Release date:
2026-09-09 10:51:58 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in to_char(timestamptz), where a party controlling the time_zone setting can overrun the format output buffer and execute arbitrary code as the operating system user running the database by supplying a long POSIX time zone abbreviation
- debian/patches/CVE-2026-14669.patch: check the length of the time zone
abbreviation against the per-format-character allocation before copying
it into the output buffer in the DCH_tz and DCH_TZ cases of
DCH_to_char(), raising "time zone format value too long" instead of
overflowing, in src/backend/utils/adt/formatting.c
- CVE-2026-14669
Updated packages:
-
libecpg-compat3-11_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:e5884e220417ce1f3e507689fdc12a3398385339
-
libecpg-dev-11_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:9be33f32167d76967ff3486eb9417614ecd5d6f6
-
libecpg6-11_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:834403938407d252cafc0f3faa3dd72740978656
-
libpgtypes3-11_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:8ad24a5d72a534a5ade658af0b58bcb52b6a8900
-
libpq-dev-11_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:dcf929deef534aa9108503dff0da663adb1648e2
-
libpq5-11_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:9373eaa0f211f370f55250b33d0f5ba259398fea
-
postgresql11_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:fed7a080449743dc29ab27596f85ad97771d6843
-
postgresql11-client_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:74ad27afd9e25546fe14bd3dbc0718ce1dadcb52
-
postgresql11-doc_11.22-1~bookworm+tuxcare.els14_all.deb
sha:7ea48c5eb1fcc9f86ee29fd899e6f1fb6d1e01ec
-
postgresql11-plperl_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:167c816a82f226e0dbda7d07ad4ce59a7d05d561
-
postgresql11-plpython3_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:b52d95e334287e0f28017dba8d3bac2cc991dfe2
-
postgresql11-pltcl_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:da538248ca86b7547a59ff4630d2d65e46dfed7c
-
postgresql11-server-dev_11.22-1~bookworm+tuxcare.els14_amd64.deb
sha:e52135745abbb60e238d76171b6e5191a647194a
-
libecpg-compat3-11_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:a267151d71ea36feb2c62941500a3b7933cf74e6
-
libecpg-dev-11_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:0c64667c84c5374cda1661380f60cf8ce90bd9c6
-
libecpg6-11_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:9eb853756b8719c2c13192f1465c8560ebcc4a76
-
libpgtypes3-11_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:2a3aef223a7a2756ddb7eeaacb9f521f6c13a4cf
-
libpq-dev-11_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:95a8d6002d513fa5980f18e07cac1ca98d2908c2
-
libpq5-11_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:e09f408a1bc4d811656e6a31d518527d760630ec
-
postgresql11_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:3b8ad37f52b7bcd0541716f5cca08e1014dbd938
-
postgresql11-client_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:5588b0e1682750fcb5c612a6aedf002f39ca2345
-
postgresql11-plperl_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:a720362861c8ed884e7d23ede6102289a58cfc5f
-
postgresql11-plpython3_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:8ae602dcce6fe58c47cc3e759705f57c35c22235
-
postgresql11-pltcl_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:084bf577f795e200f5bc66e7316a085e6932b973
-
postgresql11-server-dev_11.22-1~bookworm+tuxcare.els14_arm64.deb
sha:970784fb6749b053f81f06ff7426df68efd20887
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
