CLSA-2026-1787230283

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1787230283
Upstream
CVE (3)
Published
2026-08-20T12:51:35Z
Modified
2026-10-26T09:31:52Z
Summary
Fix CVE(s): CVE-2023-39417, CVE-2023-5869, CVE-2024-0985
Details
  • SECURITY UPDATE: Reject substituting extension schemas containing quoting-relevant characters, preventing SQL injection via @extschema@ in extension scripts
    • debian/patches/CVE-2023-39417.patch: Reject substituting extension schemas containing quoting-relevant characters, preventing SQL injection via @extschema@ in extension scripts
    • CVE-2023-39417
  • SECURITY UPDATE: Detect integer overflow while computing new array dimensions in array_set_element(), array_set_element_expanded() and array_set_slice()
    • debian/patches/CVE-2023-5869.patch: Detect integer overflow while computing new array dimensions in array_set_element(), array_set_element_expanded() and array_set_slice()
    • CVE-2023-5869
  • SECURITY UPDATE: Run REFRESH MATERIALIZED VIEW CONCURRENTLY in the right security context when creating the temporary diff table
    • debian/patches/CVE-2024-0985.patch: Run REFRESH MATERIALIZED VIEW CONCURRENTLY in the right security context when creating the temporary diff table
    • CVE-2024-0985
References

Affected packages

TuxCare:Debian:10
libecpg-compat3-9.6

Package

Name
libecpg-compat3-9.6
Purl
pkg:deb/tuxcare/libecpg-compat3-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
libecpg-dev-9.6

Package

Name
libecpg-dev-9.6
Purl
pkg:deb/tuxcare/libecpg-dev-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
libecpg6-9.6

Package

Name
libecpg6-9.6
Purl
pkg:deb/tuxcare/libecpg6-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
libpgtypes3-9.6

Package

Name
libpgtypes3-9.6
Purl
pkg:deb/tuxcare/libpgtypes3-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
libpq-dev-9.6

Package

Name
libpq-dev-9.6
Purl
pkg:deb/tuxcare/libpq-dev-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
libpq5-9.6

Package

Name
libpq5-9.6
Purl
pkg:deb/tuxcare/libpq5-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
postgresql-9.6

Package

Name
postgresql-9.6
Purl
pkg:deb/tuxcare/postgresql-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
postgresql-client-9.6

Package

Name
postgresql-client-9.6
Purl
pkg:deb/tuxcare/postgresql-client-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
postgresql-contrib-9.6

Package

Name
postgresql-contrib-9.6
Purl
pkg:deb/tuxcare/postgresql-contrib-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
postgresql-doc-9.6

Package

Name
postgresql-doc-9.6
Purl
pkg:deb/tuxcare/postgresql-doc-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
postgresql-plperl-9.6

Package

Name
postgresql-plperl-9.6
Purl
pkg:deb/tuxcare/postgresql-plperl-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
postgresql-plpython-9.6

Package

Name
postgresql-plpython-9.6
Purl
pkg:deb/tuxcare/postgresql-plpython-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
postgresql-plpython3-9.6

Package

Name
postgresql-plpython3-9.6
Purl
pkg:deb/tuxcare/postgresql-plpython3-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
postgresql-pltcl-9.6

Package

Name
postgresql-pltcl-9.6
Purl
pkg:deb/tuxcare/postgresql-pltcl-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"
postgresql-server-dev-9.6

Package

Name
postgresql-server-dev-9.6
Purl
pkg:deb/tuxcare/postgresql-server-dev-9.6?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.6.24-0+deb10u1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787230283.json"