat_get_backend_wait_event() 和 pg_stat_get_backend_wait_event_type()，使其能够为辅助进程返回值", "evidence": {"same_day": true, "patch_ids": ["54586dcff5ba8f38c9bad3069e4ffc52"], "statement_hash": "f5b50524b8ec05ef6a3e7bcc10dc01af6ebe577734eff3be2cb39b4262840b90"}, "url": "/docs/compare/?release=18.3#18.3-a63ceb8e607a4b1d", "source_url": "/docs/release/18.3/#RELEASE-18-3-CHANGES"}, {"db_id": "ca6d569bfd12f83cd8b663f7b1b14c38", "kind": "equivalent", "version": "17.9", "label": "17.9", "title": "修复 pg_stat_get_backend_wait_event() 和 pg_stat_get_backend_wait_event_type()，使其能够为辅助进程返回值", "evidence": {"same_day": true, "patch_ids": ["54586dcff5ba8f38c9bad3069e4ffc52"], "statement_hash": "f5b50524b8ec05ef6a3e7bcc10dc01af6ebe577734eff3be2cb39b4262840b90"}, "url": "/docs/compare/?release=17.9#17.9-49611ef76ca99838", "source_url": "/docs/release/17.9/#RELEASE-17-9-CHANGES"}, {"db_id": "0fa32f0f7fbb9d8c7a7a1cfeaa993230", "kind": "equivalent", "version": "16.13", "label": "16.13", "title": "修复 pg_stat_get_backend_wait_event() 和 pg_stat_get_backend_wait_event_type()，使其能够为辅助进程返回值", "evidence": {"same_day": true, "patch_ids": ["54586dcff5ba8f38c9bad3069e4ffc52"], "statement_hash": "f5b50524b8ec05ef6a3e7bcc10dc01af6ebe577734eff3be2cb39b4262840b90"}, "url": "/docs/compare/?release=16.13#16.13-ba7ab6fc9d199173", "source_url": "/docs/release/16.13/#RELEASE-16-13-CHANGES"}, {"db_id": "b1227a7b977e0fdde28e2260fd4055ca", "kind": "equivalent", "version": "14.22", "label": "14.22", "title": "修复 pg_stat_get_backend_wait_event() 和 pg_stat_get_backend_wait_event_type()，使其能够为辅助进程返回值", "evidence": {"same_day": true, "patch_ids": ["54586dcff5ba8f38c9bad3069e4ffc52"], "statement_hash": "f5b50524b8ec05ef6a3e7bcc10dc01af6ebe577734eff3be2cb39b4262840b90"}, "url": "/docs/compare/?release=14.22#14.22-380d81041c2b7b37", "source_url": "/docs/release/14.22/#ZH-AUTO-RELEASE-14-SECT2-2"}]}, {"id": "15.17-f14d3ac393cef450", "cves": [], "html": "<p>修复在从 PL/pgSQL 函数返回其值时，将复合类型变量转换为域类型的问题（Tom Lane）<a href=\"https://postgr.es/c/254b15cbf\">§</a></p>\n<p>如果该变量的值为 NULL，则会出现 <span>“<span>cache lookup failed for type 0</span>”</span> 错误。</p>", "text": "修复在从 PL/pgSQL 函数返回其值时，将复合类型变量转换为域类型的问题（Tom Lane）§ 如果该变量的值为 NULL，则会出现 “cache lookup failed for type 0” 错误。", "title": "修复在从 PL/pgSQL 函数返回其值时，将复合类型变量转换为域类型的问题", "commits": ["254b15cbf"], "section": "变更", "category": "bugfix", "source_url": "/docs/release/15.17/#ZH-AUTO-RELEASE-15-SECT2-2", "source_hash": "82cd4c9fded898d5ecb705ccda2e42a2ea736485c57a1a796b64b4fee9485268", "section_path": ["变更"], "commit_groups": [["254b15cbf", "2b93d3820", "9863c9075", "c66f4cff1", "ce4b7e3a1", "dfd850980"]], "identity_text": "Fix casting a composite-type variable to a domain type when returning its value from a PL/pgSQL function (Tom Lane) If the variable's value is NULL, a cache lookup failed for type 0 error resulted.", "commit_aliases": ["254b15cbf", "2b93d3820", "9863c9075", "c66f4cff1", "ce4b7e3a1", "dfd850980"], "source_commits": ["254b15cbf"], "source_entry_id": "15.17/changes/004", "db_id": "509c9d18c03750ab5a1af4533e9e3f71", "patch_ids": ["4682bfcc99694f6b7bf7c07af3082c2e"], "statement_hash": "257a19cad310234769985e6594cf9f32698b7849a63b72427ee23e58e321e7d5", "relations": [{"rule": 2, "type": "equivalent", "target": "08e9766e078b0f98d664963d7351568a", "evidence": {"same_day": true, "patch_ids": ["4682bfcc99694f6b7bf7c07af3082c2e"], "statement_hash": "257a19cad310234769985e6594cf9f32698b7849a63b72427ee23e58e321e7d5"}}, {"rule": 2, "type": "equivalent", "target": "1f6375c5be0406ebaeab1ddd1281f48a", "evidence": {"same_day": true, "patch_ids": ["4682bfcc99694f6b7bf7c07af3082c2e"], "statement_hash": "257a19cad310234769985e6594cf9f32698b7849a63b72427ee23e58e321e7d5"}}, {"rule": 2, "type": "equivalent", "target": "b3e55b2d8440115c6283ddb4434aed5d", "evidence": {"same_day": true, "patch_ids": ["4682bfcc99694f6b7bf7c07af3082c2e"], "statement_hash": "257a19cad310234769985e6594cf9f32698b7849a63b72427ee23e58e321e7d5"}}, {"rule": 2, "type": "equivalent", "target": "d7289871637eb477a52d704b8b129dee", "evidence": {"same_day": true, "patch_ids": ["4682bfcc99694f6b7bf7c07af3082c2e"], "statement_hash": "257a19cad310234769985e6594cf9f32698b7849a63b72427ee23e58e321e7d5"}}], "version": "15.17", "category_label": "BUG 修复", "also_in": [], "variants": [], "related_changes": [{"db_id": "d7289871637eb477a52d704b8b129dee", "kind": "equivalent", "version": "18.3", "label": "18.3", "title": "修复在从 PL/pgSQL 函数返回其值时，将复合类型变量转换为域类型的问题", "evidence": {"same_day": true, "patch_ids": ["4682bfcc99694f6b7bf7c07af3082c2e"], "statement_hash": "257a19cad310234769985e6594cf9f32698b7849a63b72427ee23e58e321e7d5"}, "url": "/docs/compare/?release=18.3#18.3-68534f113dfbb27d", "source_url": "/docs/release/18.3/#RELEASE-18-3-CHANGES"}, {"db_id": "1f6375c5be0406ebaeab1ddd1281f48a", "kind": "equivalent", "version": "17.9", "label": "17.9", "title": "修复在从 PL/pgSQL 函数返回其值时，将复合类型变量转换为域类型的问题", "evidence": {"same_day": true, "patch_ids": ["4682bfcc99694f6b7bf7c07af3082c2e"], "statement_hash": "257a19cad310234769985e6594cf9f32698b7849a63b72427ee23e58e321e7d5"}, "url": "/docs/compare/?release=17.9#17.9-00f1ed550848c3b5", "source_url": "/docs/release/17.9/#RELEASE-17-9-CHANGES"}, {"db_id": "b3e55b2d8440115c6283ddb4434aed5d", "kind": "equivalent", "version": "16.13", "label": "16.13", "title": "修复在从 PL/pgSQL 函数返回其值时，将复合类型变量转换为域类型的问题", "evidence": {"same_day": true, "patch_ids": ["4682bfcc99694f6b7bf7c07af3082c2e"], "statement_hash": "257a19cad310234769985e6594cf9f32698b7849a63b72427ee23e58e321e7d5"}, "url": "/docs/compare/?release=16.13#16.13-63ccf52c03df56be", "source_url": "/docs/release/16.13/#RELEASE-16-13-CHANGES"}, {"db_id": "08e9766e078b0f98d664963d7351568a", "kind": "equivalent", "version": "14.22", "label": "14.22", "title": "修复在从 PL/pgSQL 函数返回其值时，将复合类型变量转换为域类型的问题", "evidence": {"same_day": true, "patch_ids": ["4682bfcc99694f6b7bf7c07af3082c2e"], "statement_hash": "257a19cad310234769985e6594cf9f32698b7849a63b72427ee23e58e321e7d5"}, "url": "/docs/compare/?release=14.22#14.22-3b6651931176e1ab", "source_url": "/docs/release/14.22/#ZH-AUTO-RELEASE-14-SECT2-2"}]}, {"id": "15.17-cf5bd5f4632c2dc1", "cves": [], "html": "<p>修复 <code>contrib/hstore</code> 二进制输入函数中潜在的空指针解引用问题（Michael Paquier）<a href=\"https://postgr.es/c/63c05e03b\">§</a></p>\n<p><code>hstore</code> 的接收函数在输入包含重复键时会崩溃。由 PostgreSQL 生成的 <code>hstore</code> 值永远不会包含重复键，因此这一错误一直未被发现。恶意构造或损坏的数据都可能触发该崩溃。</p>", "text": "修复 contrib/hstore 二进制输入函数中潜在的空指针解引用问题（Michael Paquier）§ hstore 的接收函数在输入包含重复键时会崩溃。由 PostgreSQL 生成的 hstore 值永远不会包含重复键，因此这一错误一直未被发现。恶意构造或损坏的数据都可能触发该崩溃。", "title": "修复 contrib/hstore 二进制输入函数中潜在的空指针解引用问题", "commits": ["63c05e03b"], "section": "变更", "category": "bugfix", "source_url": "/docs/release/15.17/#ZH-AUTO-RELEASE-15-SECT2-2", "source_hash": "ac69fccd24d604ba49bcf6a593b405fdc8d481c76b4b5255f15ab60524a6bd15", "section_path": ["变更"], "commit_groups": [["0dfbe42da", "31d0b917d", "4a0843c53", "63c05e03b", "a6f823e77", "f604cc695"]], "identity_text": "Fix potential null pointer dereference in contrib/hstore's binary input function (Michael Paquier) hstore's receive function crashed on input containing duplicate keys. hstore values generated by Postgres would never contain duplicate keys, so this mistake has gone unnoticed. The crash could be provoked by malicious or corrupted data.", "commit_aliases": ["0dfbe42da", "31d0b917d", "4a0843c53", "63c05e03b", "a6f823e77", "f604cc695"], "source_commits": ["63c05e03b"], "source_entry_id": "15.17/changes/005", "db_id": "88acf3ddcff5993038ed18e0a7157844", "patch_ids": ["05e85f727ef4e88378a37028157d43b6"], "statement_hash": "d3475d54feed07f63eac9d89bc0052bdf62514368b9675dd5fa3bbf2749ab52d", "relations": [{"rule": 2, "type": "equivalent", "target": "302f35b8c992f59981d9c8bbcbf80b74", "evidence": {"same_day": true, "patch_ids": ["05e85f727ef4e88378a37028157d43b6"], "statement_hash": "d3475d54feed07f63eac9d89bc0052bdf62514368b9675dd5fa3bbf2749ab52d"}}, {"rule": 2, "type": "equivalent", "target": "333c171c538037b7ded4bd4a610b1799", "evidence": {"same_day": true, "patch_ids": ["05e85f727ef4e88378a37028157d43b6"], "statement_hash": "d3475d54feed07f63eac9d89bc0052bdf62514368b9675dd5fa3bbf2749ab52d"}}, {"rule": 2, "type": "equivalent", "target": "3a65408ffac19ce6c90d333d8d5318cf", "evidence": {"same_day": true, "patch_ids": ["05e85f727ef4e88378a37028157d43b6"], "statement_hash": "d3475d54feed07f63eac9d89bc0052bdf62514368b9675dd5fa3bbf2749ab52d"}}, {"rule": 2, "type": "equivalent", "target": "6c2d1768700fe19270f371e13fa79343", "evidence": {"same_day": true, "patch_ids": ["05e85f727ef4e88378a37028157d43b6"], "statement_hash": "d3475d54feed07f63eac9d89bc0052bdf62514368b9675dd5fa3bbf2749ab52d"}}], "version": "15.17", "category_label": "BUG 修复", "also_in": [], "variants": [], "related_changes": [{"db_id": "302f35b8c992f59981d9c8bbcbf80b74", "kind": "equivalent", "version": "18.3", "label": "18.3", "title": "修复 contrib/hstore 二进制输入函数中潜在的空指针解引用问题", "evidence": {"same_day": true, "patch_ids": ["05e85f727ef4e88378a37028157d43b6"], "statement_hash": "d3475d54feed07f63eac9d89bc0052bdf62514368b9675dd5fa3bbf2749ab52d"}, "url": "/docs/compare/?release=18.3#18.3-72cba4c8d34e077e", "source_url": "/docs/release/18.3/#RELEASE-18-3-CHANGES"}, {"db_id": "3a65408ffac19ce6c90d333d8d5318cf", "kind": "equivalent", "version": "17.9", "label": "17.9", "title": "修复 contrib/hstore 二进制输入函数中潜在的空指针解引用问题", "evidence": {"same_day": true, "patch_ids": ["05e85f727ef4e88378a37028157d43b6"], "statement_hash": "d3475d54feed07f63eac9d89bc0052bdf62514368b9675dd5fa3bbf2749ab52d"}, "url": "/docs/compare/?release=17.9#17.9-09236fba7643dbb2", "source_url": "/docs/release/17.9/#RELEASE-17-9-CHANGES"}, {"db_id": "6c2d1768700fe19270f371e13fa79343", "kind": "equivalent", "version": "16.13", "label": "16.13", "title": "修复 contrib/hstore 二进制输入函数中潜在的空指针解引用问题", "evidence": {"same_day": true, "patch_ids": ["05e85f727ef4e88378a37028157d43b6"], "statement_hash": "d3475d54feed07f63eac9d89bc0052bdf62514368b9675dd5fa3bbf2749ab52d"}, "url": "/docs/compare/?release=16.13#16.13-cbdd4e244cbf6bcb", "source_url": "/docs/release/16.13/#RELEASE-16-13-CHANGES"}, {"db_id": "333c171c538037b7ded4bd4a610b1799", "kind": "equivalent", "version": "14.22", "label": "14.22", "title": "修复 contrib/hstore 二进制输入函数中潜在的空指针解引用问题", "evidence": {"same_day": true, "patch_ids": ["05e85f727ef4e88378a37028157d43b6"], "statement_hash": "d3475d54feed07f63eac9d89bc0052bdf62514368b9675dd5fa3bbf2749ab52d"}, "url": "/docs/compare/?release=14.22#14.22-e6357c39af22cdb6", "source_url": "/docs/release/14.22/#ZH-AUTO-RELEASE-14-SECT2-2"}]}]}], "stats": [{"key": "all", "label": "全部变更", "count": 5}, {"key": "feature", "label": "新功能", "count": 0}, {"key": "bugfix", "label": "BUG 修复", "count": 4}, {"key": "security", "label": "安全相关", "count": 1}, {"key": "performance", "label": "性能改进", "count": 0}, {"key": "compatibility", "label": "兼容性变化", "count": 0}, {"key": "improvement", "label": "其他改进", "count": 0}], "total": 5, "release_count": 1, "cross_major": false, "cve_count": 1, "cves": [{"id": "CVE-2026-2006", "url": "https://www.postgresql.org/support/security/CVE-2026-2006/", "fixed": {"14": "14.21", "15": "15.16", "16": "16.12", "17": "17.8", "18": "18.2"}, "score": 8.8, "title": "避免在对“经过 TOAST 处理”的数据应用 substring() 时误报无效编码", "vector": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cna_url": "https://cveawg.mitre.org/api/cve/CVE-2026-2006", "affected": {"14": "14", "15": "15", "16": "16", "17": "17", "18": "18"}, "component": "core server", "published": {"14": "2026-02-12", "15": "2026-02-12", "16": "2026-02-12", "17": "2026-02-12", "18": "2026-02-12"}, "introduced": {}, "cvss_version": "3.0", "description_en": "Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.", "affected_ranges": [{"from": "0", "until": "14.21"}, {"from": "15", "until": "15.16"}, {"from": "16", "until": "16.12"}, {"from": "17", "until": "17.8"}, {"from": "18", "until": "18.2"}], "first_published": "2026-02-12", "fixed_version": "15.16"}], "cve_available": true, "remaining_cves": [], "security_regressions": [], "warnings": [], "candidate_count": 5, "already_in_source_count": 0, "duplicate_count": 0, "excluded_count": 0, "exclusions": [], "source_as_of": "2026-09-26", "security_as_of": "2026-09-26"}