{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* Ubuntu 22.04 build of debian13els 13.23-1~trixie+tuxcare.els14, under\n the PGDG package names so it upgrades PGDG installs in place.\n * SECURITY UPDATE: integer overflows in several server features\n - debian/patches/CVE-2026-6473.patch\n - CVE-2026-6473\n * SECURITY UPDATE: path traversal in pg_basebackup and pg_rewind\n - debian/patches/CVE-2026-6475.patch\n - CVE-2026-6475\n * SECURITY UPDATE: stack overflow via recursive SSL/GSS negotiation\n - debian/patches/CVE-2026-6479.patch\n - CVE-2026-6479\n * SECURITY UPDATE: crash or memory disclosure via crafted time zone name\n - debian/patches/CVE-2026-6474.patch\n - CVE-2026-6474\n * SECURITY UPDATE: stack buffer overflow and SQL injection in contrib/spi\n - debian/patches/CVE-2026-6637.patch\n - CVE-2026-6637\n * SECURITY UPDATE: timing side channel in authentication comparisons\n - debian/patches/CVE-2026-6478.patch\n - CVE-2026-6478\n * SECURITY UPDATE: buffer overrun in libpq large object interface\n - debian/patches/CVE-2026-6477.patch\n - CVE-2026-6477\n * SECURITY UPDATE: memory disclosure via crafted oidvector/int2vector\n - debian/patches/CVE-2026-2003.patch\n - CVE-2026-2003\n * SECURITY UPDATE: code execution via intarray selectivity estimator\n - debian/patches/CVE-2026-2004.patch\n - CVE-2026-2004\n * SECURITY UPDATE: heap buffer overflow in pgcrypto pubkey decryption\n - debian/patches/CVE-2026-2005.patch\n - CVE-2026-2005\n * SECURITY UPDATE: buffer overrun via crafted multibyte characters\n - debian/patches/CVE-2026-2006.patch\n - CVE-2026-2006\n * SECURITY UPDATE: heap buffer overflow in to_char(timestamptz)\n - debian/patches/CVE-2026-14669.patch\n - CVE-2026-14669\n * SECURITY UPDATE: heap buffer overflow in pg_dump transform lists\n - debian/patches/CVE-2026-19385.patch\n - CVE-2026-19385\n * SECURITY UPDATE: untrusted search path in amcheck\n - debian/patches/CVE-2026-14673.patch\n - CVE-2026-14673\n * Build with clang/llvm 15 from the jammy archive.\n * Compute the catalog version inline: jammy's postgresql-common ships no\n server/catversion helper.\n * Don't build libpq5, libpq-dev, libecpg*, libpgtypes3: jammy's 14.x\n libraries outrank them.\n * Drop the Alpine packaging and dbpp templating: this branch builds only\n jammy.", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_postgresql/ubuntu22.04/advisories/2026/clsa-2026_1790593828.json" } ], "tracking": { "current_release_date": "2026-10-09T11:48:10Z", "generator": { "date": "2026-10-09T11:48:10Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1790593828", "initial_release_date": "2026-09-28T11:10:30Z", "revision_history": [ { "date": "2026-09-28T11:10:30Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-05T09:23:45Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-10-09T11:48:10Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "Fix of 9 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Ubuntu 22.04", "product": { "name": "Ubuntu 22.04", "product_id": "Ubuntu-22", "product_identification_helper": { "cpe": "cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*" } } } ], "category": "product_family", "name": "Ubuntu" } ], "category": "vendor", "name": "Canonical Ltd." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product": { "name": "postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_id": "postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-server-dev-13@13.23-1.pgdg22.04%2B1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product": { "name": "postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_id": "postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plpython3-13@13.23-1.pgdg22.04%2B1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product": { "name": "postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_id": "postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-client-13@13.23-1.pgdg22.04%2B1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product": { "name": "postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_id": "postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-pltcl-13@13.23-1.pgdg22.04%2B1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product": { "name": "postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_id": "postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-plperl-13@13.23-1.pgdg22.04%2B1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product": { "name": "postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_id": "postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-13@13.23-1.pgdg22.04%2B1%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "product": { "name": "postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "product_id": "postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/postgresql-doc-13@13.23-1.pgdg22.04%2B1%2Btuxcare.els1?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" }, "product_reference": "postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" }, "product_reference": "postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" }, "product_reference": "postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" }, "product_reference": "postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all" }, "product_reference": "postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" }, "product_reference": "postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" }, "product_reference": "postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-6637", "cwe": { "id": "CWE-89", "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')" }, "notes": [ { "category": "description", "text": "Stack buffer overflow in PostgreSQL module \"refint\" allows an unprivileged database user to execute arbitrary code as the operating system user running the database. A distinct attack is possible if the application declares a user-controlled column as a \"refint\" cascade primary key and facilitates user-controlled updates to that column. In that case, a SQL injection allows a primary key update value provider to execute arbitrary SQL as the database user performing the primary key update. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-6637" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-6637/", "url": "https://www.postgresql.org/support/security/CVE-2026-6637/" } ], "release_date": "2026-05-14T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-2003", "cwe": { "id": "CWE-1287", "name": "Improper Validation of Specified Type of Input" }, "notes": [ { "category": "description", "text": "Improper validation of type \"oidvector\" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-2003" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-2003/", "url": "https://www.postgresql.org/support/security/CVE-2026-2003/" } ], "release_date": "2026-02-12T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-6474", "cwe": { "id": "CWE-134", "name": "Use of Externally-Controlled Format String" }, "notes": [ { "category": "description", "text": "Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-6474" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-6474/", "url": "https://www.postgresql.org/support/security/CVE-2026-6474/" } ], "release_date": "2026-05-14T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-2006", "cwe": { "id": "CWE-129", "name": "Improper Validation of Array Index" }, "notes": [ { "category": "description", "text": "Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-2006" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-2006/", "url": "https://www.postgresql.org/support/security/CVE-2026-2006/" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19009", "url": "https://access.redhat.com/errata/RHSA-2026:19009" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19010", "url": "https://access.redhat.com/errata/RHSA-2026:19010" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3730", "url": "https://access.redhat.com/errata/RHSA-2026:3730" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3887", "url": "https://access.redhat.com/errata/RHSA-2026:3887" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3896", "url": "https://access.redhat.com/errata/RHSA-2026:3896" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4024", "url": "https://access.redhat.com/errata/RHSA-2026:4024" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4059", "url": "https://access.redhat.com/errata/RHSA-2026:4059" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4063", "url": "https://access.redhat.com/errata/RHSA-2026:4063" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4064", "url": "https://access.redhat.com/errata/RHSA-2026:4064" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4074", "url": "https://access.redhat.com/errata/RHSA-2026:4074" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4075", "url": "https://access.redhat.com/errata/RHSA-2026:4075" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4110", "url": "https://access.redhat.com/errata/RHSA-2026:4110" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4254", "url": "https://access.redhat.com/errata/RHSA-2026:4254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4441", "url": "https://access.redhat.com/errata/RHSA-2026:4441" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4475", "url": "https://access.redhat.com/errata/RHSA-2026:4475" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4504", "url": "https://access.redhat.com/errata/RHSA-2026:4504" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4505", "url": "https://access.redhat.com/errata/RHSA-2026:4505" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4506", "url": "https://access.redhat.com/errata/RHSA-2026:4506" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4509", "url": "https://access.redhat.com/errata/RHSA-2026:4509" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4515", "url": "https://access.redhat.com/errata/RHSA-2026:4515" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4516", "url": "https://access.redhat.com/errata/RHSA-2026:4516" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4518", "url": "https://access.redhat.com/errata/RHSA-2026:4518" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4524", "url": "https://access.redhat.com/errata/RHSA-2026:4524" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4528", "url": "https://access.redhat.com/errata/RHSA-2026:4528" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4544", "url": "https://access.redhat.com/errata/RHSA-2026:4544" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4546", "url": "https://access.redhat.com/errata/RHSA-2026:4546" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4547", "url": "https://access.redhat.com/errata/RHSA-2026:4547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4548", "url": "https://access.redhat.com/errata/RHSA-2026:4548" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4943", "url": "https://access.redhat.com/errata/RHSA-2026:4943" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8756", "url": "https://access.redhat.com/errata/RHSA-2026:8756" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-2006", "url": "https://access.redhat.com/security/cve/CVE-2026-2006" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2439324", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439324" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2006.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2006.json" } ], "release_date": "2026-02-12T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-2004", "cwe": { "id": "CWE-1287", "name": "Improper Validation of Specified Type of Input" }, "notes": [ { "category": "description", "text": "Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-2004" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-2004/", "url": "https://www.postgresql.org/support/security/CVE-2026-2004/" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19009", "url": "https://access.redhat.com/errata/RHSA-2026:19009" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19010", "url": "https://access.redhat.com/errata/RHSA-2026:19010" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3730", "url": "https://access.redhat.com/errata/RHSA-2026:3730" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3887", "url": "https://access.redhat.com/errata/RHSA-2026:3887" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3896", "url": "https://access.redhat.com/errata/RHSA-2026:3896" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4024", "url": "https://access.redhat.com/errata/RHSA-2026:4024" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4059", "url": "https://access.redhat.com/errata/RHSA-2026:4059" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4063", "url": "https://access.redhat.com/errata/RHSA-2026:4063" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4064", "url": "https://access.redhat.com/errata/RHSA-2026:4064" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4074", "url": "https://access.redhat.com/errata/RHSA-2026:4074" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4075", "url": "https://access.redhat.com/errata/RHSA-2026:4075" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4110", "url": "https://access.redhat.com/errata/RHSA-2026:4110" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4254", "url": "https://access.redhat.com/errata/RHSA-2026:4254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4441", "url": "https://access.redhat.com/errata/RHSA-2026:4441" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4475", "url": "https://access.redhat.com/errata/RHSA-2026:4475" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4504", "url": "https://access.redhat.com/errata/RHSA-2026:4504" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4505", "url": "https://access.redhat.com/errata/RHSA-2026:4505" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4506", "url": "https://access.redhat.com/errata/RHSA-2026:4506" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4509", "url": "https://access.redhat.com/errata/RHSA-2026:4509" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4515", "url": "https://access.redhat.com/errata/RHSA-2026:4515" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4516", "url": "https://access.redhat.com/errata/RHSA-2026:4516" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4518", "url": "https://access.redhat.com/errata/RHSA-2026:4518" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4524", "url": "https://access.redhat.com/errata/RHSA-2026:4524" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4528", "url": "https://access.redhat.com/errata/RHSA-2026:4528" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4544", "url": "https://access.redhat.com/errata/RHSA-2026:4544" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4546", "url": "https://access.redhat.com/errata/RHSA-2026:4546" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4547", "url": "https://access.redhat.com/errata/RHSA-2026:4547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4548", "url": "https://access.redhat.com/errata/RHSA-2026:4548" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4943", "url": "https://access.redhat.com/errata/RHSA-2026:4943" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8756", "url": "https://access.redhat.com/errata/RHSA-2026:8756" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-2004", "url": "https://access.redhat.com/security/cve/CVE-2026-2004" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2439325", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439325" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2004.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2004.json" } ], "release_date": "2026-02-12T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-6479", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "notes": [ { "category": "description", "text": "Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service. If SSL and GSS are both disabled, an attacker can do the same via access to a PostgreSQL TCP socket. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-6479" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-6479/", "url": "https://www.postgresql.org/support/security/CVE-2026-6479/" } ], "release_date": "2026-05-14T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-6477", "cwe": { "id": "CWE-242", "name": "Use of Inherently Dangerous Function" }, "notes": [ { "category": "description", "text": "Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like gets(), PQfn(..., result_is_int=0, ...) stores arbitrary-length, server-determined data into a buffer of unspecified size. Because both the \\lo_export command in psql and pg_dump call lo_read(), the server superuser can overwrite pg_dump or psql stack memory. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-6477" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-6477/", "url": "https://www.postgresql.org/support/security/CVE-2026-6477/" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21182", "url": "https://access.redhat.com/errata/RHSA-2026:21182" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22878", "url": "https://access.redhat.com/errata/RHSA-2026:22878" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26181", "url": "https://access.redhat.com/errata/RHSA-2026:26181" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26203", "url": "https://access.redhat.com/errata/RHSA-2026:26203" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26204", "url": "https://access.redhat.com/errata/RHSA-2026:26204" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26524", "url": "https://access.redhat.com/errata/RHSA-2026:26524" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26525", "url": "https://access.redhat.com/errata/RHSA-2026:26525" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26561", "url": "https://access.redhat.com/errata/RHSA-2026:26561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:27718", "url": "https://access.redhat.com/errata/RHSA-2026:27718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:27738", "url": "https://access.redhat.com/errata/RHSA-2026:27738" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:27741", "url": "https://access.redhat.com/errata/RHSA-2026:27741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:27742", "url": "https://access.redhat.com/errata/RHSA-2026:27742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:27743", "url": "https://access.redhat.com/errata/RHSA-2026:27743" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28037", "url": "https://access.redhat.com/errata/RHSA-2026:28037" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28143", "url": "https://access.redhat.com/errata/RHSA-2026:28143" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28208", "url": "https://access.redhat.com/errata/RHSA-2026:28208" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28999", "url": "https://access.redhat.com/errata/RHSA-2026:28999" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29212", "url": "https://access.redhat.com/errata/RHSA-2026:29212" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29815", "url": "https://access.redhat.com/errata/RHSA-2026:29815" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29904", "url": "https://access.redhat.com/errata/RHSA-2026:29904" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29953", "url": "https://access.redhat.com/errata/RHSA-2026:29953" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:32983", "url": "https://access.redhat.com/errata/RHSA-2026:32983" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:32994", "url": "https://access.redhat.com/errata/RHSA-2026:32994" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:33441", "url": "https://access.redhat.com/errata/RHSA-2026:33441" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:33497", "url": "https://access.redhat.com/errata/RHSA-2026:33497" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:34043", "url": "https://access.redhat.com/errata/RHSA-2026:34043" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:34362", "url": "https://access.redhat.com/errata/RHSA-2026:34362" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:34363", "url": "https://access.redhat.com/errata/RHSA-2026:34363" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:35880", "url": "https://access.redhat.com/errata/RHSA-2026:35880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42555", "url": "https://access.redhat.com/errata/RHSA-2026:42555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:44308", "url": "https://access.redhat.com/errata/RHSA-2026:44308" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:44391", "url": "https://access.redhat.com/errata/RHSA-2026:44391" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:44420", "url": "https://access.redhat.com/errata/RHSA-2026:44420" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:44481", "url": "https://access.redhat.com/errata/RHSA-2026:44481" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:47090", "url": "https://access.redhat.com/errata/RHSA-2026:47090" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49521", "url": "https://access.redhat.com/errata/RHSA-2026:49521" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49908", "url": "https://access.redhat.com/errata/RHSA-2026:49908" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49909", "url": "https://access.redhat.com/errata/RHSA-2026:49909" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:50779", "url": "https://access.redhat.com/errata/RHSA-2026:50779" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:50863", "url": "https://access.redhat.com/errata/RHSA-2026:50863" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54760", "url": "https://access.redhat.com/errata/RHSA-2026:54760" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:58981", "url": "https://access.redhat.com/errata/RHSA-2026:58981" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-6477", "url": "https://access.redhat.com/security/cve/CVE-2026-6477" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2477442", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477442" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6477.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6477.json" } ], "release_date": "2026-05-14T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-2005", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-2005" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-2005/", "url": "https://www.postgresql.org/support/security/CVE-2026-2005/" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19009", "url": "https://access.redhat.com/errata/RHSA-2026:19009" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19010", "url": "https://access.redhat.com/errata/RHSA-2026:19010" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3730", "url": "https://access.redhat.com/errata/RHSA-2026:3730" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3887", "url": "https://access.redhat.com/errata/RHSA-2026:3887" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3896", "url": "https://access.redhat.com/errata/RHSA-2026:3896" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4024", "url": "https://access.redhat.com/errata/RHSA-2026:4024" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4059", "url": "https://access.redhat.com/errata/RHSA-2026:4059" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4063", "url": "https://access.redhat.com/errata/RHSA-2026:4063" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4064", "url": "https://access.redhat.com/errata/RHSA-2026:4064" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4074", "url": "https://access.redhat.com/errata/RHSA-2026:4074" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4075", "url": "https://access.redhat.com/errata/RHSA-2026:4075" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4110", "url": "https://access.redhat.com/errata/RHSA-2026:4110" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4254", "url": "https://access.redhat.com/errata/RHSA-2026:4254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4441", "url": "https://access.redhat.com/errata/RHSA-2026:4441" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4475", "url": "https://access.redhat.com/errata/RHSA-2026:4475" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4504", "url": "https://access.redhat.com/errata/RHSA-2026:4504" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4505", "url": "https://access.redhat.com/errata/RHSA-2026:4505" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4506", "url": "https://access.redhat.com/errata/RHSA-2026:4506" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4509", "url": "https://access.redhat.com/errata/RHSA-2026:4509" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4515", "url": "https://access.redhat.com/errata/RHSA-2026:4515" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4516", "url": "https://access.redhat.com/errata/RHSA-2026:4516" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4518", "url": "https://access.redhat.com/errata/RHSA-2026:4518" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4524", "url": "https://access.redhat.com/errata/RHSA-2026:4524" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4528", "url": "https://access.redhat.com/errata/RHSA-2026:4528" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4544", "url": "https://access.redhat.com/errata/RHSA-2026:4544" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4546", "url": "https://access.redhat.com/errata/RHSA-2026:4546" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4547", "url": "https://access.redhat.com/errata/RHSA-2026:4547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4548", "url": "https://access.redhat.com/errata/RHSA-2026:4548" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4943", "url": "https://access.redhat.com/errata/RHSA-2026:4943" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8756", "url": "https://access.redhat.com/errata/RHSA-2026:8756" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-2005", "url": "https://access.redhat.com/security/cve/CVE-2026-2005" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2439326", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439326" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2005.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2005.json" } ], "release_date": "2026-02-12T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-6478", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "notes": [ { "category": "description", "text": "Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-6478" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-6478/", "url": "https://www.postgresql.org/support/security/CVE-2026-6478/" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21182", "url": "https://access.redhat.com/errata/RHSA-2026:21182" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22878", "url": "https://access.redhat.com/errata/RHSA-2026:22878" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26181", "url": "https://access.redhat.com/errata/RHSA-2026:26181" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26203", "url": "https://access.redhat.com/errata/RHSA-2026:26203" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26204", "url": "https://access.redhat.com/errata/RHSA-2026:26204" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26524", "url": "https://access.redhat.com/errata/RHSA-2026:26524" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26525", "url": "https://access.redhat.com/errata/RHSA-2026:26525" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26561", "url": "https://access.redhat.com/errata/RHSA-2026:26561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:27718", "url": "https://access.redhat.com/errata/RHSA-2026:27718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:27738", "url": "https://access.redhat.com/errata/RHSA-2026:27738" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:27741", "url": "https://access.redhat.com/errata/RHSA-2026:27741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:27742", "url": "https://access.redhat.com/errata/RHSA-2026:27742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:27743", "url": "https://access.redhat.com/errata/RHSA-2026:27743" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28037", "url": "https://access.redhat.com/errata/RHSA-2026:28037" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28143", "url": "https://access.redhat.com/errata/RHSA-2026:28143" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28208", "url": "https://access.redhat.com/errata/RHSA-2026:28208" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28999", "url": "https://access.redhat.com/errata/RHSA-2026:28999" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29212", "url": "https://access.redhat.com/errata/RHSA-2026:29212" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29815", "url": "https://access.redhat.com/errata/RHSA-2026:29815" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29904", "url": "https://access.redhat.com/errata/RHSA-2026:29904" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29953", "url": "https://access.redhat.com/errata/RHSA-2026:29953" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:32983", "url": "https://access.redhat.com/errata/RHSA-2026:32983" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:32994", "url": "https://access.redhat.com/errata/RHSA-2026:32994" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:33441", "url": "https://access.redhat.com/errata/RHSA-2026:33441" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:33497", "url": "https://access.redhat.com/errata/RHSA-2026:33497" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:34043", "url": "https://access.redhat.com/errata/RHSA-2026:34043" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:34362", "url": "https://access.redhat.com/errata/RHSA-2026:34362" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:34363", "url": "https://access.redhat.com/errata/RHSA-2026:34363" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:35880", "url": "https://access.redhat.com/errata/RHSA-2026:35880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42555", "url": "https://access.redhat.com/errata/RHSA-2026:42555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:44420", "url": "https://access.redhat.com/errata/RHSA-2026:44420" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:44481", "url": "https://access.redhat.com/errata/RHSA-2026:44481" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49521", "url": "https://access.redhat.com/errata/RHSA-2026:49521" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:58981", "url": "https://access.redhat.com/errata/RHSA-2026:58981" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-6478", "url": "https://access.redhat.com/security/cve/CVE-2026-6478" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2477447", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477447" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6478.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6478.json" } ], "release_date": "2026-05-14T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-14673", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "notes": [ { "category": "description", "text": "Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16, 15, and 14, minor versions before PostgreSQL 18.6, 16.15, 15.19, and 14.24 are affected. PostgreSQL 17 is unaffected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-14673" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-14673/", "url": "https://www.postgresql.org/support/security/CVE-2026-14673/" } ], "release_date": "2026-08-13T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-19385", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-19385" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-19385/", "url": "https://www.postgresql.org/support/security/CVE-2026-19385/" } ], "release_date": "2026-08-13T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-14669", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-14669" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-14669/", "url": "https://www.postgresql.org/support/security/CVE-2026-14669/" } ], "release_date": "2026-08-13T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-6475", "cwe": { "id": "CWE-61", "name": "UNIX Symbolic Link (Symlink) Following" }, "notes": [ { "category": "description", "text": "Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after these commands implicitly trusts the origin superuser, due to features like shared_preload_libraries. Hence, the attack has practical implications only if one takes relevant action between these commands and server start, like moving the files to a different VM or snapshotting the VM. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-postgresql/cve/CVE-2026-6475" }, { "category": "external", "summary": "https://www.postgresql.org/support/security/CVE-2026-6475/", "url": "https://www.postgresql.org/support/security/CVE-2026-6475/" } ], "release_date": "2026-05-14T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-28T11:10:30.266984Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828", "product_ids": [ "Ubuntu-22:postgresql-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-client-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-doc-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.all", "Ubuntu-22:postgresql-plperl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-plpython3-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-pltcl-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64", "Ubuntu-22:postgresql-server-dev-13-0:13.23-1.pgdg22.04+1+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els-postgresql/releases/CLSA-2026:1790593828" } ], "threats": [ { "category": "impact", "details": "Critical" } ] } ] }