Release date:
2026-09-22 00:37:10 UTC
Description:
- CVE-2026-6471: logical decoding: require the output plugin to be a
recognised, installed plugin rather than an arbitrary path, so a
non-superuser holding REPLICATION can no longer make the server dlopen any
file it can read (CVSS 7.2)
- CVE-2026-16239: portal/cursor lifecycle: re-creating a cursor with different
result types no longer leaves the old tuple descriptor in place, closing the
type confusion that followed (CVSS 8.8)
- CVE-2026-18408: pg_dump: quote the \restrict meta-command argument so a
malicious superuser on the origin server cannot inject psql input that runs
at restore time (CVSS 8.8); completes the CVE-2025-8714 fix
Updated packages:
-
postgresql-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:b10b705aa039f188dec298b089f9261a8452d15b38368316e7b447c931c8e965
-
postgresql-contrib-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:46222f73ff0bc4b94c31b7c5e6401d6bfaa445b62abcc1e2d9d4df43f3aac0f9
-
postgresql-docs-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:958a931578cb0cec9a8b8e323fc53851efbeb3c084320e85eb26e79dee20a2c0
-
postgresql-plperl-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:fac77c560fa41228c2601bc1a6a3c54565ab56f025024836f4b7ea08ef69d323
-
postgresql-plpython3-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:77e12658bc3fb309dc5c1bf3f0931cd0facb79be36c069c2da69ab4ec817f70a
-
postgresql-pltcl-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:23063364787daa4b8c4a9f2d830f130515362fbffad716c9922fd2fc07ab610c
-
postgresql-private-devel-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:bd95f43254151b2e0387e69958a18401e57aa5b43c1e6a691be12496e1b43fbd
-
postgresql-private-libs-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:4f8bf0094923b990966e6ab748a95a6aadf648de76feb3031687f9cae537cfed
-
postgresql-server-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:0ad7a532fdb5defb35b4b62ad8a650e926a348934eb47591752b92f3080478a4
-
postgresql-server-devel-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:7f1b600d472d9931d1912807921204fa897cd3c5ec0f3b557e3b511199785124
-
postgresql-static-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:7c13d8dc18dc0be59fd975593191ad7f2f9ab2968dc4d5577a003f8216be4a45
-
postgresql-test-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:fbada9d5724edc8679c4b5f3dcfaf505a405bf34e94f13090f45b3086273a444
-
postgresql-test-rpm-macros-13.11-1.el9_2.tuxcare.els22.noarch.rpm
sha:b2c2766a3396078887bac647ae4a02437f73f6b9c092ce71ccf908ed5525765c
-
postgresql-upgrade-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:3da6b791bf77da1783c042b508bd8e5b6d52b0d5bd23db52960e3ff1d7fc7a6f
-
postgresql-upgrade-devel-13.11-1.el9_2.tuxcare.els22.x86_64.rpm
sha:ac475c07d44d73bc75e15002f9c9f0748634d9845a3d7ec2ea9a7f0d9562885b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
