[CLSA-2026:1793317311] postgresql96: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-29 23:42:03 UTC
Description:
- CVE-2025-12818: libpq: guard allocation size computations against int/size_t wraparound (undersized allocation, out-of-bounds write) - CVE-2024-10977: libpq: do not show an error message received during SSL negotiation, since the server is not authenticated yet - CVE-2025-4207: with GB18030, do not read past the end of unterminated input when determining a character's length (libpq escape functions, convert())
CVEs fixed:
Updated packages:
  • postgresql96-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:56e367ce838495fe32632b7103bfc2a1c16b083d489d2eee98e0d36e4142cd42
  • postgresql96-contrib-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:9b95d8eefd0a9bd212cc2bf081f759ca67c0d5a22b6769a6d4f7c1da15265e96
  • postgresql96-devel-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:4496ef4c31cbdfebf4e3884b5a5f71a238dda0b7e03bfd6e934bd1fdf0764759
  • postgresql96-docs-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:ed22543fa0fefe76b85812101be197748a5e32b0dee167939d118a291d958cd3
  • postgresql96-libs-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:4085e26dd7589c1bf5bce2d264f52b4ef789921a0f9fd1aacdcf86ad8c2cd0b4
  • postgresql96-plperl-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:7a6c60b7fcdfb6cf3491615fc2574aecf512fe0216b25739be4895ee938c0081
  • postgresql96-plpython-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:4c29dbefda628e9544ab3b955dfc4db40885f9c7ff5162ad97e7d559e5966341
  • postgresql96-plpython3-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:fc59bfe8b6075b2d97d386deba1be231304511a0c4d4a34c9ad311d718000a84
  • postgresql96-pltcl-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:081469b9c47bb0f0c1eb552040b7cf5b706ff838854502ba13409fdcdfd16d0e
  • postgresql96-server-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:ebd5b9ad707263ee08e05bb887b9ed063e24d4770d548872dd625332e9138584
  • postgresql96-test-9.6.24-1PGDG.1.el7.tuxcare.els10.x86_64.rpm
    sha:85a8c10f878fe2b4faeef2b0316b1ee02fee66154224e9dc4a70a74c219b5980
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.