[CLSA-2026:1787649624] postgresql: Fix of CVE-2026-14669
Type:
security
Severity:
Important
Release date:
2026-08-25 09:20:35 UTC
Description:
- CVE-2026-14669: reject POSIX timezone abbreviations longer than the to_char() format workspace budget (n->key->len * DCH_MAX_ITEM_SIZ) in DCH_to_char()'s TZ/tz items instead of strcpy()ing them past the end of the palloc'd buffer (heap overflow, CVSS 8.8; security hunk of upstream REL_14_STABLE 5fb3c63, shipped in 14.24)
CVEs fixed:
Updated packages:
  • postgresql-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:95cbbdfaf8f7f833b57224f3bb4532cf0954b943ec83999cf007327a9a6adc18
  • postgresql-contrib-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:0d21de86dca56833f6447387bbc859f802ad0883bbe90e4db2aaad11f5e11a45
  • postgresql-docs-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:6d117eadfe978df8990890e1a5dc78046ba497241a842b29ff0ce3abb1268c47
  • postgresql-plperl-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:9c68eeed8798dc3bc4a789fc225f973d39f933a3f1c65b7c6b7e11a14ccb95ba
  • postgresql-plpython3-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:9b8a4a3ea4a364df75e6a3fa5068e1b0a842e6526b740e3e589c852e0699de7b
  • postgresql-pltcl-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:ce96ec2692b752dc3b71b2772ddda1bf6ee0fa9d44a01da221ae914d949dd150
  • postgresql-private-devel-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:a9eb3d328ffcde337cceba0f1167f0ded0a32dc8311132d78ccbb9b1b89d35d2
  • postgresql-private-libs-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:1977ed13d9caa9e0c6210bab86006529e948f631e2c21d053d0b478a42870f94
  • postgresql-server-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:05984834a3af697c2d6817cbbb7fd48f336be96c2138b2c9fd6e1771b283f02b
  • postgresql-server-devel-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:5902a80466d5ea40edf2647b2855d200e6dd79ec042cca809b077b4b9c71952e
  • postgresql-static-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:27401d4b13807e6a1a9abd193efdc3a82c30592dff244ff424907fdb5334fb24
  • postgresql-test-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:7374ce512e1e00534ef3db724bbb0c24e9067ee3c960fef445f0c385e71023ac
  • postgresql-test-rpm-macros-13.23-1.el9_6.tuxcare.els8.noarch.rpm
    sha:e4580acba3465b3e3c51b43e8d259073d41ac47dd7b19e76bd72888780646571
  • postgresql-upgrade-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:6a45a2138945b1aee8b72d0af87cf513e7b3dea85a199cf39979006a045c8493
  • postgresql-upgrade-devel-13.23-1.el9_6.tuxcare.els8.x86_64.rpm
    sha:dc0a2d94388634356cf4fed2b46e3d58cc0f087787ad28584155907d02767595
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.