[CLSA-2026:1785316580] libpq: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-29 09:16:32 UTC
Description:
- CVE-2022-41862: NULL-terminate the GSSAPI receive buffer on error packets so a modified server cannot make libpq over-read into its error message
CVEs fixed:
Updated packages:
  • libpq-13.5-1.el9.tuxcare.els4.i686.rpm
    sha:68d052b46e4ffef07410365cdf6164d57cfca5d46eafd514691ead387160d0a7
  • libpq-13.5-1.el9.tuxcare.els4.x86_64.rpm
    sha:b777e01ebf702839cdecaae055c2fac446fda746bbd08112f2adbeb3eb619d46
  • libpq-devel-13.5-1.el9.tuxcare.els4.i686.rpm
    sha:9a3baa6521f18312b199638a7dc52949613ddb6b270520be9538faff889a29cc
  • libpq-devel-13.5-1.el9.tuxcare.els4.x86_64.rpm
    sha:30c5d76482e3437b06749e29cb9e3556cbee39c2681b6c77fae08caf5db8d655
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.