[CLSA-2026:1788270306] Fix CVE(s): CVE-2026-14669
Type:
security
Severity:
Important
Release date:
2026-09-01 13:45:16 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in to_char(timestamptz): DCH_to_char() copies the timezone abbreviation into a DCH_MAX_ITEM_SIZ-budgeted workspace with an unchecked strcpy(), and any client can select a longer POSIX abbreviation via SET TIME ZONE (CVSS 8.8, arbitrary code execution as the database OS user). - debian/patches/CVE-2026-14669.patch: reject POSIX timezone abbreviations longer than n->key->len * DCH_MAX_ITEM_SIZ in DCH_to_char()'s TZ/tz items with an error instead of strcpy()ing them past the palloc'd buffer (upstream 12a6206864, folded into REL_14_STABLE 5fb3c638 and shipped in 14.24; applies verbatim). - CVE-2026-14669
CVEs fixed:
Updated packages:
  • libecpg-compat3_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:b0042d437549fad755f5672de843a9bc1fd31573
  • libecpg-dev_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:5fdb0271cac76ff6bb8709b2d592a9c221e93a8f
  • libecpg6_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:4e54a55d846b69f6dafb848eb8a01fdaf60fd4cc
  • libpgtypes3_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:ce04ad57d745aa352e35f4f2d383ea4508240b65
  • libpq-dev_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:f9b4a8d608b57573bd4e88c0d5650101bad1354e
  • libpq5_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:a808f167caeffac7f5e3ba011a6d1bc19d0a9f29
  • postgresql-10_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:3f1a946e8626f966e3f69117a459e78d313f678b
  • postgresql-client-10_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:8a963f76924f869305662c59a8396d106ba8b954
  • postgresql-doc-10_10.23-0ubuntu0.18.04.2+tuxcare.els7_all.deb
    sha:20ca557eca46a8e8dc46fcff7c87d310ff78e05f
  • postgresql-plperl-10_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:a334ea2bb5e5ee078b3a6ab01db952902eb3b118
  • postgresql-plpython-10_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:8cceb47ac37e669c572b814f232f32198097288e
  • postgresql-plpython3-10_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:0980b45ea37a53a50d551d8a92d2b173282dca9c
  • postgresql-pltcl-10_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:64f00e3eb1abafb6ded15d0380a08f93abca97bb
  • postgresql-server-dev-10_10.23-0ubuntu0.18.04.2+tuxcare.els7_amd64.deb
    sha:b0c2917708d96e4b0e92b478a991001e18d2c7a7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.