[Git][security-tracker-team/security-tracker][master] lts: add postgresql-13 triaging by Jochen
Emilio Pozuelo Monfort (@pochu)
pochu at debian.org
Mon Nov 2 10:55:51 GMT 2026
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0a78d854 by Emilio Pozuelo Monfort at 2026-11-02T11:54:18+01:00
lts: add postgresql-13 triaging by Jochen
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -113311,7 +113311,7 @@ CVE-2026-15741 (SQL injection in PostgreSQL EXTRACT() deparse allows an object o
- postgresql-18 18.6-1
- postgresql-17 <removed>
- postgresql-15 <removed>
- - postgresql-13 <unfixed>
+ - postgresql-13 <not-affected> (vulnerable code introduced later)
NOTE: https://www.postgresql.org/support/security/CVE-2026-15741/
NOTE: https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
CVE-2026-15742 (Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct ...)
@@ -113334,7 +113334,7 @@ CVE-2026-16239 (Type confusion in PostgreSQL "portal"/cursor lifecycle allows a
- postgresql-18 18.6-1
- postgresql-17 <removed>
- postgresql-15 <removed>
- - postgresql-13 <unfixed>
+ - postgresql-13 <not-affected> (vulnerable code introduced later)
NOTE: https://www.postgresql.org/support/security/CVE-2026-16239/
NOTE: https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/
CVE-2026-16241 (Integer underflow in PostgreSQL ECPG allows a database server administ ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a78d8542abaa47baf5a25b3a804eca0ae94c6fe
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a78d8542abaa47baf5a25b3a804eca0ae94c6fe
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/4c98449d/attachment.htm>
More information about the debian-security-tracker-commits
mailing list