{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"High" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"postgresql-17 security update", "category":"general", "title":"Synopsis" }, { "text":"An update for postgresql-17 is now available for openEuler-24.03-LTS-SP3", "category":"general", "title":"Summary" }, { "text":"PostgreSQL client programs\n\nSecurity Fix(es):\n\nInteger wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14662)\n\nCleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed even with the wrong key. This in turn loses the modest protection from the Modification Detection Code (MDC). Affected functions are pgp_sym_encrypt, pgp_sym_decrypt, pgp_pub_encrypt, pgp_pub_decrypt, pgp_sym_encrypt_bytea, pgp_sym_decrypt_bytea, pgp_pub_encrypt_bytea, and pgp_pub_decrypt_bytea. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14663)\n\nHeap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when round-tripped through pg_wchar. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14664)\n\nIncomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates the cache or connection termination ends the session. This permits a user to complete reads and modifications that were recently permitted but now forbidden. An attacker must tailor an attack to a particular application's pattern of privilege removal and role-specific row security policies. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14666)\n\nType confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14668)\n\nHeap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14669)\n\nHeap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14670)\n\nType confusion in PostgreSQL module \"refint\" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject \"refint: Remove plan cache.\", without a CVE number. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14671)\n\nObservable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scram_iterations count, because the authentication challenge for a nonexistent user reports the default scram_iterations. Within major versions 16-18, minor versions before PostgreSQL 18.5, 17.11, and 16.15 are affected. Versions before PostgreSQL 16 are unaffected.(CVE-2026-14672)\n\nInteger wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14677)\n\nBuffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14678)\n\nStack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14679)\n\nType confusion with PostgreSQL \"internal\" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument type. Type \"internal\" represents a class of mutually-incompatible data structures not intended for access from SQL. The system intended to prevent such function calls, but this prevention had gaps. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-14680)\n\nImproper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS settings are more permissive than the GSS settings, the connection may continue with lesser protection. Within major versions 17-18, minor versions before PostgreSQL 18.5 and 17.11 are affected. Versions before PostgreSQL 17 are unaffected.(CVE-2026-14681)\n\nSQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \\sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-15741)\n\nInteger wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-15742)\n\nType confusion in PostgreSQL \"portal\"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-16239)\n\nInteger underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This typically yields a simple SIGSEGV, but rare cases might achieve client-specific integrity impact via the write. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-16241)\n\nBuffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-18024)\n\nUntrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \\restrict meta-command input expansion. The fix for CVE-2025-8714 introduced \\restrict and \\unrestrict to block this attack, but \\unrestrict itself was sufficient for an attack. pg_dumpall is also affected. pg_restore is affected when used to generate a plain-format dump. Non-core use of \\restrict would be affected, but we've not identified non-core use. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-18408)\n\nHeap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-19385)\n\nUntrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the \"COPY FROM STDIN\" or \"\\copy FROM STDIN\" command fails before the server indicates that it awaits input rows, psql processes the in-line data rows as psql commands. \"COPY FROM\" with a filename is unaffected. The server administrator has no inherent control over the data rows, so a complete attack requires the attacker to separately acquire control of both the server and the data rows. Alternatively, an attacker controlling data rows alone might complete an attack through a coincidental error that they don't control. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-6464)\n\nIncorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP STATISTICS and ALTER STATISTICS via this improper ownership. It wrongly denies those commands to the prior statistics object owner. DROP TABLE remains able to remove statistics objects, so this exploit achieves nothing in many ownership arrangements. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-6469)\n\nMissing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL expression did not. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-6470)\n\nMissing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.(CVE-2026-6471)", "category":"general", "title":"Description" }, { "text":"An update for postgresql-17 is now available for openEuler-24.03-LTS-SP3.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"High", "category":"general", "title":"Severity" }, { "text":"postgresql-17", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2026-3424", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" }, { "summary":"CVE-2026-14662", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14662&packageName=postgresql-17" }, { "summary":"CVE-2026-14663", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14663&packageName=postgresql-17" }, { "summary":"CVE-2026-14664", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14664&packageName=postgresql-17" }, { "summary":"CVE-2026-14666", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14666&packageName=postgresql-17" }, { "summary":"CVE-2026-14668", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14668&packageName=postgresql-17" }, { "summary":"CVE-2026-14669", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14669&packageName=postgresql-17" }, { "summary":"CVE-2026-14670", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14670&packageName=postgresql-17" }, { "summary":"CVE-2026-14671", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14671&packageName=postgresql-17" }, { "summary":"CVE-2026-14672", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14672&packageName=postgresql-17" }, { "summary":"CVE-2026-14677", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14677&packageName=postgresql-17" }, { "summary":"CVE-2026-14678", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14678&packageName=postgresql-17" }, { "summary":"CVE-2026-14679", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14679&packageName=postgresql-17" }, { "summary":"CVE-2026-14680", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14680&packageName=postgresql-17" }, { "summary":"CVE-2026-14681", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14681&packageName=postgresql-17" }, { "summary":"CVE-2026-15741", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-15741&packageName=postgresql-17" }, { "summary":"CVE-2026-15742", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-15742&packageName=postgresql-17" }, { "summary":"CVE-2026-16239", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-16239&packageName=postgresql-17" }, { "summary":"CVE-2026-16241", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-16241&packageName=postgresql-17" }, { "summary":"CVE-2026-18024", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-18024&packageName=postgresql-17" }, { "summary":"CVE-2026-18408", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-18408&packageName=postgresql-17" }, { "summary":"CVE-2026-19385", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-19385&packageName=postgresql-17" }, { "summary":"CVE-2026-6464", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-6464&packageName=postgresql-17" }, { "summary":"CVE-2026-6469", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-6469&packageName=postgresql-17" }, { "summary":"CVE-2026-6470", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-6470&packageName=postgresql-17" }, { "summary":"CVE-2026-6471", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-6471&packageName=postgresql-17" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14662" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14663" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14664" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14666" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14668" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14669" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14670" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14671" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14672" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14677" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14678" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14679" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14680" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14681" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15741" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15742" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16239" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16241" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18024" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18408" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19385" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6464" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6469" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6470" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6471" }, { "summary":"openEuler-SA-2026-3424 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-3424.json" } ], "title":"An update for postgresql-17 is now available for openEuler-24.03-LTS-SP3", "tracking":{ "initial_release_date":"2026-08-26T11:02:20+08:00", "revision_history":[ { "date":"2026-08-26T11:02:20+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-08-26T11:02:20+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-08-26T11:02:20+08:00", "id":"openEuler-SA-2026-3424", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"openEuler-24.03-LTS-SP3", "name":"openEuler-24.03-LTS-SP3" }, "name":"openEuler-24.03-LTS-SP3", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-contrib-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-contrib-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-contrib-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-docs-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-docs-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-docs-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-plperl-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-plperl-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-plperl-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-server-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-server-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-server-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-static-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-static-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-static-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-test-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-test-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-test-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64.rpm", "name":"postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64.rpm" }, "name":"postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-17.11-1.oe2403sp3.src.rpm", "name":"postgresql-17-17.11-1.oe2403sp3.src.rpm" }, "name":"postgresql-17-17.11-1.oe2403sp3.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-contrib-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-contrib-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-contrib-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-docs-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-docs-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-docs-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-plperl-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-plperl-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-plperl-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-server-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-server-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-server-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-static-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-static-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-static-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-test-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-test-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-test-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64.rpm", "name":"postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64.rpm" }, "name":"postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"noarch", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"postgresql-17-test-rpm-macros-17.11-1.oe2403sp3.noarch.rpm", "name":"postgresql-17-test-rpm-macros-17.11-1.oe2403sp3.noarch.rpm" }, "name":"postgresql-17-test-rpm-macros-17.11-1.oe2403sp3.noarch.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-contrib-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-contrib-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-docs-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-docs-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-plperl-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-plperl-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-server-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-server-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-static-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-static-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-test-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-test-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "name":"postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-17.11-1.oe2403sp3.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "name":"postgresql-17-17.11-1.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-contrib-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-contrib-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-docs-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-docs-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-plperl-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-plperl-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-server-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-server-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-static-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-static-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-test-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-test-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "name":"postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"postgresql-17-test-rpm-macros-17.11-1.oe2403sp3.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch", "name":"postgresql-17-test-macros-17.11-1.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2026-14662", "notes":[ { "text":"Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-14662" }, { "cve":"CVE-2026-14663", "notes":[ { "text":"Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed even with the wrong key. This in turn loses the modest protection from the Modification Detection Code (MDC). Affected functions are pgp_sym_encrypt, pgp_sym_decrypt, pgp_pub_encrypt, pgp_pub_decrypt, pgp_sym_encrypt_bytea, pgp_sym_decrypt_bytea, pgp_pub_encrypt_bytea, and pgp_pub_decrypt_bytea. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-14663" }, { "cve":"CVE-2026-14664", "notes":[ { "text":"Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when round-tripped through pg_wchar. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-14664" }, { "cve":"CVE-2026-14666", "notes":[ { "text":"Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates the cache or connection termination ends the session. This permits a user to complete reads and modifications that were recently permitted but now forbidden. An attacker must tailor an attack to a particular application's pattern of privilege removal and role-specific row security policies. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.2, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-14666" }, { "cve":"CVE-2026-14668", "notes":[ { "text":"Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.1, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-14668" }, { "cve":"CVE-2026-14669", "notes":[ { "text":"Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-14669" }, { "cve":"CVE-2026-14670", "notes":[ { "text":"Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-14670" }, { "cve":"CVE-2026-14671", "notes":[ { "text":"Type confusion in PostgreSQL module \"refint\" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject \"refint: Remove plan cache.\", without a CVE number. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-14671" }, { "cve":"CVE-2026-14672", "notes":[ { "text":"Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scram_iterations count, because the authentication challenge for a nonexistent user reports the default scram_iterations. Within major versions 16-18, minor versions before PostgreSQL 18.5, 17.11, and 16.15 are affected. Versions before PostgreSQL 16 are unaffected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-14672" }, { "cve":"CVE-2026-14677", "notes":[ { "text":"Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-14677" }, { "cve":"CVE-2026-14678", "notes":[ { "text":"Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-14678" }, { "cve":"CVE-2026-14679", "notes":[ { "text":"Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.2, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-14679" }, { "cve":"CVE-2026-14680", "notes":[ { "text":"Type confusion with PostgreSQL \"internal\" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument type. Type \"internal\" represents a class of mutually-incompatible data structures not intended for access from SQL. The system intended to prevent such function calls, but this prevention had gaps. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-14680" }, { "cve":"CVE-2026-14681", "notes":[ { "text":"Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS settings are more permissive than the GSS settings, the connection may continue with lesser protection. Within major versions 17-18, minor versions before PostgreSQL 18.5 and 17.11 are affected. Versions before PostgreSQL 17 are unaffected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.2, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-14681" }, { "cve":"CVE-2026-15741", "notes":[ { "text":"SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \\sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-15741" }, { "cve":"CVE-2026-15742", "notes":[ { "text":"Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-15742" }, { "cve":"CVE-2026-16239", "notes":[ { "text":"Type confusion in PostgreSQL \"portal\"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-16239" }, { "cve":"CVE-2026-16241", "notes":[ { "text":"Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This typically yields a simple SIGSEGV, but rare cases might achieve client-specific integrity impact via the write. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2026-16241" }, { "cve":"CVE-2026-18024", "notes":[ { "text":"Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-18024" }, { "cve":"CVE-2026-18408", "notes":[ { "text":"Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \\restrict meta-command input expansion. The fix for CVE-2025-8714 introduced \\restrict and \\unrestrict to block this attack, but \\unrestrict itself was sufficient for an attack. pg_dumpall is also affected. pg_restore is affected when used to generate a plain-format dump. Non-core use of \\restrict would be affected, but we've not identified non-core use. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-18408" }, { "cve":"CVE-2026-19385", "notes":[ { "text":"Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-19385" }, { "cve":"CVE-2026-6464", "notes":[ { "text":"Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the \"COPY FROM STDIN\" or \"\\copy FROM STDIN\" command fails before the server indicates that it awaits input rows, psql processes the in-line data rows as psql commands. \"COPY FROM\" with a filename is unaffected. The server administrator has no inherent control over the data rows, so a complete attack requires the attacker to separately acquire control of both the server and the data rows. Alternatively, an attacker controlling data rows alone might complete an attack through a coincidental error that they don't control. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.1, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-6464" }, { "cve":"CVE-2026-6469", "notes":[ { "text":"Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP STATISTICS and ALTER STATISTICS via this improper ownership. It wrongly denies those commands to the prior statistics object owner. DROP TABLE remains able to remove statistics objects, so this exploit achieves nothing in many ownership arrangements. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2026-6469" }, { "cve":"CVE-2026-6470", "notes":[ { "text":"Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL expression did not. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-6470" }, { "cve":"CVE-2026-6471", "notes":[ { "text":"Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ], "details":"postgresql-17 security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3424" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.2, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.src", "openEuler-24.03-LTS-SP3:postgresql-17-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-contrib-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debuginfo-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-debugsource-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-docs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plperl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-plpython3-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-pltcl-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-private-libs-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-server-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-static-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-upgrade-devel-17.11-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:postgresql-17-test-macros-17.11-1.oe2403sp3.noarch" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-6471" } ] }