[CLSA-2026:1788513787] postgresql11: Fix of 8 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-04 09:23:22 UTC
Description:
- CVE-2026-6637: refint: quote and escape key values to stop SQL injection, and fix a segfault on NULL cascade keys - CVE-2026-6474: avoid passing unintended format codes to snprintf(), and guard unsafe conditions in pg_strftime() usage - CVE-2026-6475: prevent path traversal in pg_basebackup and pg_rewind - CVE-2026-6477: mark PQfn() unsafe and fix a buffer overrun in the frontend large-object interface - CVE-2026-6478: add timingsafe_bcmp() and use it in the authentication paths for constant-time comparison - CVE-2026-6473: make palloc_array() and friends, and the regex engine, safe against integer overflow in size calculations
CVEs fixed:
Updated packages:
  • postgresql11-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:f9773dc104a74638172b5bcca76bb00d5f96a0d024e575c40282f5590ae701d7
  • postgresql11-contrib-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:c392ec1b19f7d1348a49292a800132ac074621615ee620e7a5e6605a7ebc34c1
  • postgresql11-devel-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:1bd110667774b14498a6b92c55572972d21087fbbf8ab0b106e8b92f1a71e7fd
  • postgresql11-docs-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:e919ae51ad156e5e6d22c3a14a18bfef9b5bb386f321bd7d504793d77562fe6e
  • postgresql11-libs-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:f1dd259d9ffdb233d1ea57d737e3ee8ad2401ebb95d30aa05bc1d6907df10c5b
  • postgresql11-plperl-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:e6ab4e73510d8465409bc4a9857322e45fd26f69a208e4c66ca669d1968ec645
  • postgresql11-plpython-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:0c68969efaf247b99e2168a3b3604eca662aa58b09ac7ed094023b754a5de267
  • postgresql11-plpython3-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:308f7a163887761edd05ecfa400d26d82e2b6bebb52115aaf75ce3180e19dd26
  • postgresql11-pltcl-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:b0ae3b9290c9e4fab826522d99b9d9d639a7e30be0b5707029573b1c25b51e34
  • postgresql11-server-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:6a492b5acf554688c4e6052d527fe36bf99a584a41c66c8802f43286c5196279
  • postgresql11-test-11.22-1PGDG.1.el7.tuxcare.els2.x86_64.rpm
    sha:576f3173ac94277c1cf1d8ec3aaec8ea0783abeb7a8062aa0c0202f81513e190
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.