[CLSA-2026:1784190352] Fix CVE(s): CVE-2026-6637
Type:
security
Severity:
Critical
Release date:
2026-07-16 08:26:15 UTC
Description:
* SECURITY UPDATE: complete the timeofday() format string fix (CVE-2026-6474) - debian/patches/CVE-2026-6474.patch: additionally backport the pg_strftime() hardening (guarantee a null-terminated result and return an empty string on error) in src/timezone/strftime.c, which the previous backport omitted - CVE-2026-6474
CVEs fixed:
Updated packages:
  • libecpg-compat3-12_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:fc5d72723aedd1d97037f4b05b5750ba953cacf6
  • libecpg-dev-12_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:d340fc9aa61d3c6295706835f39e766e1fe8e1be
  • libecpg6-12_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:80f47930e13e3d6c28661ae9eefe2d7e3d58936f
  • libpgtypes3-12_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:e48166b62bda685cc21d86e2ee9c0cbb840129fc
  • libpq-dev-12_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:484e4880ab7e2e075f5d4cee784b21c7c9fb8e0d
  • libpq5-12_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:64eb2ed0a72454b252803ccc2131208f88749e1e
  • postgresql12_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:2ec2d6124da566e368eb4eaee0bb0878adaee9c4
  • postgresql12-client_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:ef6d9140ba015820e5ea6e707dd9c4e66a39e086
  • postgresql12-doc_12.22-2~bookworm+tuxcare.els9_all.deb
    sha:66345d55d9ce39f7e87c61f7e2050c484f629ddc
  • postgresql12-plperl_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:ebc191b23ab8b1f546c981910de4fd2bbaf5e25e
  • postgresql12-plpython3_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:51be22b74549602f92247d6ca4ea6cd1267806ff
  • postgresql12-pltcl_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:4d3ae7519e77e8e26636efc7ff848e1e35c800b0
  • postgresql12-server-dev_12.22-2~bookworm+tuxcare.els9_amd64.deb
    sha:39aba4212518ffe704c922618a8b367a181b8af4
  • libecpg-compat3-12_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:a0e08333d9ba72347c0887b240164c69d2235e3a
  • libecpg-dev-12_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:d91c384b6687ae611c75af1af0c27dd66e2ed121
  • libecpg6-12_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:f88933e12cfb66dc55f1c272e2941a458f0a6a99
  • libpgtypes3-12_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:8f2d8b6416becc2bba74d237e95af1eaf41f9d10
  • libpq-dev-12_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:a3e4cb3833eb8b68c9a0b79bd7a2cd48de2f1b6c
  • libpq5-12_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:aa624adf27c0f9c6d23efdd19e1cc837f26adc2e
  • postgresql12_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:69459d04ed2bc6f55eca994d6002d90cedf5778f
  • postgresql12-client_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:23f650229823edba34089c05bd84129b3de55d83
  • postgresql12-doc_12.22-2~bookworm+tuxcare.els9_all.deb
    sha:66345d55d9ce39f7e87c61f7e2050c484f629ddc
  • postgresql12-plperl_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:2aa58c09ce3ee880d0c3f4d297a9bc516ba916fb
  • postgresql12-plpython3_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:1302cbf616c809861ee70d01f3d8033fea9044b8
  • postgresql12-pltcl_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:eb361008afe917771ff196ceed6aaae95afea154
  • postgresql12-server-dev_12.22-2~bookworm+tuxcare.els9_arm64.deb
    sha:6d0beb1f0adedae84af4f4a988df7437017dd8f7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.