[CLSA-2026:1794452251] Fix CVE(s): CVE-2026-6464
Type:
security
Severity:
Important
Release date:
2026-11-12 02:57:44 UTC
Description:
* SECURITY UPDATE: psql did not skip in-line COPY ... FROM STDIN data after a COPY that failed before the data phase, so it executed that data as SQL commands (SQL injection via script data) - debian/patches/CVE-2026-6464.patch: count COPY ... FROM STDIN commands in the psql lexer and have SendQuery() discard the data of any that did not reach the COPY-in state; treat an unsolicited COPY_IN result as fatal (upstream commits 5c51ae4556 and f1204c1a79). Such data must now be terminated by "\." even when the COPY fails - CVE-2026-6464
CVEs fixed:
Updated packages:
  • libecpg-compat3-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:62111a2872226e90c6a5b02d23bd9c5222adee30
  • libecpg-dev-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:a95122f9a711daa7f1ec32ba95635e77ec321b77
  • libecpg6-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:59d107d0cf82c74ed80058643f171ce85b6e7435
  • libpgtypes3-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:6607af56943e1d69216b2a55d14e2c57977e5e79
  • libpq-dev-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:20c04bdd08e1aabe33cb6b8719e656034d13d47d
  • libpq5-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:563742d65cebc7eb357ac0ba960fe2a9db66210a
  • postgresql-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:d0a15acce626ac6acbcf0534b24a3740760029b8
  • postgresql-client-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:14b057060fa36e4455f598944121af1df75476aa
  • postgresql-contrib-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:e111aff67c30c4b31a640f26934b54af4b5ea945
  • postgresql-doc-9.6_9.6.24-0+deb10u1+tuxcare.els10_all.deb
    sha:736390fc1d48f80267a66611a96bc1f9a43cd1e1
  • postgresql-plperl-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:b273e403a06fbf78a51b51e2a746a48d3328bef5
  • postgresql-plpython-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:9b3309ff5f05f2b6571efd910bf591d14938895c
  • postgresql-plpython3-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:f2a741759e57a2d24929f5e5ee1040436ca30f04
  • postgresql-pltcl-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:67eccb50a914c0e96a6822a93193d19a32b59549
  • postgresql-server-dev-9.6_9.6.24-0+deb10u1+tuxcare.els10_amd64.deb
    sha:492503177e87bd45ba421b8507ed28e35ee1f309
  • libecpg-compat3-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:f02a2a477c539994911b0ed544241c4e9ed9d694
  • libecpg-dev-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:c21a1595429c8316d8df16754d259720f49c80bf
  • libecpg6-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:bc4403a65d1df523419b88d7afde56d3ae98b007
  • libpgtypes3-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:b2cf17c41595a204e69dacbc6842b1f03c13589c
  • libpq-dev-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:31e3dbf6c7cd21948e06554cf9aa5da332aa10c6
  • libpq5-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:732917386d4266990b8270586cc4c18b0389b724
  • postgresql-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:ad8927c943bfdefa27a60cc2ff9f3100780c6cc8
  • postgresql-client-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:a98fd3f4a442d6ef5a0ae4e3d4c5625ae1f92590
  • postgresql-contrib-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:3671ffd3bf1e672b542a2e98932c0b673886943f
  • postgresql-plperl-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:923c564dcc9a95017e32393aadb9b7104c8d86b1
  • postgresql-plpython-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:942745bafa3b2f898cebb367b0e8840082e25eee
  • postgresql-plpython3-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:91ec59514991f1269bd87c79c861191fcd39dce9
  • postgresql-pltcl-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:8065c3fab8ec34912c899c505b8df7a33cae6f9d
  • postgresql-server-dev-9.6_9.6.24-0+deb10u1+tuxcare.els10_arm64.deb
    sha:d56c5c4c9c7b4996acc8283845beb122499b081f
  • libecpg-compat3-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:a48bb3f1ff8eda22f4800deca5b41d5b9ff835e7
  • libecpg-dev-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:7e978fa5f6adb99ca6cb4e51d7c286fc38e988b7
  • libecpg6-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:09df2daaf92f0f76b2dabed19368d16f2bb47f96
  • libpgtypes3-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:e8e09e9388a940fd8ddab2e82f2d5bcd3de9afe0
  • libpq-dev-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:a553e4140b77e6356912e46296609c91ec343f89
  • libpq5-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:bd70a7c19190dfbbc8e78443002efa4f52f198cf
  • postgresql-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:1d9b38e75ba96628f1d5472910e6b9170e3ba5b0
  • postgresql-client-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:83bf5a05c2fa83197ede1155c993dd48e0d6f116
  • postgresql-contrib-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:64e143d913c5bb39ba02d62e85bbe08d0f700fbc
  • postgresql-plperl-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:43c0793822f7f385c003e19a4e2c2ba52f39c67a
  • postgresql-plpython-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:714cdcd21008cd274b66b71b2319176c8e11c78c
  • postgresql-plpython3-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:e8a1a9473940c316b1dc738a8d8b8445781d101d
  • postgresql-pltcl-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:7bdae282d7bfe1b28a2ec7d4f078021dfefafbc8
  • postgresql-server-dev-9.6_9.6.24-0+deb10u1+tuxcare.els10_armel.deb
    sha:ff35166f4a8f795ac8909a1e27253ad7e1b6db4a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.