[CLSA-2026:1788885440] Fix CVE(s): CVE-2026-14669
Type:
security
Severity:
Important
Release date:
2026-09-08 16:37:32 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in to_char(timestamptz) - debian/patches/CVE-2026-14669.patch: bounds-check the time zone abbreviation against n->key->len * DCH_MAX_ITEM_SIZ before the strcpy() into the output buffer in the DCH_tz and DCH_TZ cases of DCH_to_char(), raising "time zone format value too long" instead of overflowing to_char's allocation of 12 bytes per format character - CVE-2026-14669
CVEs fixed:
Updated packages:
  • libecpg-compat3-13_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:1c6cc6d303b66f0502f1c8bfc01c19b71ac04d25
  • libecpg-dev-13_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:8096bc7277af6d9ab6b91c865425fc7812ff988b
  • libecpg6-13_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:a96d7e637c77e9b86d745d816778bb14a3daa48e
  • libpgtypes3-13_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:09c8c42279975b3d2fef696cef835875475d1a8e
  • libpq-dev-13_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:2e0790e32a7ab9e43ba1ad3961738c994fe020ae
  • libpq5-13_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:41413d628aec706a7197f330741fe97989c1882b
  • postgresql13_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:22120e644fe0a50e03cdd7be73bf5aa376d38e06
  • postgresql13-client_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:a7f8781ecb8cb000bd76dbb9abb9708304291ea8
  • postgresql13-doc_13.23-1~trixie+tuxcare.els13_all.deb
    sha:b06cc09b777afa239e67b1efd7da13f02d8ff1de
  • postgresql13-plperl_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:a73bb972a0a6b1855c10c28e8f17dd504ab5f29f
  • postgresql13-plpython3_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:73a0a838e175b036c70810573fbea0257f6b5cf2
  • postgresql13-pltcl_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:fa89d3b3437c8642f2af33e7f0dd907acbf62bf4
  • postgresql13-server-dev_13.23-1~trixie+tuxcare.els13_amd64.deb
    sha:e47bc1c6438d5c42c669cf8f8a3a2da70b4e43e1
  • libecpg-compat3-13_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:27be92105f36cb76ca9a3c1deaa2699da10e222e
  • libecpg-dev-13_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:272c991aaeb7ad8946a6b6fd5302417358c4570e
  • libecpg6-13_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:50951b841155b0ddca3a7fd311c57dc1ea66707f
  • libpgtypes3-13_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:cc1c939f9b2be07ce856af61a0d45166ed3cd771
  • libpq-dev-13_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:dcc43e872a7d42a33408d10cd3e22c142fc48ca6
  • libpq5-13_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:dfac8db2f53bc37ab94cc1bb3597ecf3c8eb7a1d
  • postgresql13_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:d1ee5951d32629b0f0909073a186600c5117ab80
  • postgresql13-client_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:ab7318d47e71b1e1eadfc9ce777e38a5cc85eac6
  • postgresql13-plperl_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:619a248a9b22e71fead597f668d74c4201ea69b7
  • postgresql13-plpython3_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:d8cbd714ef28c2b48952013837276bd6ea26fd0e
  • postgresql13-pltcl_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:21ba1d14363a4451c4e7ab4cd37ff4918a48aca0
  • postgresql13-server-dev_13.23-1~trixie+tuxcare.els13_arm64.deb
    sha:c3207956d96b3fb001c7042582649a5ee0fd1db0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.