The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792796702 advisory.

  - Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of     service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the     same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1,     17.7, 16.11, 15.15, 14.20, and 13.23 are affected. (CVE-2025-12817)

  - Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct     observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled     ciphers. If the application accepts encrypted data as input, decryption will succeed even with the wrong     key. This in turn loses the modest protection from the Modification Detection Code (MDC). Affected     functions are pgp_sym_encrypt, pgp_sym_decrypt, pgp_pub_encrypt, pgp_pub_decrypt, pgp_sym_encrypt_bytea,     pgp_sym_decrypt_bytea, pgp_pub_encrypt_bytea, and pgp_pub_decrypt_bytea. Versions before PostgreSQL 18.6,     17.11, 16.15, 15.19, and 14.24 are affected. (CVE-2026-14663)

  - Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership     allows a query to continue using cached row-level security policies after those changes require a     different policy, via plan reuse. Stale policies continue until some other event invalidates the cache or     connection termination ends the session. This permits a user to complete reads and modifications that were     recently permitted but now forbidden. An attacker must tailor an attack to a particular application's     pattern of privilege removal and role-specific row security policies. Versions before PostgreSQL 18.6,     17.11, 16.15, 15.19, and 14.24 are affected. (CVE-2026-14666)

  - Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This     might allow a table maintainer to infer limited memory values, via the lossy signal of index split     choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. (CVE-2026-14678)

  - Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end     of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006     fixed, though this instance has less impact. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and     14.24 are affected. (CVE-2026-18024)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792796702)

medium Nessus Plugin ID 371607

Version 1.2