[CLSA-2026:1779493861] postgresql: Fix of 6 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-03 08:49:36 UTC
Description:
- CVE-2026-6473: use palloc_array() in hstore_plperl/hstore_plpython to avoid integer overflow on 32-bit systems - CVE-2026-6474: guard pg_strftime() callers against unsafe conditions and ensure null-terminated output to prevent format-string leak via crafted timezone names - CVE-2026-6475: prevent path traversal in pg_rewind file operations by validating paths received from a rogue server endpoint - CVE-2026-6477: add buf_size bounds-checking to pqFunctionCall3() and gate PQfn() via a new PQnfn() helper to prevent client-side buffer overrun in the large object interface (lo_export/lo_read/lo_lseek64/lo_tell64) - CVE-2026-6479: track processed SSL/GSS negotiation attempts in ProcessStartupPacket() to prevent unbounded recursion causing backend stack overflow - CVE-2026-6637: switch refint check_foreign_key() to StringInfo and quote key values to prevent SQL injection and stack buffer overruns
Updated packages:
  • postgresql-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:4540dced548b9eff8f18185181f061d78ce54755aa93c8c99ad22b177020adeb
  • postgresql-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:bdc8ffbab8cfdcb2600e42f6f334782c9d6c2c09d6b3bca2bd0a56594b59aeb7
  • postgresql-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:4cb9ad4ed2cd3881a6eac3756513c8a3b29248635cc743e5b011d752aea012e6
  • postgresql-contrib-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:aa67b2b502a098cb6972f94b190964642ee8e7dfec3f82cbe7cf470c49da7199
  • postgresql-contrib-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:748fd17e199daff6bf0be6633520eece45f05793c791d5a2bcc14087d0537306
  • postgresql-contrib-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:2947c4fbd251ca8ea1342b4b65dfa5b238f9e2947ea8bd6c92824b395ecc491a
  • postgresql-docs-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:963633031e6f8a4394e081c0ed4561660dee68be7f689f52eac5430b587f51ec
  • postgresql-docs-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:6803bdf92bc7eca9435821338184d0144416ae217fc1bc3e50a348a4a151bb4f
  • postgresql-docs-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:8e24be0986e281972e4e44ecfdca9d7d2b83a2c4015c473c2d43739b41c10876
  • postgresql-plperl-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:a6f257cd170344ced51bc8015774125736fbe05a83dce7b3a020a104a7f0e58d
  • postgresql-plperl-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:e40ac1e81f4b02864a4a2af91e9ffc6d6af3f974d29f4965c8293a5ea37bdfa6
  • postgresql-plperl-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:02964f7951e46288375ce5dd5147b83320972ed6a3313f53cc2490eace0795e5
  • postgresql-plpython3-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:8bfc8b31f7652609f41991f1eeac3c8dc94e86aa80efb6ac10905b3d106e735a
  • postgresql-plpython3-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:d9b1ed558fecd8e8f11cf1d82d9213a3e47f10ae29d7b19910666af840120352
  • postgresql-plpython3-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:cfa7871d8d9added0092fe1b19d9851eef7f69c25fd73d21d98dd2684a3d9b11
  • postgresql-pltcl-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:0c821e893ebedecdb426958d3ea550685518be69fc85bbed4da773c80510e95a
  • postgresql-pltcl-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:7c700d17044d4c5eba8ad51ac8f606a2a4d10ccc3f166a395311e38ed73ab7fd
  • postgresql-pltcl-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:2479d5a0dc36883ea4febe35c94525d734aa30c9b46d233d4b10934db20da690
  • postgresql-private-devel-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:63e7c1a8c51e916f892f7a414ddc6024ad97ee1868e19849c40ad9064eb87f0b
  • postgresql-private-devel-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:211c267c2deafce597dd00bdb3f7a55ff986a425627bc85994817cf560a92976
  • postgresql-private-devel-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:1defb615faf088dd648055ab9d682298580bb6a0fa761821d456d4ef6335ef3a
  • postgresql-private-libs-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:2bedc1699eb09009fdc790b23797689bb291c106f90d1a89dd2374d51dabb180
  • postgresql-private-libs-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:8ab69adfdf7a27e3139b64d921ca952c4a2d78b79f7309b7edf5afd07d62c7c2
  • postgresql-private-libs-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:fc23eb29082a2843f5aa1cd44027f999cd8515a11d9c5737f2c28962168ba8cc
  • postgresql-server-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:45e6acf1d04a9f4f97b0a3ddd2536c8658e8815efd23d9a97041936c390a4ce3
  • postgresql-server-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:439c4c0722b9dd8f824b0e2c372bf25d44e64660181da8b6cc4c4760e9464f4a
  • postgresql-server-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:ae525fd6e734bd7b5fffc0ee243216012fa40f11ef84491c201bd50eb1fa2468
  • postgresql-server-devel-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:44c0796209df26f40969e93f0e469b8251eaa86be0ea9411f16050278a9da46b
  • postgresql-server-devel-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:0b95ea7b103ae2772b2f0f7c419b08172dcd14e4955f547606861df7c5a25349
  • postgresql-server-devel-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:7e70223b1c1293a831cad3ebbf28065e87ecf22984eb457b1f01ea1148ffbc79
  • postgresql-static-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:bedcbb3f531f540b1b947023290ac151aa23713d3cce9ea2632476743ad081c8
  • postgresql-static-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:df12040d39a09953fcf184a0fae98b061d2bc10484733c46694a79cbeb8cb2c7
  • postgresql-static-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:83d4c88268b4cde1a531bed542d2a6d86bc002b6b4d9853b0cf6cb68a199fc02
  • postgresql-test-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:48bee919653326f87df5c6278e3cf8fe62fa5b62d1844976a059750c2cb86f3b
  • postgresql-test-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:01604fe99c6c8df570eb97ae066b1e02b711b363288e9e73e32dfbc87edff5d1
  • postgresql-test-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:eeae60ddbad143265f03c72cdb93c27e76c1772a64b4c021d4613d74c8736dee
  • postgresql-test-rpm-macros-13.23-1.el9_6.tuxcare.els6.noarch.rpm
    sha:35606a83dd6eb89f0cdb0fb68f16232c8ce29d62b4fd14fab4ff11cfff9d8a28
  • postgresql-upgrade-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:1d645226ad6ba7dbeace45413a7b1e0a75218a6deb39a40ced8e77b94d9a1305
  • postgresql-upgrade-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:2f9d8abc2dabbc8f63647cb2e294fbbb24b27e50b68e57757e86789074c0ee9a
  • postgresql-upgrade-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:fc860d84062729384da7f6a89d8d77865df77fcab19f980ca74abe73a0e37547
  • postgresql-upgrade-devel-13.23-1.el9_6.tuxcare.els6.aarch64.rpm
    sha:066e91cd7bc380fab4747976f100f2f22fa4d3da92f084a4de15fe0d251ecfef
  • postgresql-upgrade-devel-13.23-1.el9_6.tuxcare.els6.i686.rpm
    sha:2ee96616482e26b32e1fb9852ce423640418b8a3759a40a03ad95a645ab8d7d5
  • postgresql-upgrade-devel-13.23-1.el9_6.tuxcare.els6.x86_64.rpm
    sha:b28c31ed524c1f02c9daf879568d069d114f0791bf494f5261f388144d133e69
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.