CLSA-2026-1780993103

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1780993103
Upstream
CVE (3)
  • CVE-2026-6474
  • CVE-2026-6478
  • CVE-2026-6637
Published
2026-06-09T08:18:43Z
Modified
2026-10-26T09:31:52Z
Summary
Fix CVE(s): CVE-2026-6474, CVE-2026-6478, CVE-2026-6637
Details
  • SECURITY UPDATE: Fix stack buffer overrun and SQL injection in refint contrib module
    • debian/patches/CVE-2026-6637.patch: Fix stack buffer overrun and SQL injection in refint contrib module, plus follow-up segfault fix in check_foreign_key() when a CASCADE update key value is NULL
    • CVE-2026-6637
  • SECURITY UPDATE: Fix format-string memory disclosure via crafted time zone in timeofday() (also harden pg_strftime() error handling)
    • debian/patches/CVE-2026-6474.patch: Fix format-string memory disclosure via crafted time zone in timeofday() (also harden pg_strftime() error handling)
    • CVE-2026-6474
  • SECURITY UPDATE: Use timingsafe_bcmp() in MD5 password and RADIUS authentication paths to prevent timing side-channel
    • debian/patches/CVE-2026-6478.patch: Use timingsafe_bcmp() in MD5 password and RADIUS authentication paths to prevent timing side-channel
    • CVE-2026-6478
References

Affected packages

TuxCare:Debian:10
libecpg-compat3-9.6

Package

Name
libecpg-compat3-9.6
Purl
pkg:deb/tuxcare/libecpg-compat3-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
libecpg-dev-9.6

Package

Name
libecpg-dev-9.6
Purl
pkg:deb/tuxcare/libecpg-dev-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
libecpg6-9.6

Package

Name
libecpg6-9.6
Purl
pkg:deb/tuxcare/libecpg6-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
libpgtypes3-9.6

Package

Name
libpgtypes3-9.6
Purl
pkg:deb/tuxcare/libpgtypes3-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
libpq-dev-9.6

Package

Name
libpq-dev-9.6
Purl
pkg:deb/tuxcare/libpq-dev-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
libpq5-9.6

Package

Name
libpq5-9.6
Purl
pkg:deb/tuxcare/libpq5-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
postgresql-9.6

Package

Name
postgresql-9.6
Purl
pkg:deb/tuxcare/postgresql-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
postgresql-client-9.6

Package

Name
postgresql-client-9.6
Purl
pkg:deb/tuxcare/postgresql-client-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
postgresql-contrib-9.6

Package

Name
postgresql-contrib-9.6
Purl
pkg:deb/tuxcare/postgresql-contrib-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
postgresql-doc-9.6

Package

Name
postgresql-doc-9.6
Purl
pkg:deb/tuxcare/postgresql-doc-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
postgresql-plperl-9.6

Package

Name
postgresql-plperl-9.6
Purl
pkg:deb/tuxcare/postgresql-plperl-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
postgresql-plpython-9.6

Package

Name
postgresql-plpython-9.6
Purl
pkg:deb/tuxcare/postgresql-plpython-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
postgresql-plpython3-9.6

Package

Name
postgresql-plpython3-9.6
Purl
pkg:deb/tuxcare/postgresql-plpython3-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
postgresql-pltcl-9.6

Package

Name
postgresql-pltcl-9.6
Purl
pkg:deb/tuxcare/postgresql-pltcl-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"
postgresql-server-dev-9.6

Package

Name
postgresql-server-dev-9.6
Purl
pkg:deb/tuxcare/postgresql-server-dev-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1780993103.json"