CLSA-2026-1779880647
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1779880647.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1779880647
- Upstream
- Published
- 2026-05-27T11:18:48Z
- Modified
- 2026-06-04T09:47:29Z
- Summary
- Fix of 6 CVEs
- Details
-
- SECURITY UPDATE: postgresql May-2026 CVE batch
- debian/patches/CVE-2026-6473.patch: integer overflow fixes across multiple vulnerable sites: hstore_plperl/hstore_plpython palloc sizing (mul_size), array_agg() nitems overflow, intarray/ltxtquery findoprnd() left-offset overflow, ltree lquery numvar/totallen overflow, and ts_headline option length overflow.
- debian/patches/CVE-2026-6474.patch: guard pg_strftime() callers and ensure null-terminated output on overflow, plus split timeofday() pg_strftime so the %Z timezone string is never embedded as a format string in subsequent snprintf().
- debian/patches/CVE-2026-6475.patch: prevent path traversal in pg_rewind file operations via path_is_safe_for_extraction() helper.
- debian/patches/CVE-2026-6477.patch: harden PQfn()/pqFunctionCall3() against server-controlled buffer overruns in libpq large-object interface.
- debian/patches/CVE-2026-6478.patch: add timingsafe_bcmp() helper and apply to MD5/SCRAM/RADIUS/plain auth-paths to prevent timing-channel leaks.
- debian/patches/CVE-2026-6637.patch: switch refint contrib check_foreign_key to StringInfo and quote_literal_cstr() to prevent SQL injection and stack buffer overruns.
- CVE-2026-6473
- CVE-2026-6474
- CVE-2026-6475
- CVE-2026-6477
- CVE-2026-6478
- CVE-2026-6637
- debian/patches/fix-regress-tzdata-LMT.patch: refresh src/test/regress expected output for date, timestamptz and horology tests so that they match the LMT abbreviation emitted by current tzdata for pre-1883 America/Los_Angeles dates.
- SECURITY UPDATE: postgresql May-2026 CVE batch
- References