{"id":"CLSA-2026-1774460378","summary":"postgresql11: Fix of 4 CVEs","details":"- Fix CVE-2025-1094: Improper neutralization of quoting syntax in libpq\n  escape functions allowing SQL injection.\n- Fix CVE-2024-7348: TOCTOU race condition in pg_dump allows arbitrary SQL\n  function execution via view/foreign table replacement.\n- Fix CVE-2024-10979: Block environment variable mutations from trusted\n  PL/Perl to prevent arbitrary code execution by unprivileged users.\n- Fix CVE-2025-8714: Restrict psql meta-commands in plain-text dumps to\n  prevent restore-time code injection.","modified":"2026-05-27T11:33:54.837618775Z","published":"2026-03-25T17:39:43Z","upstream":["CVE-2024-10979","CVE-2024-7348","CVE-2025-1094","CVE-2025-8714"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1774460378.html"}],"affected":[{"package":{"name":"postgresql11","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-contrib","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-contrib?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-docs","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-docs?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-libs","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-libs?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-plperl","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-plperl?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-plpython","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-plpython?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-pltcl","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-pltcl?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-server","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-server?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-server-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-server-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-static","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-static?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-test","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-test?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-test-rpm-macros","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-test-rpm-macros?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-upgrade","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-upgrade?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}},{"package":{"name":"postgresql11-upgrade-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/postgresql11-upgrade-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.22-1.el7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1774460378.json"}}],"schema_version":"1.7.5"}