Release date:
2026-09-09 11:37:53 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in to_char(timestamptz), where a party controlling the time_zone setting can overrun the format output buffer and execute arbitrary code as the operating system user running the database by supplying a long POSIX time zone abbreviation
- debian/patches/CVE-2026-14669.patch: check the length of the time zone
abbreviation against the per-format-character allocation before copying
it into the output buffer in the DCH_tz and DCH_TZ cases of
DCH_to_char(), raising "time zone format value too long" instead of
overflowing, in src/backend/utils/adt/formatting.c
- CVE-2026-14669
Updated packages:
-
libecpg-compat3-11_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:09cc48cffc72b7a01b2a383f8a85de343478f86c
-
libecpg-dev-11_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:b5f639779a0908a0ff49189032218c71fbd81ecf
-
libecpg6-11_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:90b7f81f18a4d3e2e7cadbb00f5b016a6e411cdc
-
libpgtypes3-11_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:748bce59a16c2fda66c323b9cc740f448a5adaee
-
libpq-dev-11_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:eb4ff58e34165b96f220f7169323e29e4378742b
-
libpq5-11_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:312552c83a42ece97e3a86cb5958519ffd65c68b
-
postgresql11_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:870320c442f1c1cd0bab3716068a8bfd8cb411e5
-
postgresql11-client_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:76ae7ee7e7a480bbf1dbe323d506dbd66e1e636c
-
postgresql11-doc_11.22-1~trixie+tuxcare.els14_all.deb
sha:f746af1020934bbc5273e60732c7879e2910fb76
-
postgresql11-plperl_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:6e64e1a6ac223b9b83dd9b16e4ca8986b94ae38d
-
postgresql11-plpython3_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:cfa265891abb528cfaa4c17fb035ef6b1110a6d1
-
postgresql11-pltcl_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:b5bef0a78735e4b09dda33186bb6950793458b35
-
postgresql11-server-dev_11.22-1~trixie+tuxcare.els14_amd64.deb
sha:b9ca2dae3ad90afc31788cf7f0163cec0593f5fd
-
libecpg-compat3-11_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:dbb908a0e0ac21731faa1bd3c1166e9dd54e764f
-
libecpg-dev-11_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:754ce3b78aa3129936cbe65d77708829730087dd
-
libecpg6-11_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:ba8fbfdc5c10cae62e9b781bb37c473ff8e2c097
-
libpgtypes3-11_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:97cb0fa3ec193602a6e67026b941245e95fdf94b
-
libpq-dev-11_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:09f2902a0c978176aa7236b460cf236357d61579
-
libpq5-11_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:7825b4a2d8119275bacf75a97dca89bccde7c2c1
-
postgresql11_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:23123bbfe07a55d5248fa34218288be679072e93
-
postgresql11-client_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:cade311f1d223d4062632266cf038c79f658bfc5
-
postgresql11-plperl_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:047e189e61b945c474ba085b0ce4780f0ad687db
-
postgresql11-plpython3_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:91eebe7502acc72574de89119b323b467426dbf9
-
postgresql11-pltcl_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:cd158bf06efd89f475dfcc0aad8b0af9f939b082
-
postgresql11-server-dev_11.22-1~trixie+tuxcare.els14_arm64.deb
sha:f813213da3a200ac67956f91b5a7aa9b70eb6fd0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
