Summary
[13.23-3]
- Add BuildRequires for perl-File-Compare needed by genbki.pl
- Related: RHEL-192239
[13.23-2]
- Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477,
CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23
- Resolves: RHEL-192239
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libpq | 0:13.23-3.el9_8 |
| Oracle Linux · 9 | libpq-devel | 0:13.23-3.el9_8 |
Vulnerabilities 1
-
High 8.8
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like ge…