Release date:
2026-09-17 17:58:27 UTC
Description:
- CVE-2026-19385: stop pg_dump's dumpFunc() from parsing pg_proc.protrftypes
into a fixed FUNC_MAX_ARGS-sized array. parseOidArray() now allocates the
array itself and, in the new arraysize < 0 mode used by dumpFunc(), always
leaves a zero terminator, so the "for (i = 0; typeids[i]; i++)" loop can no
longer read past the end of the allocation when the server sends exactly
FUNC_MAX_ARGS or more transform type OIDs (heap buffer overflow, CVSS 8.8;
upstream REL_14_STABLE 57aa21f, shipped in 14.24)
Updated packages:
-
postgresql-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:d7bc4b925d908fcc4336b622b9449cdfe94a7444647b8e1a6722e940790d7768
-
postgresql-contrib-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:384883c00539f0310141433c73222f67714efe268f4b6b85d2ab1893938e2f46
-
postgresql-docs-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:a1cf629160a95ec2d62400f6753d68831bd6f4748247b2d68c9bc4c2f82a15e6
-
postgresql-plperl-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:e15f5d7097c2efd948e5cd7fc0528a5996c8b701dcf90aebce7de81c4043ea6b
-
postgresql-plpython3-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:5bdc2c756702e515dae1e1bdb879c69add8b2d9befded334456318e71d2dd73e
-
postgresql-pltcl-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:ac194664f29f263ed17839fa55950c783a07a5f83c105d1f57f3c09d9c2acb7d
-
postgresql-private-devel-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:52a3c9abe7028234fd96797fd325257c3aef1387325be178ab88d0c56d949ee1
-
postgresql-private-libs-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:79478b7846a6b3ee37cc3166431b35deea6f2b6d4396882cecfedf7f214a84ac
-
postgresql-server-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:4f6dcebc1398caa80bcfffcea7dec87006072b7d31b522330f34bc02b722d471
-
postgresql-server-devel-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:48e8f0b4b99b93814fef06440293ccd7e4eb8d6df8e31d7912139b5939604482
-
postgresql-static-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:dbf0a547267ef9bcf6d39cbea148809d80d33aab5d745ef3d5202c84097bb2da
-
postgresql-test-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:ca29aa9f16fd9e84b5666ba8125a5b3898488eb35372f1ce8503a3d281af5472
-
postgresql-test-rpm-macros-13.23-1.el9_6.tuxcare.els9.noarch.rpm
sha:bcfd2eb364eab4066f2588b7aea153a747940ef03fd33f9a4538d5f52220e0ac
-
postgresql-upgrade-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:62256f1ffa6d4dcbe10ed6369abfa5fcd5d0c3edf5d4ddcf11ba0926ea5d1368
-
postgresql-upgrade-devel-13.23-1.el9_6.tuxcare.els9.x86_64.rpm
sha:00ee2424ad13f95522b0c8823a10d01cf0bd0ebbdd73baf2af4a89a2bd6fe7b8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
