[CLSA-2026:1787671896] postgresql: Fix of CVE-2026-14669
Type:
security
Severity:
Important
Release date:
2026-08-25 15:31:50 UTC
Description:
- CVE-2026-14669: reject POSIX timezone abbreviations longer than the to_char() format workspace budget in DCH_to_char()'s TZ/tz items instead of strcpy()ing past the palloc'd buffer (security hunk of upstream REL_14_STABLE 5fb3c63, shipped in 14.24)
CVEs fixed:
Updated packages:
  • postgresql-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:04e069544b467854bb9ec69a3f1eac3b0e0e65db23451d60a5dc18fea4507e1f
  • postgresql-contrib-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:97a20781f02b91e0fa6d985b6c0e869f1f6961ecff5b0a0cc6ab7aae4e61b263
  • postgresql-devel-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:6facd5d78b3252b5a954597650ebc8623b9b91a15eb14eac4359184f57d02f57
  • postgresql-docs-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:93ed1ac59477bb1c38946ee20b7a7ef6b0e618e9171bfd4c2239e3f9d60a4c5e
  • postgresql-libs-9.2.24-8.amzn2.0.10.tuxcare.els2.i686.rpm
    sha:244cd6c3a33cb2112a2ebd8bfc213bad0ddfc3aee7c9298147b8b9270b2602f4
  • postgresql-libs-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:ccb66d2c5e435ab29e87b2c936c7136a3c47e11145b90baeb93ad82f2ed29768
  • postgresql-plperl-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:9976cb52de5240486e383db231425a509a42eda76a99a5b44aedd1ca41c68f9a
  • postgresql-plpython-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:d7b62c84251d6c2b0e6ed7b38bf5e6594fdbe631e45c723dead3f8a39729e277
  • postgresql-pltcl-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:2f70d88406c98a0825eff4d0259c2e32460da1c08753f3e28ad32cebebef3906
  • postgresql-server-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:727f311a58c8d49b4ac174a2cf56c026ecb9a8facf8eb8912e06277ea3bea71b
  • postgresql-static-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:dd8e8ac2a890de6c019e78da5b4b5eb7f4d2aabb0ca7ef100af178e2747ec2d4
  • postgresql-test-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:6f06a03352ef4ad68734b11326906e28a2ce069e2103fba4f4ece7f4a16e455b
  • postgresql-upgrade-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm
    sha:04f86bb80a559244d2f89eab21a84bc22f39416f7e90cdb5c4091fdd48bb3ad2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.