[CLSA-2026:1788514216] postgresql96: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-04 09:30:28 UTC
Description:
- CVE-2026-6473: guard integer overflow in size calculations across formatting.c, the regex engine, ts_headline, intarray/query_int and ltree/lquery parsing - CVE-2026-6475: stop symlink following in pg_basebackup plain format and pg_rewind - CVE-2026-6477: reject oversized PQfn results so a server cannot overrun the client's buffer in lo_read/lo_lseek64/lo_tell64
CVEs fixed:
Updated packages:
  • postgresql96-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:84b0e98cc6c794a7b25338b6fa4e59d7108dac8b8873547c9552d539047b9a70
  • postgresql96-contrib-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:60a4f77b185fe80a0c53f1a16b18f4952d3abf94f8af211e8331825fd850f935
  • postgresql96-devel-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:3fcf7b15a1caa2ed431299d8399efc474bb327a9b98b1ac3b6b628bef95898fc
  • postgresql96-docs-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:db6bfa0f3f528406e74211917fed6f66bdff356a42b42bd24a1b9291ffb368e4
  • postgresql96-libs-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:45601287fe8aa57e9611636b6420afd6667f853a905328bf3c7e0194437196eb
  • postgresql96-plperl-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:ede5560912291fbc6524a6678101803891b4c539343c82af59a5f0f329dcb9fd
  • postgresql96-plpython-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:4137a94ed1e453ab1bcbca1e6d9c57ad21f1298f4d1197501e835f4a122fa87a
  • postgresql96-plpython3-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:4a45ad4cd006614a437f0ffa0ea5722a59c691d1adcd9685c7d2dfab1779ea39
  • postgresql96-pltcl-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:2169b31f2a9bd6d5101b085d681e8a6c11d3a2e5be871b412b9da87f666296a4
  • postgresql96-server-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:069edbda1bc6682afdf4725906bb87b5d442a7f85832281538d05134f29dbd02
  • postgresql96-test-9.6.24-1PGDG.1.el7.tuxcare.els3.x86_64.rpm
    sha:210ff2404802dc4996f464b66e8eb3c167c37cab7ee9d29efaeab719d6ce917b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.