[CLSA-2026:1788886193] Fix of 8 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-09 09:31:12 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in to_char(timestamptz) via a long POSIX time zone abbreviation supplied through the time_zone setting - debian/patches/CVE-2026-14669.patch: bound the time zone abbreviation against n->key->len * DCH_MAX_ITEM_SIZ in the DCH_tz and DCH_TZ cases of DCH_to_char() and raise ERRCODE_DATETIME_VALUE_OUT_OF_RANGE instead of overrunning the output buffer, in src/backend/utils/adt/formatting.c - CVE-2026-14669
CVEs fixed:
Updated packages:
  • libecpg-compat3-12_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:2f7ab4a2e517441925fac2a6bfe7df8d2f6f782e
  • libecpg-dev-12_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:405b14a734024cc36f4772480685183188ded7ca
  • libecpg6-12_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:b720249bfb57a1d7b2f984e013b740d17a8fc0b6
  • libpgtypes3-12_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:81bf931fdcdaa9a2b0070cb9759de709c223921f
  • libpq-dev-12_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:35d048858017ee47115f828dd65fae0c3530d59b
  • libpq5-12_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:e77113a36dc0270e055881879cb89c982e9258f7
  • postgresql12_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:80e295427529df5cacba36645e77065e876b839f
  • postgresql12-client_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:bf50368fc363f36767568f9691a685d19c5c1c01
  • postgresql12-doc_12.22-2~trixie+tuxcare.els11_all.deb
    sha:0ed6bfeca0375038805450ad028adeb46f4a93b6
  • postgresql12-plperl_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:7af8d616dafeaa5a4ba3c0895edf4a57b8050324
  • postgresql12-plpython3_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:39331f934f7b91109d89bfb500c53f836b25396e
  • postgresql12-pltcl_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:2972dc6bf8d3a9c9c2d3594924e9a7d33b0821dd
  • postgresql12-server-dev_12.22-2~trixie+tuxcare.els11_amd64.deb
    sha:59bc2f40e07409e00c45d762d20b0609f8fbae61
  • libecpg-compat3-12_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:06f125cfe93cf97c579b4d97cdd27b7d03fbc982
  • libecpg-dev-12_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:253da61206d86a3a9b1ca0689e54fe1b785ef9f2
  • libecpg6-12_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:a9430cb559d085792be556bd08eddbaddc3bb370
  • libpgtypes3-12_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:97465ecec5747cdd24fd0db052b78a454bc86cdd
  • libpq-dev-12_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:d051e06fadc83dfa5c957a88bcfc46a1ed695aee
  • libpq5-12_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:2b35cd489c83b570fe0ce1debaeb924921aa724b
  • postgresql12_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:cbe4d1408985bdf593a57f7213cd82a724c27840
  • postgresql12-client_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:7e1f50090652a68c3c003163ee4e3d85678efdb2
  • postgresql12-plperl_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:d6d4b720034f6f843c085bdcfd47f4a48b5055d9
  • postgresql12-plpython3_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:a2acdfa27d1ed25ef7672ce417fe459094f1d048
  • postgresql12-pltcl_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:93b52e130d76c4261992edfe92a8eeab360d176d
  • postgresql12-server-dev_12.22-2~trixie+tuxcare.els11_arm64.deb
    sha:e9fa2d4d38a46f1f8f78c950121373ccf1583950
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.