{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* SECURITY UPDATE: fix potential buffer overrun in regexp match/split functions\n - debian/patches/CVE-2026-14664.patch: fix potential buffer overrun in regexp match/split functions\n - CVE-2026-14664\n * SECURITY UPDATE: harden PL/Perl code against tied arrays and hashes\n - debian/patches/CVE-2026-14670.patch: harden PL/Perl code against tied arrays and hashes\n - CVE-2026-14670\n * SECURITY UPDATE: remove the refint plan cache\n - debian/patches/CVE-2026-14671.patch: remove the refint plan cache\n - CVE-2026-14671\n * SECURITY UPDATE: avoid allocation size overflows in PL/Tcl and PL/Perl\n - debian/patches/CVE-2026-14677.patch: avoid allocation size overflows in PL/Tcl and PL/Perl\n - CVE-2026-14677\n * SECURITY UPDATE: protect fixed-size arrays with FUNC_MAX_ARGS elements\n - debian/patches/CVE-2026-14679.patch: protect fixed-size arrays with FUNC_MAX_ARGS elements\n - CVE-2026-14679\n * SECURITY UPDATE: reject SQL calls to functions taking or returning type internal\n - debian/patches/CVE-2026-14680.patch: reject SQL calls to functions taking or returning type internal\n - CVE-2026-14680", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/debian10els/advisories/2026/clsa-2026_1793264470.json" } ], "tracking": { "current_release_date": "2026-10-29T09:03:00Z", "generator": { "date": "2026-10-29T09:03:00Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1793264470", "initial_release_date": "2026-10-29T09:03:00Z", "revision_history": [ { "date": "2026-10-29T09:03:00Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Fix of 6 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 10", "product": { "name": "Debian 10", "product_id": "Debian-10", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plpython3-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpq5-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpq-dev-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-client-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libecpg-dev-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpgtypes3-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libecpg-compat3-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plperl-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plpython-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-server-dev-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libecpg6-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-contrib-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } }, { "category": "product_version", "name": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product": { "name": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_id": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-pltcl-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=arm64" } } } ], "category": "architecture", "name": "arm64" }, { "branches": [ { "category": "product_version", "name": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plpython3-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpq5-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpq-dev-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-client-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libecpg-dev-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpgtypes3-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libecpg-compat3-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plperl-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plpython-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-server-dev-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libecpg6-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-contrib-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } }, { "category": "product_version", "name": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product": { "name": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_id": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-pltcl-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=armel" } } } ], "category": "architecture", "name": "armel" }, { "branches": [ { "category": "product_version", "name": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plpython3-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpq5-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpq-dev-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-client-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libecpg-dev-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpgtypes3-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libecpg-compat3-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plperl-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plpython-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-server-dev-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libecpg6-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-contrib-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product": { "name": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_id": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-pltcl-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "product": { "name": "postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "product_id": "postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-doc-9.6@9.6.24-0%2Bdeb10u1%2Btuxcare.els7?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all as a component of Debian 10", "product_id": "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all" }, "product_reference": "postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel as a component of Debian 10", "product_id": "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" }, "product_reference": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64 as a component of Debian 10", "product_id": "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64" }, "product_reference": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64 as a component of Debian 10", "product_id": "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64" }, "product_reference": "postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "relates_to_product_reference": "Debian-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-14671", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "description", "text": "Type confusion in PostgreSQL module \"refint\" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject \"refint: Remove plan cache.\", without a CVE number. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-14671" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-14671/", "url": "https://www.postgresql.org/support/security/CVE-2026-14671/" } ], "release_date": "2026-08-13T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-29T09:01:12.158422Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470", "product_ids": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-14670", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-14670" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-14670/", "url": "https://www.postgresql.org/support/security/CVE-2026-14670/" } ], "release_date": "2026-08-13T13:00:05Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-29T09:01:12.158422Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470", "product_ids": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-14680", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "description", "text": "Type confusion with PostgreSQL \"internal\" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument type. Type \"internal\" represents a class of mutually-incompatible data structures not intended for access from SQL. The system intended to prevent such function calls, but this prevention had gaps. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-14680" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-14680/", "url": "https://www.postgresql.org/support/security/CVE-2026-14680/" } ], "release_date": "2026-08-13T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-29T09:01:12.158422Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470", "product_ids": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-14664", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when round-tripped through pg_wchar. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-14664" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-14664/", "url": "https://www.postgresql.org/support/security/CVE-2026-14664/" } ], "release_date": "2026-08-13T13:00:03Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-29T09:01:12.158422Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470", "product_ids": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-14679", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-14679" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-14679/", "url": "https://www.postgresql.org/support/security/CVE-2026-14679/" } ], "release_date": "2026-08-13T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-29T09:01:12.158422Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470", "product_ids": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-14677", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-14677" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-14677/", "url": "https://www.postgresql.org/support/security/CVE-2026-14677/" } ], "release_date": "2026-08-13T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-29T09:01:12.158422Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470", "product_ids": [ "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-compat3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libecpg6-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpgtypes3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:libpq5-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-client-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-contrib-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-doc-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.all", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plperl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-plpython3-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-pltcl-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.amd64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.arm64", "Debian-10:postgresql-server-dev-9.6-0:9.6.24-0+deb10u1+tuxcare.els7.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793264470" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }