[CLSA-2026:1788884132] Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-09 09:16:24 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in to_char(timestamptz) - debian/patches/CVE-2026-14669.patch: bounds-check the time zone abbreviation against n->key->len * DCH_MAX_ITEM_SIZ before the strcpy() into the output buffer in the DCH_tz and DCH_TZ cases of DCH_to_char(), raising "time zone format value too long" instead of overflowing to_char's allocation of 12 bytes per format character - CVE-2026-14669
Updated packages:
  • libecpg-compat3-13_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:3cfee2f65585649652bdfb64f8592fb699254899
  • libecpg-dev-13_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:0bb240dd9bbef27d7cfb11b8b2c4bc367d61b773
  • libecpg6-13_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:d4229e4bdaaedc7c64ad7a3efeaca56b2b258566
  • libpgtypes3-13_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:d411a6754688cf017fa46b240342349eee74f70e
  • libpq-dev-13_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:b0008f651a0a93f124e583146ac8269b0ad65f80
  • libpq5-13_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:d7bd16a30799985b7c0bda55b88c33467bf9b797
  • postgresql13_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:b1e1533553f8bda8cf4c4e858bda1ee2e0857252
  • postgresql13-client_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:ca80c115233183235e5daac8b297fe49f8eb3aff
  • postgresql13-doc_13.23-1~bookworm+tuxcare.els13_all.deb
    sha:1d2aabb2f350ff928bab325abd7b257ff1329ac1
  • postgresql13-plperl_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:13fd13921011b0e95e3a1d7c0c3520150f2e31f0
  • postgresql13-plpython3_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:3d253d4e6b04f5c253f7702ee70f7d088ff55103
  • postgresql13-pltcl_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:62121e43ba74772131fc5358576e7804fb49e18e
  • postgresql13-server-dev_13.23-1~bookworm+tuxcare.els13_amd64.deb
    sha:8d30e07df351ebb1ee380bcbd811bec69e314780
  • libecpg-compat3-13_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:ce58b1c85f6599bdabb1c61129b831a4e1a27d4c
  • libecpg-dev-13_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:0a84aa700697cb820b6d71c75dd95b06d48b258a
  • libecpg6-13_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:06d8f3798d1c9fb386ab6a0464e69429062bb864
  • libpgtypes3-13_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:5aabe4f53cce9b5f17dc0078bb926911f40a1779
  • libpq-dev-13_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:cf2b71c5cf0bfc5b19a04e25d0c609d9a317dc28
  • libpq5-13_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:b9a51293fe9d7f47e5e3121942e3925a31a82e0f
  • postgresql13_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:39061eef5b2dc1d0f18ca2b22ce6aa44c809c6d4
  • postgresql13-client_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:e12bc52e53db2abd5ad806a5a608b4aba0deb4b0
  • postgresql13-plperl_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:eb9bcc17804ad616256ae0c3f30988b23d087e17
  • postgresql13-plpython3_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:650b7adc84828f0a56efcabf43f28719728833e2
  • postgresql13-pltcl_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:b5501ce6dfc90a32143794a54a3548ffd2bf6edc
  • postgresql13-server-dev_13.23-1~bookworm+tuxcare.els13_arm64.deb
    sha:f07fc9796fd038e6f0e7b63403bafe86412e1c23
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.