Tuxcare Errata System 0.0.1 5.10 2026-10-05T09:23:31 Ubuntu 22.04 LTS * Port of debian13els 13.23-1~trixie+tuxcare.els15 and els16. * SECURITY UPDATE: arbitrary library load via logical decoding output plugin - debian/patches/CVE-2026-6471.patch - CVE-2026-6471 * SECURITY UPDATE: integer overflow in fuzzystrmatch levenshtein() - debian/patches/CVE-2026-15742.patch - CVE-2026-15742 * SECURITY UPDATE: portal type confusion in EXECUTE and FETCH - debian/patches/CVE-2026-16239.patch (keeps the 13.x SetTuplestoreDestReceiverParams() ABI for extension binaries) - CVE-2026-16239 * SECURITY UPDATE: type confusion via functions on type internal - debian/patches/CVE-2026-14680.patch - CVE-2026-14680 * SECURITY UPDATE: integer wraparound in pltcl and plperl allocations - debian/patches/CVE-2026-14677.patch - CVE-2026-14677 * SECURITY UPDATE: backquote expansion in psql \unrestrict at restore time - debian/patches/CVE-2026-18408.patch - CVE-2026-18408 Important TuxCare License Agreement CVE-2026-6471 CVE-2026-15742 CVE-2026-14680 CVE-2026-16239 CVE-2026-18408 CVE-2026-14677 Ubuntu 22.04 LTS * Port of debian13els 13.23-1~trixie+tuxcare.els17. * SECURITY UPDATE: memory disclosure via ctid selectivity estimation - debian/patches/CVE-2026-14668.patch - CVE-2026-14668 * SECURITY UPDATE: heap buffer overflow in PL/Perl with tied arrays and hashes - debian/patches/CVE-2026-14670.patch - CVE-2026-14670 * SECURITY UPDATE: type confusion via stale cached plans in contrib/refint - debian/patches/CVE-2026-14671.patch - CVE-2026-14671 * SECURITY UPDATE: integer wraparound in tsvector and tsquery construction - debian/patches/CVE-2026-14662.patch - CVE-2026-14662 * SECURITY UPDATE: heap buffer overflow in regexp match and split functions - debian/patches/CVE-2026-14664.patch - CVE-2026-14664 Important TuxCare License Agreement CVE-2026-14671 CVE-2026-14670 CVE-2026-14668 CVE-2026-14662 CVE-2026-14664 Ubuntu 22.04 LTS * Ubuntu 22.04 build of debian13els 13.23-1~trixie+tuxcare.els14, under the PGDG package names so it upgrades PGDG installs in place. * SECURITY UPDATE: integer overflows in several server features - debian/patches/CVE-2026-6473.patch - CVE-2026-6473 * SECURITY UPDATE: path traversal in pg_basebackup and pg_rewind - debian/patches/CVE-2026-6475.patch - CVE-2026-6475 * SECURITY UPDATE: stack overflow via recursive SSL/GSS negotiation - debian/patches/CVE-2026-6479.patch - CVE-2026-6479 * SECURITY UPDATE: crash or memory disclosure via crafted time zone name - debian/patches/CVE-2026-6474.patch - CVE-2026-6474 * SECURITY UPDATE: stack buffer overflow and SQL injection in contrib/spi - debian/patches/CVE-2026-6637.patch - CVE-2026-6637 * SECURITY UPDATE: timing side channel in authentication comparisons - debian/patches/CVE-2026-6478.patch - CVE-2026-6478 * SECURITY UPDATE: buffer overrun in libpq large object interface - debian/patches/CVE-2026-6477.patch - CVE-2026-6477 * SECURITY UPDATE: memory disclosure via crafted oidvector/int2vector - debian/patches/CVE-2026-2003.patch - CVE-2026-2003 * SECURITY UPDATE: code execution via intarray selectivity estimator - debian/patches/CVE-2026-2004.patch - CVE-2026-2004 * SECURITY UPDATE: heap buffer overflow in pgcrypto pubkey decryption - debian/patches/CVE-2026-2005.patch - CVE-2026-2005 * SECURITY UPDATE: buffer overrun via crafted multibyte characters - debian/patches/CVE-2026-2006.patch - CVE-2026-2006 * SECURITY UPDATE: heap buffer overflow in to_char(timestamptz) - debian/patches/CVE-2026-14669.patch - CVE-2026-14669 * SECURITY UPDATE: heap buffer overflow in pg_dump transform lists - debian/patches/CVE-2026-19385.patch - CVE-2026-19385 * SECURITY UPDATE: untrusted search path in amcheck - debian/patches/CVE-2026-14673.patch - CVE-2026-14673 * Build with clang/llvm 15 from the jammy archive. * Compute the catalog version inline: jammy's postgresql-common ships no server/catversion helper. * Don't build libpq5, libpq-dev, libecpg*, libpgtypes3: jammy's 14.x libraries outrank them. * Drop the Alpine packaging and dbpp templating: this branch builds only jammy. Critical TuxCare License Agreement CVE-2026-6637 CVE-2026-2006 CVE-2026-2004 CVE-2026-6477 CVE-2026-2005 CVE-2026-6478 CVE-2026-14673 CVE-2026-19385 CVE-2026-14669 postgresql-13 postgresql-client-13 postgresql-doc-13 postgresql-plperl-13 postgresql-plpython3-13 postgresql-pltcl-13 postgresql-server-dev-13 amd64 0:13.23-1.pgdg22.04+1+tuxcare.els2 0:13.23-1.pgdg22.04+1+tuxcare.els2 amd64 0:13.23-1.pgdg22.04+1+tuxcare.els3 0:13.23-1.pgdg22.04+1+tuxcare.els3 amd64 0:13.23-1.pgdg22.04+1+tuxcare.els1 0:13.23-1.pgdg22.04+1+tuxcare.els1