[Git][security-tracker-team/security-tracker][master] Add references for psqlodbc issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
50bdc234 by Salvatore Bonaccorso at 2026-11-03T08:44:15+01:00
Add references for psqlodbc issues

At time of commit those GHSAs are only referenced in the official CVE
entry but not yet accessible. So details for assessment on seveirty
might be difficult. Wait.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -538,26 +538,37 @@ CVE-2026-120091 (Temporal Server compiles a Worker Controller Instance module, g
 	NOT-FOR-US: Temporal Technologies
 CVE-2026-120067 (For updatable cursors, which are enabled by default, psqlODBC adds hid ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-3r96-h2q4-6pxh
 CVE-2026-120066 (On Unix-like systems, when logging is enabled, psqlODBC creates its lo ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-wj7r-6pj3-62g8
 CVE-2026-120065 (For an updatable cursor over a table without OIDs that has an auto-inc ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-9cg8-r57h-h6jj
 CVE-2026-120064 (Several psqlODBC entry points use an application-supplied column numbe ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-7pq2-q7mj-ph8c
 CVE-2026-120063 (When psqlODBC quotes a schema or table name into a 128-byte stack buff ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-285r-84w3-xcxv
 CVE-2026-120062 (SQLSpecialColumns in psqlODBC splices the table and schema names it re ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-gg8f-fx3w-rj33
 CVE-2026-120061 (The psqlODBC parser for ODBC escape sequences in application SQL text  ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-hfm6-qfx8-v4xq
 CVE-2026-120060 (psqlODBC trusts counts and lengths in server data in three places. SQL ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-4mfx-cfxx-c877
 CVE-2026-120059 (For an updatable cursor over a table without OIDs that has an auto-inc ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-44rq-72jh-x2h8
 CVE-2026-120058 (psqlODBC sizes its row cache from the column count of a cursor's first ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-6rmx-9q62-4w6m
 CVE-2026-120057 (psqlODBC copies the reply to a large-object read (loread) into the app ...)
 	- psqlodbc 1:18.00.0006-1
+	NOTE: https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-qhmr-5339-q33r
 CVE-2026-119740 (Nexbox A95X TV boxes built on the Amlogic S905X platform contain an un ...)
 	TODO: check
 CVE-2026-119739 (The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50bdc2346192b2e35d0c975f9f84c49deb20bd85

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50bdc2346192b2e35d0c975f9f84c49deb20bd85
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/dd5cbee9/attachment.htm>