[CLSA-2026:1794415565] postgresql: Fix of 7 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-11 16:46:21 UTC
Description:
- CVE-2022-1552: run autovacuum, REINDEX and CLUSTER on indexes as the table owner with restricted security context - CVE-2022-1552: check operator class ACLs in CREATE INDEX as the original user (8782ce49e4) - CVE-2023-2454: prevent CREATE SCHEMA ... schema_element from escaping the search_path - CVE-2023-5869: fix integer overflow in array modification functions - CVE-2023-5869: detect integer overflow in array_set_slice() on an empty array (6c1b71bc6a) - CVE-2024-10979: block environment variable changes from trusted PL/Perl - CVE-2025-1094: reject invalidly-encoded strings in libpq quoting functions - CVE-2025-1094: quote names in the client encoding in createdb, createuser, dropdb, dropuser, reindexdb and clusterdb - CVE-2025-8714: restrict psql meta-commands in plain-text dumps (\restrict/\unrestrict); \unrestrict does not do backquote expansion (2006fca401) - CVE-2025-12818: prevent int/size_t overflows in libpq
CVEs fixed:
Updated packages:
  • postgresql-8.4.20-8.el6_9.tuxcare.els3.i686.rpm
    sha:17bd0d29a8d2622b02d141950239e77fff9a45673186d64e34c414d8ebece3ee
  • postgresql-8.4.20-8.el6_9.tuxcare.els3.x86_64.rpm
    sha:eb4f85dec77d6d5614f4f4bd58f9df223bddd7f74a28c6b3723a06531e866101
  • postgresql-contrib-8.4.20-8.el6_9.tuxcare.els3.i686.rpm
    sha:d1813826212153db865fbbef8ac31e3d8cdcae443015307a17097ce82c417f18
  • postgresql-contrib-8.4.20-8.el6_9.tuxcare.els3.x86_64.rpm
    sha:e76a45d6824b56da4f3aa8f70bdcd594c15fe14f3295ea6b412ec46650b3e922
  • postgresql-devel-8.4.20-8.el6_9.tuxcare.els3.i686.rpm
    sha:7019a1cc0e89180c5b007a1aedb32c211a4c7e0811dcc54238455d043b19fd93
  • postgresql-devel-8.4.20-8.el6_9.tuxcare.els3.x86_64.rpm
    sha:49ab8c1c4c01e286908a60bad1089d82c2eae3ff3c0c6344cddda9ade51f97f3
  • postgresql-docs-8.4.20-8.el6_9.tuxcare.els3.i686.rpm
    sha:b4493302f24634d5f6c486ba84cd3ed94cc2e593e82bdb33a066ec81b95315b6
  • postgresql-docs-8.4.20-8.el6_9.tuxcare.els3.x86_64.rpm
    sha:b1a18da99cd8720245b678a364ed98a8398ce38e1adc1e1fa516cc1799e52dea
  • postgresql-libs-8.4.20-8.el6_9.tuxcare.els3.i686.rpm
    sha:419737740cfb8fada0981748cc4881d7b211bdd75b9692b942fa6e967effb3f4
  • postgresql-libs-8.4.20-8.el6_9.tuxcare.els3.x86_64.rpm
    sha:af81e79899fa82bc2ce99b264043750b6cef2396b39863315ec13990376c46eb
  • postgresql-plperl-8.4.20-8.el6_9.tuxcare.els3.i686.rpm
    sha:59ef6230fdf388ae1ffc77e8ba162022b563eeceb0739fe1d33034e0523fd010
  • postgresql-plperl-8.4.20-8.el6_9.tuxcare.els3.x86_64.rpm
    sha:417b84578d2805f66322e5bd143196735377b3ebd967bac53dae3341b2143a5e
  • postgresql-plpython-8.4.20-8.el6_9.tuxcare.els3.i686.rpm
    sha:ee2032513c8540bb06b7df02a548a039e32522e587df900f27fcee044011e16e
  • postgresql-plpython-8.4.20-8.el6_9.tuxcare.els3.x86_64.rpm
    sha:b2a51866f138b330ab42c0d2679f652db473049fd8f162297f92c015635d0022
  • postgresql-pltcl-8.4.20-8.el6_9.tuxcare.els3.i686.rpm
    sha:e3af51d4dc24471250e4ce1decc1326548166e13ce58f63d75938510912aed4a
  • postgresql-pltcl-8.4.20-8.el6_9.tuxcare.els3.x86_64.rpm
    sha:4289084e5ec8737a42df6ca7ead064053618919a624e0e9214e534f36e0180e6
  • postgresql-server-8.4.20-8.el6_9.tuxcare.els3.i686.rpm
    sha:221da2d88a29bcad6aed8efc2bcffb3475d393b0617e8306d390b3879ec75144
  • postgresql-server-8.4.20-8.el6_9.tuxcare.els3.x86_64.rpm
    sha:cd9825e7d3a9301ddd7b52ba46c82a957857c9d71129a9496aab5083e67b346b
  • postgresql-test-8.4.20-8.el6_9.tuxcare.els3.i686.rpm
    sha:f68b28bab2870a07a2cee2b5167a13dd08c366b97698a9090692df16794586c5
  • postgresql-test-8.4.20-8.el6_9.tuxcare.els3.x86_64.rpm
    sha:019013e05ce81a17f9f315f2bc84a8cdef9e9380407086f3a7e9679e06015c6a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.