Release date:
2026-10-07 07:32:59 UTC
Description:
* SECURITY UPDATE: out of bounds read in the pg_trgm GiST picksplit
function, where GETSIGN() was applied to a BITVECP field and read beyond
the end of the buffer, causing bad split decisions or a crash
- debian/patches/CVE-2026-14678.patch: use the cache[j].sign bit vector
directly instead of wrapping it in GETSIGN(), in gtrgm_picksplit() in
contrib/pg_trgm/trgm_gist.c
- CVE-2026-14678
Updated packages:
-
libecpg-compat3-12_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:e803b53a0fed6d11b3dacfcd5b5ea0b8684ee06f
-
libecpg-dev-12_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:57e32294363802539832db57a8010c4168ad0b1b
-
libecpg6-12_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:997d8e468f3d81c79877cb05cf6a8f1b2fd5d025
-
libpgtypes3-12_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:639e30483670b717cc9b1e4fd8881d824f6a3a2e
-
libpq-dev-12_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:52a7667e35d7debf062c24cfe547f3861cebcb42
-
libpq5-12_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:8009d99f2b9ccbd161623cefab68dc252a5c7951
-
postgresql12_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:e6ad181cea79254cd56819293a650ecd0860fec4
-
postgresql12-client_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:04bdc6716539993c480a02e99b5b8bce8ac45118
-
postgresql12-doc_12.22-2~trixie+tuxcare.els16_all.deb
sha:e72fc1fb06068dd0802a64e660c1e37c89a13f08
-
postgresql12-plperl_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:2a31580a6bf5f4288de450c346d6857b215557cd
-
postgresql12-plpython3_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:dd79a1c4fe3d4920b796daa3114fd8ff6296cbf3
-
postgresql12-pltcl_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:73d3fdf7dd18a8133da289b5fd42e5d78f491c6d
-
postgresql12-server-dev_12.22-2~trixie+tuxcare.els16_amd64.deb
sha:76d11c6c4f3d6507e383166cae3c6362a8ad543e
-
libecpg-compat3-12_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:5b0eb21e6ccee9e879728f5b3cbc2d9ac020ffa4
-
libecpg-dev-12_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:5f89a458e0921ff35ea0944717972691a5a6606c
-
libecpg6-12_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:fb46227e810d7a2eab1f3031e75a138d111ceed6
-
libpgtypes3-12_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:9a215435e3648b9c087de6b64c0f0a0ecffb74b5
-
libpq-dev-12_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:5db2501652e2c1f934e1489e7114187cbd66508c
-
libpq5-12_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:7f42562fc074d777e90d9eb77882e6f43e079fbd
-
postgresql12_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:caacf35eef89e7d88564e69c31fc6133b9bf07eb
-
postgresql12-client_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:c9b58ab9cb92980d3e3a5091270ff1e4af72d768
-
postgresql12-plperl_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:baead2bfa7de44c981253ef4aed643c824fb7607
-
postgresql12-plpython3_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:15e67adce41c1c6b9ab2391e8e8da9f5e65cfb08
-
postgresql12-pltcl_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:6961c83c1431973d5c91df292ef424359c89562d
-
postgresql12-server-dev_12.22-2~trixie+tuxcare.els16_arm64.deb
sha:ccff8c071953b4e1f07710c46772d15a4d24fe58
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
