[SECURITY] [DSA 6133-1] postgresql-17 security update To : debian-security-announce@lists.debian.org Subject : [SECURITY] [DSA 6133-1] postgresql-17 security update From : Moritz Muehlenhoff < jmm@debian.org > Date : Thu, 12 Feb 2026 19:47:31 +0000 Message-id : < [🔎] aY4uU1Mi6eLizvOM@seger.debian.org > Reply-to : debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6133-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 12, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : postgresql-17 CVE ID : CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 Multiple security issues were discovered in PostgreSQL, which may result in memory disclosure or the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in version 17.8-0+deb13u1. We recommend that you upgrade your postgresql-17 packages. For the detailed security status of postgresql-17 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/postgresql-17 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmmOLKYACgkQEMKTtsN8 TjZIew//Xz1V41X4ZtSm5mATMoeHMc9ItHyiHWJUjWwQCs/cS5XhEwgURfly9RK4 XQMIGEntQiPYRzYLPboIo5cf8wSkq8PtwVtoaYzTAIZsaYd5P82VxbanFvd5rjjO LwrwIyAZ7pFoggkMkaFM5v9fU4htVfNegyuClnPsXeVd38ZKLUpUvrNxNCa0BvmS upHtyB+fSf3Jnw/b2Pw0Ox5dEx313MnxtwHpdPplUhQIMlIPgEkNeCsD4uc09wWA JR3zKV3VFbMIqeE/k/HRlsEmnOwN3ea+zfqI2lXTQXv9aYtKpdAxEZk8ShdcusnA 68wkOkYBvI1tyDRNY2wFydC7pZAQZruf991UlA14ricYUK5aSaRhlf0t8p3IeTHY 2zMXin7yKiDBq37vjOjZb5DNeanFBkddPyEARxQTwl7A8jzI9JODfsBDXv6S2B7D Pjd+lIVhr4H6UwzAetS6ghPAyM8MXG6L+wGgK1hkj+SbTgTPe0hnEgLJlvEE46vS M3/nFZjgbzQ2ayrIcVvNcqqpXXfU3zA6KwiQAkwE3R5flPxmBSvNO5RJJuOboReU mTYzjUs9w29JF7HOQDOyFeqjwAVE/GPXRajUjxh3UfQzeZBygFYR7WSewV2jDhYY Jbk4aGIyJqpt1ABy3mcyQ9Ob+qd9ip907LVDTBzZ7Y65ZkZxsgs= =Ng+E -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Moritz Muehlenhoff (on-list) Moritz Muehlenhoff (off-list) Prev by Date: [SECURITY] [DSA 6132-1] postgresql-15 security update Previous by thread: [SECURITY] [DSA 6132-1] postgresql-15 security update Index(es): Date Thread