Release date:
2026-10-07 00:57:08 UTC
Description:
* SECURITY UPDATE: out of bounds read in the pg_trgm GiST picksplit
function, where GETSIGN() was applied to a BITVECP field and read beyond
the end of the buffer, causing bad split decisions or a crash
- debian/patches/CVE-2026-14678.patch: use the cache[j].sign bit vector
directly instead of wrapping it in GETSIGN(), in gtrgm_picksplit() in
contrib/pg_trgm/trgm_gist.c
- CVE-2026-14678
Updated packages:
-
libecpg-compat3-12_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:9ea20891b3c4d04f2faf8b500ba21c755ccbf280
-
libecpg-dev-12_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:b20243f3bcc3cfa01de0eedda80df5080156ad3e
-
libecpg6-12_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:c58e72a50f478d9998919660e79143cfcc0fc2de
-
libpgtypes3-12_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:147602249a581aa83686e52b3f7084f39ddb21d1
-
libpq-dev-12_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:d206ad3d7639cce5a69b1ca950ceda5f66fdcbd7
-
libpq5-12_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:431c94493c92b2c2a9b8d33bf369f8edc9d9e4e7
-
postgresql12_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:d2d2148368273881a9a2df9f48985e7d95b3c19b
-
postgresql12-client_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:2511a327a9fea4bab8c5100b1c21e2dd3a02b19b
-
postgresql12-doc_12.22-2~bookworm+tuxcare.els16_all.deb
sha:71e23618845b3195dee13a2abe3d15eecd06efcc
-
postgresql12-plperl_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:771cf2c6de73f01e7ff25c834e83848e2f69bb8a
-
postgresql12-plpython3_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:d36c5bdcbac88d64fb0d8b9c73a6e3b926a72b8f
-
postgresql12-pltcl_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:ff6ee0f5059db4af08e3079c138d7cfb0364b619
-
postgresql12-server-dev_12.22-2~bookworm+tuxcare.els16_amd64.deb
sha:aca1ad2f03588ee4b5b468e491c5e38b30fce297
-
libecpg-compat3-12_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:e156abbbbe47954262d7588e1d7f39eec8fcde31
-
libecpg-dev-12_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:fa6fc9fae2c6bd541e603900fdf05020ba118420
-
libecpg6-12_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:a8f1482f4f75656950ec41a786ee55a521a5355c
-
libpgtypes3-12_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:bd2eae76df98c0bda08b2bb770eabc08139e0881
-
libpq-dev-12_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:41ea9a124d90c6bb2649494d7a9cbc3400aed4d0
-
libpq5-12_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:0bd468c23df65744a05be3c7c23f03c5ad913874
-
postgresql12_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:c388df4fe66604cd9f184d20e1688d7f6a7704b0
-
postgresql12-client_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:b63fa77afbf9ad620d76fb5779e834dff3badfba
-
postgresql12-plperl_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:1c3dc24cb61b9d2757df601f5ce85395ae45f5fc
-
postgresql12-plpython3_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:8d4fd8707fedf16a545d3645031b9987a89a8769
-
postgresql12-pltcl_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:e6786d7418245e6c7f8b83ffa688a5565591cd2c
-
postgresql12-server-dev_12.22-2~bookworm+tuxcare.els16_arm64.deb
sha:4130925b670b05ed7ed2a5fb63bae54dbb91c4aa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
