Re: CVE-2026-11586

On 7/27/26 6:52 AM, Moore, Dean (Capita) wrote:
> We have identified *CVE-2026-11586* affecting the bundled *libcurl.dll
> (version 8.20.0)* within our *PostgreSQL 15.18* Windows installation.
> The vulnerability is reported by Nessus, and the fixed version is
> *libcurl 8.21.0 or later*. [tenable.com] <https://www.tenable.com/
> plugins/nessus/326239>, [curl.se] <https://curl.se/docs/CVE-2026-11586.html>
> We are asking EDB to:

The Postgres project is responsible for the source code,
installers/packaging is done by third parties.

You should file an issue here:

https://github.com/EnterpriseDB/edb-installers/issues

> *Dean Moore
> *Infrastructure Support Engineer (Mobile), Capita Intelligent Communications
> AI & PO
>
> 07769 239517
> 7-11 Lower Oakham Way, Oakham Business Park, Mansfield, NG18 5BY
>
>
> Capita plc | Registered in England and Wales | Registration no. 02081330
> Registered office First Floor | 2 Kingdom St | Paddington | London | W2
> 6BD | _www.capita.com_ <http://www.capita.com/>
>
>
>
> Confidential External - Data to be shared with caution.
> This email is security checked and subject to the disclaimer on web-
> page: https://www.capita.com/email-disclaimer.aspx

--
Adrian Klaver
adrian(dot)klaver(at)aklaver(dot)com