[CLSA-2026:1783074842] Fix CVE(s): CVE-2024-10977
Type:
security
Severity:
Low
Release date:
2026-07-03 10:34:18 UTC
Description:
* SECURITY UPDATE: libpq does not discard the unauthenticated backend error message during SSL negotiation, allowing a man-in-the-middle to inject arbitrary bytes to a client's terminal - debian/patches/CVE-2024-10977.patch: discard the error response received during SSL negotiation and report an error immediately instead of processing the untrusted message, in src/interfaces/libpq/fe-connect.c and doc/src/sgml/protocol.sgml - CVE-2024-10977
CVEs fixed:
Updated packages:
  • libecpg-compat3-11_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:7a8b70db5dbdb66767c7876d552e1d4581ac2c0c
  • libecpg-dev-11_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:8959ceeedce2ffe2fb37fa6d6d8e3bc3a154250e
  • libecpg6-11_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:6216e6333b90a92353c2555a2209a02b210763d8
  • libpgtypes3-11_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:f767dfe2035fb818b5b86f3ef8acc4843e41fffb
  • libpq-dev-11_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:054626a8e3c4f09f91a74a403c2e9a5e5d88785f
  • libpq5-11_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:d410c1e0eab5ce5d012145a77b2ebb8e6a385329
  • postgresql11_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:0bf18e4f3f65b287d643004b454c462707e7857d
  • postgresql11-client_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:1a6f72898bb41999d540f4534ad1ec797f3e3f32
  • postgresql11-doc_11.22-1~trixie+tuxcare.els11_all.deb
    sha:701dc1c5899d3389fdd86819236afb8928552187
  • postgresql11-plperl_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:95c8de95e1d8c45a28f946d6d9bdc34d86501719
  • postgresql11-plpython3_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:c9a69a3354fa16db7017a93d0f8ee119535c0c7b
  • postgresql11-pltcl_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:8fe8e49ff90db662068f8cadfd88f059544f5969
  • postgresql11-server-dev_11.22-1~trixie+tuxcare.els11_amd64.deb
    sha:b1d35bee6baa840c522304550ab69a99d22ab1f2
  • libecpg-compat3-11_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:e870d89305ec5149e0308144ae124e41a9789b66
  • libecpg-dev-11_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:5232d1de23a22fa99495e8aa7dc7a6c29b3e9992
  • libecpg6-11_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:66c71d134e23c8df27aee1c855b9b7871e8a64a9
  • libpgtypes3-11_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:128a93a6770953313db77c37303a51ebae968d29
  • libpq-dev-11_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:dcd7d65054718004488daf830ddc2d9bf18911d0
  • libpq5-11_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:84c14b7a7290299be0e181c1654f3e273db36edf
  • postgresql11_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:306514e4deb3219d72196300c0ca3a9371321b4c
  • postgresql11-client_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:60169c6696427b807fc9a8a84c7593836d9c2813
  • postgresql11-doc_11.22-1~trixie+tuxcare.els11_all.deb
    sha:701dc1c5899d3389fdd86819236afb8928552187
  • postgresql11-plperl_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:ab7d206c66f34fbf8cd49241a59bb878ae12014c
  • postgresql11-plpython3_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:f59d182c22cd511cf43eb3600b51c0c66a19230c
  • postgresql11-pltcl_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:07d305f167d4cb671061639fd15553d55c2d87b6
  • postgresql11-server-dev_11.22-1~trixie+tuxcare.els11_arm64.deb
    sha:1ea4e201a4a71fbf2b6dd0ac5e020366d86ef196
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.