CLSA-2026-1792796702

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792796702
Upstream
CVE (5)
  • CVE-2026-14663
  • CVE-2026-14666
  • CVE-2026-14678
  • CVE-2026-18024
  • CVE-2026-6470
Published
2026-10-25T10:46:04Z
Modified
2026-10-26T09:43:27Z
Summary
postgresql: Fix of 6 CVEs
Details
  • CVE-2026-14678: fix out-of-bounds read in pg_trgm's GiST picksplit function with all-true signatures
  • CVE-2026-6470: require USAGE privilege on the subtype in CREATE TYPE AS RANGE, on the composite type in ALTER TABLE OF, and on the types used by stored expressions (defaults, constraints, indexes, policies, rules, triggers, partition keys, domains and function parameter defaults)
  • CVE-2026-18024: fix out-of-bounds read in ascii() on invalid or truncated multibyte characters
  • CVE-2026-14666: invalidate cached plans that depend on row-level security after role membership or role attribute changes
  • CVE-2026-14663: make pgcrypto's PGP encryption fail when the cipher cannot be initialized instead of emitting the plaintext; add the ignore-cipher-failure decryption option to recover such messages
References

Affected packages

TuxCare:AlmaLinux:9.6
postgresql

Package

Name
postgresql
Purl
pkg:rpm/tuxcare/postgresql?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-contrib

Package

Name
postgresql-contrib
Purl
pkg:rpm/tuxcare/postgresql-contrib?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-docs

Package

Name
postgresql-docs
Purl
pkg:rpm/tuxcare/postgresql-docs?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-plperl

Package

Name
postgresql-plperl
Purl
pkg:rpm/tuxcare/postgresql-plperl?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-plpython3

Package

Name
postgresql-plpython3
Purl
pkg:rpm/tuxcare/postgresql-plpython3?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-pltcl

Package

Name
postgresql-pltcl
Purl
pkg:rpm/tuxcare/postgresql-pltcl?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-private-devel

Package

Name
postgresql-private-devel
Purl
pkg:rpm/tuxcare/postgresql-private-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-private-libs

Package

Name
postgresql-private-libs
Purl
pkg:rpm/tuxcare/postgresql-private-libs?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-server

Package

Name
postgresql-server
Purl
pkg:rpm/tuxcare/postgresql-server?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-server-devel

Package

Name
postgresql-server-devel
Purl
pkg:rpm/tuxcare/postgresql-server-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-static

Package

Name
postgresql-static
Purl
pkg:rpm/tuxcare/postgresql-static?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-test

Package

Name
postgresql-test
Purl
pkg:rpm/tuxcare/postgresql-test?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-test-rpm-macros

Package

Name
postgresql-test-rpm-macros
Purl
pkg:rpm/tuxcare/postgresql-test-rpm-macros?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-upgrade

Package

Name
postgresql-upgrade
Purl
pkg:rpm/tuxcare/postgresql-upgrade?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"
postgresql-upgrade-devel

Package

Name
postgresql-upgrade-devel
Purl
pkg:rpm/tuxcare/postgresql-upgrade-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.23-1.el9_6.tuxcare.els15

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792796702.json"