[CLSA-2026:1792246027] postgresql96: Fix of 12 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-17 14:07:28 UTC
Description:
- CVE-2025-1094: libpq PQescape*() and the client tools' quoting functions verify multibyte characters and neutralise invalid ones, fmtId() quotes identifiers knowing their encoding (SQL injection through psql) - CVE-2026-16239: cross-check the row type of a portal running EXECUTE or FETCH against the rows the executor returns (server memory disclosure)
CVEs fixed:
Updated packages:
  • postgresql96-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:86105a8c0d8e5080501440b3dae883bffc3f0fae95efbf455997106ed70c0507
  • postgresql96-contrib-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:7d164a68ea695e040325d59c88d2ea2a2471c2f1b13d1ea295f970f1420eb9e2
  • postgresql96-devel-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:855eba8eb518fc0e55495c79bd9c9d6f8b73897cf2ea53972bd3f90d3f9566b9
  • postgresql96-docs-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:08d34bfc0991e2d1a65f781cabf20b4988f590c893f5791abb972d89b69eb7cb
  • postgresql96-libs-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:153aef1d3e20381e10c379003f3e98562f6f1f4d327e51fe7148170e86901b51
  • postgresql96-plperl-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:caab45a43b7dcc23a070230cfe921ea0b97baaf1bb1fd9a4837e80c652a71c26
  • postgresql96-plpython-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:ab411e63db11b2c62743dd50953ff89fd4582f949eefc39fc85a42dabc574f37
  • postgresql96-plpython3-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:c4e3c740492831d51876b13d23933a818601827c0d01df250151047ea47fb1d1
  • postgresql96-pltcl-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:abaa5876ac55ca040a766896abc1a0968090c4d73cf516fb215c02a74df32310
  • postgresql96-server-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:df2d4d04d5ba9698d661f43570d45f64371d2a070009ee85de841f649718c1cc
  • postgresql96-test-9.6.24-1PGDG.1.el7.tuxcare.els7.x86_64.rpm
    sha:d2dd5481a606ec9d03ac4847a13de428074fe914e374259c8e34eebb1e7b051a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.