-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 24 Feb 2026 12:48:56 +0100 Source: postgresql-17 Architecture: source Version: 17.9-0+deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian PostgreSQL Maintainers Changed-By: Christoph Berg Changes: postgresql-17 (17.9-0+deb13u1) trixie; urgency=medium . * New upstream version 17.9. . + Fix failure after replaying a multixid truncation record from WAL that was generated by an older minor version (Heikki Linnakangas) . Erroneous logic for coping with the way that previous versions handled multixid wraparound led to replay failure, with messages like "could not access status of transaction". A typical scenario in which this could occur is a standby server of the latest minor version consuming WAL from a primary server of an older version. . + Avoid incorrect complaint of invalid encoding when substring() is applied to toasted data (Noah Misch) . The fix for CVE-2026-2006 was too aggressive and could raise an error about an incomplete character in cases that are actually valid. Checksums-Sha1: 4e2842d151ccb8739b290281c29b7fb5118a91fc 4515 postgresql-17_17.9-0+deb13u1.dsc 496d351b331d9a4404537bd0bd634d4129bcff0c 21648916 postgresql-17_17.9.orig.tar.bz2 7df475fffc04734ec262d935cb79ce0224ef37d9 29824 postgresql-17_17.9-0+deb13u1.debian.tar.xz Checksums-Sha256: b08c96940dea922a50442676ed9dc9fa4915b5dec16ec64153a7b27bc2ee0f0d 4515 postgresql-17_17.9-0+deb13u1.dsc 3b9a62538a8da151e807a3ddb1198e8605f2032544d78f403ae883d27ecf1ee4 21648916 postgresql-17_17.9.orig.tar.bz2 52108525a3b13d378d3aab9cfa263ed4f27c409ed91a8fa0de513950a9d9d14c 29824 postgresql-17_17.9-0+deb13u1.debian.tar.xz Files: ce3f5b0dbb10b79cf71caf2e1e9d9405 4515 database optional postgresql-17_17.9-0+deb13u1.dsc e443d2b4a7edb8dbcbbe7a05a712d881 21648916 database optional postgresql-17_17.9.orig.tar.bz2 99eb8aa0529c8a130a0803da0161dc9a 29824 database optional postgresql-17_17.9-0+deb13u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXEj+YVf0kXlZcIfGTFprqxLSp64FAmmdqaAACgkQTFprqxLS p67ORw//Qbx4N9ViiHa0qhCiUYrxRP3hEyoZjjDIgwxDk+yO7hnUyy2R3n+1cQ3k gRUkFg6/MRY8eMeAyHBtDglNtbVxz2M2tLVfMPoxaZGwFpBLXu+9cPNIBOH0VcAO dMUTMWbx0N98Jm+xbhqcAQ2lOsvda0s4K1cHjmiOSV16TWLEPpH0I/9KZAnxUKsp 1BPUgxCStnc8Tgkc/s9v92L3zmPf9wgdzcOI0Zt1HjEV9Qc5wv4/cSChULmDaKz7 dYPP8X25UeGrckIxm1ItYkB5gwEaF1ZA3OWAfyczK9rk6eXpL0yWchImiIjPro28 wpZtXF9BYL8vLnV3iRoNSASu4yIi+rYowmgjhgpQzMF1XMWEB6nxlaX9hVSLvfkR wvSo3+mQSBC/X46N1APHzKCx+7L9zla+NKoXhWc4ORAUb5C/CF2a/wVDZWfUf+GP LFv1dqOusVOb/eXsg3mXNbfUX0nfvrjtN2UYbnd+5Ayo9Rfkj13BdYVb4XP4jLiK zM6Mw931D2w5ErFlUNFmcSLVJlt+Y9if7AAo1fB8DBCg13hsGLeJ58regb6wuuOA smoMef535h8HN9uiEVrOIvk+yBWBNZeqK2dr0NHpJPH/N0LHdCvTMCX2azddVurR IvtQ7/Ot6HnUSfSFQ/bwXAw7sIwQ6GLIwVFmB9ceYJIijeqesGQ= =h7u+ -----END PGP SIGNATURE-----