[CLSA-2026:1784794674] Fix CVE(s): CVE-2026-6477
Type:
security
Severity:
Important
Release date:
2026-07-23 08:18:20 UTC
Description:
* SECURITY UPDATE: Buffer overrun in frontend large object interface - debian/patches/CVE-2026-6477.patch: mark PQfn() unsafe and add a buf_size bounds check in pqFunctionCall3() so the frontend LO interface cannot write past the end of result_buf - CVE-2026-6477
CVEs fixed:
Updated packages:
  • libecpg-compat3-13_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:6d6f2810d817c7094b30769c3c1ebb12755cda4a
  • libecpg-dev-13_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:57c83bc41b5c7d81f4690669b0bf9aa00fc5ed3e
  • libecpg6-13_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:d666fb86320f77d682d1e3b02026329552ca4822
  • libpgtypes3-13_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:bc1b34abc182e72df1daa274620bab55fba12ed0
  • libpq-dev-13_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:cc29d6b30158aa3115d4c9a89cc4b583b401ab70
  • libpq5-13_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:066ad17aa9faba020fe04681819a0ce7376dd9f2
  • postgresql13_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:3f0c528eeea40189d7513a387521e530f0b128a4
  • postgresql13-client_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:08d9590361ba6b147bfad0e8d09658260dfc52fa
  • postgresql13-doc_13.23-1~trixie+tuxcare.els11_all.deb
    sha:3463fd52408354d9546daa12c014d7700d2e148c
  • postgresql13-plperl_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:c0212358d3477e7a7e19d13588a481c930f987ce
  • postgresql13-plpython3_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:f213f713d49b1ecec94b9e402306b00e42d1d1a2
  • postgresql13-pltcl_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:e1be3c6e424ae01a393d02418d70200935bb494c
  • postgresql13-server-dev_13.23-1~trixie+tuxcare.els11_amd64.deb
    sha:cef9ec34cb454c6425873cf94b5db55260200cc3
  • libecpg-compat3-13_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:ee3cddf6013760702f64bd4852a61dec4613da25
  • libecpg-dev-13_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:fe813e359ccedf771c8b2c552662d30144e0dd88
  • libecpg6-13_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:0315d9578d71dea1ed9cc7995ba45ea8026519d7
  • libpgtypes3-13_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:5d5c16a46f2200b3da3831ce920a6e989cd3eb44
  • libpq-dev-13_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:8dd62cdf4a1deee75e89df391c59d26dd876b5da
  • libpq5-13_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:5c7799a39baf93861c008a00bd38ac501bb63395
  • postgresql13_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:dc70cacf7c113a5892701d637d0ee036970eea1c
  • postgresql13-client_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:4a6d62a294c70526f6a16df07e81ce316c032b5a
  • postgresql13-doc_13.23-1~trixie+tuxcare.els11_all.deb
    sha:3463fd52408354d9546daa12c014d7700d2e148c
  • postgresql13-plperl_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:a59327a4cb00b20a396c64833b62c0a6503e05f1
  • postgresql13-plpython3_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:ed728e7b8eea6f81b0074e5f2abd44e59673a2d5
  • postgresql13-pltcl_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:13970947661a55903afea66dfcf7bf05a0ae8639
  • postgresql13-server-dev_13.23-1~trixie+tuxcare.els11_arm64.deb
    sha:23759867373918b051b9a0902eb0bb49c205f02c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.