[CLSA-2026:1794243473] Fix CVE(s): CVE-2025-8713
Type:
security
Severity:
Low
Release date:
2026-11-09 16:58:05 UTC
Description:
* SECURITY UPDATE: Leaky operators could read sampled statistics through views the user cannot access or past row security policies in inheritance/partitioning - debian/patches/CVE-2025-8713.patch: add all_rows_selectable() and parent-RTE-only checks in selfuncs.c and extended_stats.c; add planner-startup view and inherited-target permission checks in planner.c; export ExecCheckRTEPerms(); add regression tests - CVE-2025-8713
CVEs fixed:
Updated packages:
  • libecpg-compat3-12_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:43850e92c00196ae6d99e031590934bc9795290b
  • libecpg-dev-12_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:e1bcd6b8c037a8f3a78996d0621d8192e5e3d1f4
  • libecpg6-12_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:58316291c0ef0bc60498a189047e6285d224184d
  • libpgtypes3-12_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:f3bf37e2ee102cf364e9924f120f57febc360300
  • libpq-dev-12_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:e6b2b5fcf00702900eece3f33b5032cf3e4b367b
  • libpq5-12_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:05683b770853c8aab66f75b5c5e042e2deb17010
  • postgresql12_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:06533c90c8a6ae75f8f83d6e35c0474094d5b825
  • postgresql12-client_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:f7be27c980cc9f74e890da73b59f134ffbd29b30
  • postgresql12-doc_12.22-2~trixie+tuxcare.els18_all.deb
    sha:105ba1fb82a25db92770fc16aeda6fbe84e4d1ad
  • postgresql12-plperl_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:dad0c870f31ac0e5b2e3fdce562d6052c72c10e0
  • postgresql12-plpython3_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:e200909e3969de2c312aebbcfd8347860893f68b
  • postgresql12-pltcl_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:98bfc3da880559586a5c4518e0c5bdbb872cec45
  • postgresql12-server-dev_12.22-2~trixie+tuxcare.els18_amd64.deb
    sha:e5719e052a78c930bbf472135d95fc779bf61322
  • libecpg-compat3-12_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:df16ec239aac277f29ad7f856958ab59360b75b3
  • libecpg-dev-12_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:d12387bb85966f6017432ac1ca4338fa2405b99b
  • libecpg6-12_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:f03f7495c7b3f2efcb54cc64b97c9e7ec2a67e89
  • libpgtypes3-12_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:a8fd5a5df80d1b5a87f76a3d2bd75555e0da471c
  • libpq-dev-12_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:37891a28e2a8275582a782a5d5e11aee590a5d53
  • libpq5-12_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:c2bb05ee578d3a27fdaeedd0eabf69808a3ab3aa
  • postgresql12_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:85a25da8a3bfe5029b8d4a9e342d0c989aebc051
  • postgresql12-client_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:b2448654989378c91b1f276a291175eb47925856
  • postgresql12-plperl_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:c2d8594d88af55a52b324539bef325171c272d44
  • postgresql12-plpython3_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:36881097b346991bddc7417344f243fa69bada4d
  • postgresql12-pltcl_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:eb86a286e83f3d1b30c83e4df6f1c96b51566558
  • postgresql12-server-dev_12.22-2~trixie+tuxcare.els18_arm64.deb
    sha:278552557e9fe8044913885f353936e0a9cc8590
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.