[CLSA-2026:1793106288] Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-27 13:05:03 UTC
Description:
* SECURITY UPDATE: block environment variable changes from trusted PL/Perl - debian/patches/CVE-2024-10979.patch: block environment variable changes from trusted PL/Perl - CVE-2024-10979 * SECURITY UPDATE: restrict access to non-system views and foreign tables during pg_dump - debian/patches/CVE-2024-7348.patch: restrict access to non-system views and foreign tables during pg_dump - CVE-2024-7348 * SECURITY UPDATE: reject invalidly-encoded strings in libpq quoting functions - debian/patches/CVE-2025-1094.patch: reject invalidly-encoded strings in libpq quoting functions - CVE-2025-1094 * SECURITY UPDATE: prevent int/size_t overflows in libpq - debian/patches/CVE-2025-12818.patch: prevent int/size_t overflows in libpq - CVE-2025-12818 * SECURITY UPDATE: restrict psql meta-commands in plain-text dumps (\restrict/\unrestrict) - debian/patches/CVE-2025-8714.patch: restrict psql meta-commands in plain-text dumps (\restrict/\unrestrict) - CVE-2025-8714 * SECURITY UPDATE: harden tsvector/tsquery code against overflows - debian/patches/CVE-2026-14662.patch: harden tsvector/tsquery code against overflows - CVE-2026-14662
CVEs fixed:
Updated packages:
  • libecpg-compat3-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:327764189a239141960c1ea86ade33eba950a15a
  • libecpg-dev-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:5eeb15e2e9fe0ec16543c8e355aa432785bbd5d4
  • libecpg6-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:db94cfb33bc08c9eb1b7cc3f5d1d99ed7fb78500
  • libpgtypes3-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:b0abbc81bc16e065b95f1729562fb777b18708f3
  • libpq-dev-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:3ba8547a9c53fd8f501088acd1b634fe70416219
  • libpq5-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:831d09ed0fd9e0196d8ff1168593ce42767c8bc7
  • postgresql-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:dc6be7ec3cc321a3969a1b83cb7a25bab09df0e0
  • postgresql-client-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:e44b441ef345ccac98d6fa9bbe9dc88b98df9d66
  • postgresql-contrib-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:c255b7623398a8e24eaf68e80c4e862f096d802f
  • postgresql-doc-9.6_9.6.24-0+deb10u1+tuxcare.els6_all.deb
    sha:67f215946ba25c0d6737e21d8fb0b58d4605db6e
  • postgresql-plperl-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:a25b434568d9bf1e2d6a7c56dea307de3238030d
  • postgresql-plpython-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:dda7d4823847277c08506d3ae02107a4f07fe216
  • postgresql-plpython3-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:3cda6f1a830feb8a8200b8fc65124572dd1b1f2d
  • postgresql-pltcl-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:4e68143cf182a18a51fe4643e5db9ad0cdb3ef67
  • postgresql-server-dev-9.6_9.6.24-0+deb10u1+tuxcare.els6_amd64.deb
    sha:d6179be79dceed55ce845ba2d9adb017f7ac15c4
  • libecpg-compat3-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:dffa35ac1cfcbcd735807df57ab69c645afcae57
  • libecpg-dev-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:b32757b6c1bd572288f158a9dab58df085489a7f
  • libecpg6-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:cc7e452d485ba19f0c5cf8c467329fd7b31684b3
  • libpgtypes3-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:c602d49411889861ecdc33f2b3f4519808c3b90d
  • libpq-dev-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:f53a49decc1d6e955cf8bf8453fed06bd3124671
  • libpq5-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:f1f3178efe9990271509b88c39777f11e48da3e1
  • postgresql-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:34ae362620e1ce5b0e0d277979805eec41d074c3
  • postgresql-client-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:52c68ce72170d2f98980eb73a15a516be61bdee9
  • postgresql-contrib-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:05cec0b10711c517591880899cf4cb0fe8fe3cdf
  • postgresql-plperl-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:24dfa091e1603e069cb52aa95a0b43545d6f0fa7
  • postgresql-plpython-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:a9da0398d1238d1e834364270221bc15ced100c3
  • postgresql-plpython3-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:f1446691f82db722d79afdfbc1477cf783dee351
  • postgresql-pltcl-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:4685ad2d96b30684ce6b97c377506655c709ad92
  • postgresql-server-dev-9.6_9.6.24-0+deb10u1+tuxcare.els6_arm64.deb
    sha:fc8e466602a25ee2b00d4d9a71192072086a61a0
  • libecpg-compat3-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:a98b6a44f38b3b6fb8456a243c0b04e319a45372
  • libecpg-dev-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:0a21364c8ebc27569b23a1502520a18cd304a027
  • libecpg6-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:729400ab94e07439e01300ba8f5c9dd1aaade8be
  • libpgtypes3-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:dbe8014981d56d02fbaab73dcc5e3b903034a59b
  • libpq-dev-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:70b73bc1ae1a918f83e2f2559e2cc2218cb6394e
  • libpq5-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:5fc3fce6ebf00a46a431c13fb03c63b25a182fc6
  • postgresql-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:30ce402d324c1d856fd1f3059fdf6f6ce641901e
  • postgresql-client-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:a04e9c1fe13818d35876569a1a36748eddcee1d5
  • postgresql-contrib-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:cf442ce3f04a8311856a57c11b6e4c1a02d61ef0
  • postgresql-plperl-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:6ac19b65a450f21862df9b111105e2cad54329fd
  • postgresql-plpython-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:7bb55151ad4326e87ae584987a8a51a21d5f51be
  • postgresql-plpython3-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:7b4759a2ed677833da4bb6b9e1930f679ac0fadd
  • postgresql-pltcl-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:540da4a4ae5d8ce358f4c605c9e791b4b09fd138
  • postgresql-server-dev-9.6_9.6.24-0+deb10u1+tuxcare.els6_armel.deb
    sha:212132a1de247200ff353b7beab42bd15054dcd6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.