{"id":"CLSA-2025-1747431041","summary":"Fix CVE(s): CVE-2024-10976, CVE-2024-10977","details":"   * SECURITY UPDATE: incomplete tracking of row security allows unauthorized\n     access to data\n     - debian/patches/CVE-2024-10976.patch: Ensure cached plans to be correctly\n       marked as dependent on role to fix the issue of neglected marking which\n       could lead to incorrect row visibility.\n     - CVE-2024-10976\n   * SECURITY UPDATE: server error message leakage\n     - debian/patches/CVE-2024-10977.patch: Discard error messages received\n       during SSL and GSS negotiation to prevent arbitrary bytes written to the\n       client's terminal\n     - CVE-2024-10977","modified":"2026-06-04T09:46:48.163734587Z","published":"2025-05-16T21:30:46Z","upstream":["CVE-2024-10976","CVE-2024-10977"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2025-1747431041.html"}],"affected":[{"package":{"name":"libecpg-compat3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libecpg-compat3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"libecpg-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libecpg-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"libecpg6","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libecpg6?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"libpgtypes3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libpgtypes3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"libpq-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libpq-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"libpq5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libpq5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"postgresql-9.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/postgresql-9.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"postgresql-client-9.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/postgresql-client-9.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"postgresql-contrib-9.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/postgresql-contrib-9.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"postgresql-doc-9.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/postgresql-doc-9.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"postgresql-plperl-9.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/postgresql-plperl-9.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"postgresql-plpython-9.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/postgresql-plpython-9.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"postgresql-plpython3-9.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/postgresql-plpython3-9.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"postgresql-pltcl-9.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/postgresql-pltcl-9.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}},{"package":{"name":"postgresql-server-dev-9.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/postgresql-server-dev-9.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1747431041.json"}}],"schema_version":"1.7.5"}