[CLSA-2026:1784538963] Fix CVE(s): CVE-2026-6478
Type:
security
Severity:
Important
Release date:
2026-07-20 09:16:26 UTC
Description:
* SECURITY UPDATE: Covert timing channel in authentication comparisons - debian/patches/CVE-2026-6478.patch: apply timingsafe_bcmp() for constant-time comparison of secrets in SCRAM, MD5 and RADIUS authentication paths - CVE-2026-6478
CVEs fixed:
Updated packages:
  • libecpg-compat3-13_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:811b834fd1f8ad3782e2c104520c6abae32de8ec
  • libecpg-dev-13_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:a1e9c93a08b6624c92a1c6ed02150fba63d5f5fb
  • libecpg6-13_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:a4eeda81d6b5f9f9d03474ab1f4ec14f625b0f9c
  • libpgtypes3-13_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:c4cda750b01dd7a6ecb324efa61b98f57bac43dc
  • libpq-dev-13_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:2d774bd8c562a633465a3b15d2bf2c254daeb65a
  • libpq5-13_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:930450fe73bb5a16a35d88354058619e2490d48d
  • postgresql13_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:c0d09b8711a79adfed3e8f45a3a613b01e157c40
  • postgresql13-client_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:d7c1126f92bb153548fb92fe307751ff7a5a44fe
  • postgresql13-doc_13.23-1~trixie+tuxcare.els10_all.deb
    sha:58c18957bf62f9cca5b189d6459789dc1849626a
  • postgresql13-plperl_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:157f56656d55ecc9d1444f16e56508e3724a5eb8
  • postgresql13-plpython3_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:9d5f9f11a92e4ccf82b7fa4a0c75e23349326824
  • postgresql13-pltcl_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:db8a76dedcb341613f9f40dac1dbf2cb9033ca5b
  • postgresql13-server-dev_13.23-1~trixie+tuxcare.els10_amd64.deb
    sha:52c12491db8638b5f82b79ad46201fc51e264a89
  • libecpg-compat3-13_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:39af74a5350401cc468b57bf621bf04c7221a099
  • libecpg-dev-13_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:60e917a87d62023e869f1ee5cb04bc03fe82c051
  • libecpg6-13_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:9b7c39bdf8d8765bc6fee99dd623536c36a5e98c
  • libpgtypes3-13_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:e9d9a65eeff74aca59fd5d188cee2345ca009ccc
  • libpq-dev-13_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:cf1d08b3415a362660061a95b2434732140c56ad
  • libpq5-13_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:9c79393711579c638e5733a715c1cc23f711da8c
  • postgresql13_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:140d52c6e3711436a2a71c1e68d19498f5ef40e8
  • postgresql13-client_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:c90cb5e8022bace936cf0f08e7ed64393c8c7e79
  • postgresql13-doc_13.23-1~trixie+tuxcare.els10_all.deb
    sha:58c18957bf62f9cca5b189d6459789dc1849626a
  • postgresql13-plperl_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:913d1dceaf85f61d10a09df4c208121dbd829a63
  • postgresql13-plpython3_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:8705606bf061f6785fd6e8c105349aae001844dd
  • postgresql13-pltcl_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:a6f22d576a4161f1438817748c8dc745b7d70a95
  • postgresql13-server-dev_13.23-1~trixie+tuxcare.els10_arm64.deb
    sha:52e4007a1592292661ed1d3221debe8de907b4a4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.