ROOT-OS-DEBIAN-11-CVE-2026-14669 CVE-2026-14669 in postgresql-13 - Patched by Root

Root has patched CVE-2026-14669 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-14669 affecting package postgresql for versions less than 16.15-1

CVE-2026-14669 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14669

creationtimestamp| type| source ---|---|--- 2026-08-18 16:00:04+00:00| seen| Telegram/IrtiLILqC14w4K74-ztnJ9H6MHFYvClAaPOGhW-00BoHQg0 2026-08-18 16:00:04+00:00| seen| Telegram/yna2SgiXqU8Yl76-ls-5XNafbPbcL6XsZZAFlQw-zg2N4Y 2026-08-19 00:00:10+00:00| published-proof-of-concept|...

BELL-CVE-2026-14669

Bulletin has no description...

DEBIAN-CVE-2026-14669

Heap buffer overflow in PostgreSQL tochartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

CVE-2026-14669 PostgreSQL to_char heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL tochartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

CVE-2026-14669 PostgreSQL to_char heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL tochartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

CVE-2026-14669

CVE-2026-14669 describes a heap buffer overflow in PostgreSQL's to_char(timestamptz), allowing an attacker who can choose the database timezone to execute arbitrary code as the OS user running the database. The vulnerability is triggered by a long POSIX timezone abbreviation. Affected versions ar...