Release date:
2026-09-23 15:16:28 UTC
Description:
- CVE-2026-6464: teach psql to skip in-line data after a COPY ... FROM STDIN that fails
before PGRES_COPY_IN, so the data is no longer executed as SQL
- CVE-2026-6471: restrict logical decoding output plugins to the new
output_plugin_libraries parameter. NOTE: this is a deliberate default-deny
change, matching upstream and RHSA-2026:67491. Installations using a
third-party output plugin (for example decoderbufs/Debezium) must add it to
output_plugin_libraries in postgresql.conf and reload before logical
replication slots can be created again. Audit with:
SELECT DISTINCT plugin FROM pg_replication_slots WHERE plugin IS NOT NULL;
- CVE-2026-16239: cross-check the output row type of a portal running EXECUTE
or FETCH
- CVE-2026-18408: do not perform backquote expansion on the argument of psql's
\unrestrict command
Updated packages:
-
postgresql-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:b45bc6c766680dbef5b397e3239c51b5d2706cab556359839577ce180ee7dc02
-
postgresql-contrib-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:21627e9d8b3f213f566c93b54c766433383baf7dab21b1e7436aa6b178ed3a17
-
postgresql-docs-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:4c2c419b8913eb51b66b51255187793e6863df19cbe20c00f1647f17d3c17cc1
-
postgresql-plperl-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:ca4a7561196df80f2c3aa4a9a6871460d3d1df25d2c15673000c1e42459bf5eb
-
postgresql-plpython3-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:ce340bef0626e59b592fb7936de7d6cfcf350ff4495c92026bb87b30d08fbc59
-
postgresql-pltcl-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:1dacb514081b665b0cdd992c63b520ea58f5c76252087c90d852c47ec369d970
-
postgresql-private-devel-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:2da3e0340ef89eef170aa2863ba73154aa7d30d62d3cfa5637441b546c84ec0d
-
postgresql-private-libs-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:85b7e2db2e1b5451ba9ab732e6f87f2cabe59cebf1a82b60ddfe5e4682daebc5
-
postgresql-server-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:651dd9f56d8078a2eae6206fbaf47587da9dc2ab1e95377ab3cf64ef6790051c
-
postgresql-server-devel-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:26d80dac1c580ffd2eb9d9391a3c6cc5a140a7849ccffaeb329cf6aaaf0a1403
-
postgresql-static-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:02d7aa6a7894e6f59b882f9545c4dae1aa35114b95689d38cda8f4d46b96b667
-
postgresql-test-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:56e49787bab457043dc81dfb0cbe60783613ed45e5d751b6bd8db8a39465ec7e
-
postgresql-test-rpm-macros-13.23-1.el9_6.tuxcare.els12.noarch.rpm
sha:7bc5e6dccbefeb68e9f48b6df678f26c6bb3a23b83c3b2f0d77a1637a9e8c4f5
-
postgresql-upgrade-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:ffcdaab8f4b5b538f20698d5dfcc6690fb53acbd1a794d9d26c433d2a2e0c2a8
-
postgresql-upgrade-devel-13.23-1.el9_6.tuxcare.els12.x86_64.rpm
sha:494bb727ff83d321adb34389bdcdee2b5d9b0f487e9a04b7b323c16a07e452a9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
