* SECURITY UPDATE: SQL injection through the libpq escaping functions and the client utilities, where an invalidly encoded multibyte character could swallow a following quote or backslash that was then copied unescaped, enabling psql meta-command execution - debian/patches/CVE-2025-1094.patch: add pg_encoding_verifymbstr(), pg_encoding_verifymbchar() and pg_encoding_set_invalid(), validate each character and replace invalid ones with an always invalid byte sequence in PQescapeLiteral(), PQescapeIdentifier(), PQescapeString() and PQescapeStringConn(), add fmtIdEnc() and make appendStringLiteral() and appendPsqlMetaConnect() encoding aware, in src/interfaces/libpq/fe-exec.c, src/fe_utils/string_utils.c, src/backend/utils/mb/wchar.c, src/include/mb/pg_wchar.h, pg_dump, psql and src/bin/scripts, build wchar.o into libpgfeutils, and add the test_escape test module - CVE-2025-1094 * SECURITY UPDATE: integer overflows in libpq size calculations that let an application input provider or a network peer cause an undersized allocation followed by an out of bounds heap write - debian/patches/CVE-2025-12818.patch: use size_t and add overflow checks in PQescapeInternal(), PQescapeByteaInternal(), PQsetvalue(), pqResultAlloc(), pqRowProcessor(), PQprint(), do_header(), do_field(), reportErrorPosition(), build_startup_packet(), parse_comma_separated_list() and ldapServiceLookup(), in src/interfaces/libpq/fe-connect.c, fe-exec.c, fe-print.c and fe-protocol3.c - CVE-2025-12818