[CLSA-2026:1793105998] Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-27 13:00:13 UTC
Description:
* SECURITY UPDATE: block environment variable changes from trusted PL/Perl - debian/patches/CVE-2024-10979.patch: block environment variable changes from trusted PL/Perl - CVE-2024-10979 * SECURITY UPDATE: restrict access to non-system views and foreign tables during pg_dump - debian/patches/CVE-2024-7348.patch: restrict access to non-system views and foreign tables during pg_dump - CVE-2024-7348 * SECURITY UPDATE: prevent int/size_t overflows in libpq - debian/patches/CVE-2025-12818.patch: prevent int/size_t overflows in libpq - CVE-2025-12818 * SECURITY UPDATE: restrict psql meta-commands in plain-text dumps (\restrict/\unrestrict) - debian/patches/CVE-2025-8714.patch: restrict psql meta-commands in plain-text dumps (\restrict/\unrestrict) - CVE-2025-8714 * SECURITY UPDATE: harden tsvector/tsquery code against overflows - debian/patches/CVE-2026-14662.patch: harden tsvector/tsquery code against overflows - CVE-2026-14662 * SECURITY UPDATE: fix potential buffer overrun in regexp match/split functions - debian/patches/CVE-2026-14664.patch: fix potential buffer overrun in regexp match/split functions - CVE-2026-14664 * debian/patches/fix-regress-tzdata-LMT.patch: refresh the date, timestamptz and horology expected outputs for tzdata 2024b+, which reports LMT instead of PST for pre-1883 America/Los_Angeles dates
CVEs fixed:
Updated packages:
  • libecpg-compat3_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:9a0b001874e6faa6ad214e6600b7c6fec228d29d
  • libecpg-dev_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:295e864749bcd12c6af550fc8ae2868444469677
  • libecpg6_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:fc671aa5a48fb7f61a329f959a4b5a7c1529e500
  • libpgtypes3_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:9833ed353607ebfc3c41b1f8740f352e9f253fbd
  • libpq-dev_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:a83b23979f89f7f03c5f28c32d8273e097e988d3
  • libpq5_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:ff45f42b619a8d659205546769ff929f95000ff5
  • postgresql-11_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:81776b169912d42966430506532357fe6aa0b837
  • postgresql-client-11_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:8aca80084d3f903943697575f205ce19dcbdacac
  • postgresql-doc-11_11.22-0+deb10u2+tuxcare.els4_all.deb
    sha:ae30762f2184b16b377d9c7b4e8e1a1c9d34ac95
  • postgresql-plperl-11_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:83911bd2719788e506b424c04d0163000706e762
  • postgresql-plpython-11_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:e6cf165fafa6723473073667b08061f817346fae
  • postgresql-plpython3-11_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:c8d3362932f1563bbbb8cd8c13e4837b35bea5fa
  • postgresql-pltcl-11_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:8409794bcf1fcf4daf64a369193ba616f4bd14b1
  • postgresql-server-dev-11_11.22-0+deb10u2+tuxcare.els4_amd64.deb
    sha:ed8ea4d433dbfa9548dbc77d5bf645e6279a561a
  • libecpg-compat3_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:41000bebe646e78b50cc0ccfb43393b63dd968bc
  • libecpg-dev_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:d5f497438ccc553bcb2ae75655c39a39ff4369fe
  • libecpg6_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:48535d717500c3ba0096c25b3b5edd3d0de22d91
  • libpgtypes3_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:3a7c85bcca0b187e809b8cd070e569f2facfdf19
  • libpq-dev_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:3e9f2cc64e3f8300d7fe8c2b973c8f76bc1f843f
  • libpq5_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:d84ba395c9ca426ba796281fd97b910f18771bab
  • postgresql-11_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:90bb2b32dc1d82575183fd8ee7063e031aa27f02
  • postgresql-client-11_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:d80e11f201048639d1dbf0cf480abfa342df8186
  • postgresql-plperl-11_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:1c653272455dff7b9bb02963023b91a8c601d396
  • postgresql-plpython-11_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:dbd54b0e6f7747609f02a8b63c16b62658ad81d3
  • postgresql-plpython3-11_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:33721479d549280c246c4d2e9cc52be09a5b8e86
  • postgresql-pltcl-11_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:434f9a3cf7bbc34f4e1ea1213eb9b25f525fd953
  • postgresql-server-dev-11_11.22-0+deb10u2+tuxcare.els4_arm64.deb
    sha:e5ebbbd2ad56cd798f707b17892f220b886149c2
  • libecpg-compat3_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:7bce594a8149e3560fd9954819d71b000b23738d
  • libecpg-dev_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:05e5157dae095f436bab85f6ad5e50641dd1d21e
  • libecpg6_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:6ea3ef3800ff2acb83246a33115ce194ccc72a2b
  • libpgtypes3_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:566bf2b513446369348c4b9d57c269da47c93330
  • libpq-dev_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:31328f70af2a9e46f7360636c0499ee5d8bc5917
  • libpq5_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:d66359b26a467ae41809c0f76d2f28efd2585e65
  • postgresql-11_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:b86c8aca947926a1fef30252c652e463cdefb532
  • postgresql-client-11_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:7c7322bc2ed11b9ec2242b99fd5561c602773bd4
  • postgresql-plperl-11_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:92aeba202dcdb2fb0330786a68460d08eb6d2339
  • postgresql-plpython-11_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:0702ff786ce92fdd24071f0cf582077369c5a2bb
  • postgresql-plpython3-11_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:61bee68a96910dae97f997205c58fc519ba8881d
  • postgresql-pltcl-11_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:5085b64457a559e271304d7199d4427c0fb1f61f
  • postgresql-server-dev-11_11.22-0+deb10u2+tuxcare.els4_armel.deb
    sha:502db429706ac486ebde05b405408526cb74302a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.