[CLSA-2026:1793350157] Fix of 6 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-30 08:49:31 UTC
Description:
* SECURITY UPDATE: avoid overflow in Levenshtein distance calculations - debian/patches/CVE-2026-15742.patch: avoid overflow in Levenshtein distance calculations - CVE-2026-15742 * SECURITY UPDATE: cross-check the result type of a portal running EXECUTE or FETCH - debian/patches/CVE-2026-16239.patch: cross-check the result type of a portal running EXECUTE or FETCH - CVE-2026-16239 * SECURITY UPDATE: do not expand backquotes in psql \unrestrict - debian/patches/CVE-2026-18408.patch: do not expand backquotes in psql \unrestrict - CVE-2026-18408 * SECURITY UPDATE: avoid assuming the length of pg_proc.protrftypes in pg_dump - debian/patches/CVE-2026-19385.patch: avoid assuming the length of pg_proc.protrftypes in pg_dump - CVE-2026-19385 * SECURITY UPDATE: check operator selectivity estimator ownership and input types - debian/patches/CVE-2026-2004.patch: check operator selectivity estimator ownership and input types - CVE-2026-2004 * SECURITY UPDATE: fix buffer overflow in pgcrypto pgp_pub_decrypt_bytea() - debian/patches/CVE-2026-2005.patch: fix buffer overflow in pgcrypto pgp_pub_decrypt_bytea() - CVE-2026-2005
CVEs fixed:
Updated packages:
  • libecpg-compat3-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:beff6e09c28fcd659ccfbcf84da2a86fbb481cfe
  • libecpg-dev-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:42fbc4e859f1ac6ba55699d216a90686296b493d
  • libecpg6-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:a1252c4b311f090aaf27a2550f9af008b5250bed
  • libpgtypes3-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:1ea7e4077e4c5af0d05d13281181bc1c64790746
  • libpq-dev-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:d27e3d4abe6f7928e7c9fd3f55896cff645e00b0
  • libpq5-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:665c70911c6b8e9413428a7c906cd21e98ff336f
  • postgresql-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:79f4fa741eb68bb00eb9026fd8df89d9fc056835
  • postgresql-client-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:48d4b0e54381a6ad086e050cafbe4b14f242f3e0
  • postgresql-contrib-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:9beb512cc6ea8f67f747c21c04b773ea6194a66e
  • postgresql-doc-9.6_9.6.24-0+deb10u1+tuxcare.els8_all.deb
    sha:98a72471d6d2eaf1b4262bce9c8ad8c2a2999e78
  • postgresql-plperl-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:72ddedb95b5c931ad6ada91e526b2dad1eec2a97
  • postgresql-plpython-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:5368eb793bde35feaf93198b9fe65d4847e72d6f
  • postgresql-plpython3-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:0a386dbc32dc3f7535da0a9064cdd94ae1c989fc
  • postgresql-pltcl-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:9c93c6046ce246a52dee12ed99f1ff18fdd8d963
  • postgresql-server-dev-9.6_9.6.24-0+deb10u1+tuxcare.els8_amd64.deb
    sha:c9b89f42cb5d65ee9fffb8cab560dbc5d956f70d
  • libecpg-compat3-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:d2f7435246b3d0dbb1238e0788a08117d5f0eeb5
  • libecpg-dev-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:5a94e4d538dbb996bbd5e7563ed2056b94a5e537
  • libecpg6-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:689445ebe419a45e29f3cb1458e6c945a2c0bfcb
  • libpgtypes3-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:1635d2058972cb63cdf3706a51c033a3db38eb5b
  • libpq-dev-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:f32adcf0584c9f63a880483afb6755dbd004ddf2
  • libpq5-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:a1b3a7a1febdaaf3b2612bbb03da66a17f574b09
  • postgresql-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:47410765f20bdd1941d8ea9733d4f70f2d3cb07e
  • postgresql-client-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:73f7796ecd27bc46fbfa5ae9da17707f3257b494
  • postgresql-contrib-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:011f3bc177d32f1afc23fc1ec8539b9a92d27679
  • postgresql-plperl-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:d4d6d5b6327922a13ad0da99db5706422de495f2
  • postgresql-plpython-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:e5021d3b0a6a735b8383a55532ff72409bdca13c
  • postgresql-plpython3-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:33bc195a37672f3436767c4c180c4382a6c95bc5
  • postgresql-pltcl-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:f44458fb87d3ff9b11ac213cf5d2dfc47743ea1b
  • postgresql-server-dev-9.6_9.6.24-0+deb10u1+tuxcare.els8_arm64.deb
    sha:89a948e6641d16569590f90179ca6227db1d2ff1
  • libecpg-compat3-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:132604d940d53e5cc88370ed0d2e762a6790dde2
  • libecpg-dev-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:73086c2386e83bbb6262fea9deda0bc5f61bb534
  • libecpg6-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:35d34cacd1273ed9fe7e5ed84654ebdb096cd53a
  • libpgtypes3-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:67ed9eb22638d868e9854b427254b4416fa19898
  • libpq-dev-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:8af1f53eb9c40077749f677aeff940aa446c3cab
  • libpq5-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:04d401b775fc53b93963792f2b9534b791d3e248
  • postgresql-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:6a25559abfb3bbe112bad5b1a0ee9b35d620820c
  • postgresql-client-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:a9b600cea3438d4199f62afc29a7f7c441b30784
  • postgresql-contrib-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:14c0db2f459d44471c50057ead5a002f3ee04fdc
  • postgresql-plperl-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:a664b710a40a11941e719198f5d702d53c7d09f1
  • postgresql-plpython-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:e9f3c897679cef8525b4458032fef4ee3a6cf494
  • postgresql-plpython3-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:f053cd2e64cb5fee985914acd61fe49990871b44
  • postgresql-pltcl-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:00da62365f44d4f23cba9150fb95e86709fedaa2
  • postgresql-server-dev-9.6_9.6.24-0+deb10u1+tuxcare.els8_armel.deb
    sha:b1db74005bc5ec4c35600d9f5d2f4472e0ed7088
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.