[ALSA-2026:70186] Important: postgresql16 security update
Type:
security
Severity:
important
Release date:
2026-09-23
Description:
PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package. Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 postgresql-plperl-16.15-1.el10_2.aarch64.rpm 17cffb2b5ff89c03aa6dea534385eb91b206f578ccace1f080d4c2e4d1eb9d46
aarch64 postgresql-pltcl-16.15-1.el10_2.aarch64.rpm 36964d1d7600f7086b98a7ddf48074fcff960dadc4cd08d8d4b72c46bb982329
aarch64 postgresql-private-devel-16.15-1.el10_2.aarch64.rpm 3992b9543cf61bd8193edbf29ce87f6737a72332ffbf492c0faac37dd4a0ce9f
aarch64 postgresql-upgrade-16.15-1.el10_2.aarch64.rpm 508633c21872d4fce187f07fa914a11081dc1616806ec219eaf20c2456efa686
aarch64 postgresql-static-16.15-1.el10_2.aarch64.rpm 567a542098fcb160af6e106092fca3f7fa5c151a548c152d5994d0dbf52d3920
aarch64 postgresql-test-16.15-1.el10_2.aarch64.rpm 5a4849edb92c3f83d44e6c17b628ab44201205a88ff7154edcdf4c34a6034b1b
aarch64 postgresql-server-devel-16.15-1.el10_2.aarch64.rpm 849cb5a277a1b57f332ff72de1f3911dfb640cf3fdffee1a43bf5344485301ae
aarch64 postgresql-private-libs-16.15-1.el10_2.aarch64.rpm 8f85d6617672ed928d9ca33b03a6ade831940084c15dc124896329bad9091f48
aarch64 postgresql-upgrade-devel-16.15-1.el10_2.aarch64.rpm 932b5b74d3d3cda7a32bcc6b997b5c80150b6480053f67afd11e20ce90ceade4
aarch64 postgresql-contrib-16.15-1.el10_2.aarch64.rpm a505c2d2644b0be48efd2d1cf688dea6dc54b56f7b9bd938323b9419e0422951
aarch64 postgresql-docs-16.15-1.el10_2.aarch64.rpm c0f7d1ac0a14f01b6db10752ad89950c8e82e24992cd1e1596bba3b9c1c20db7
aarch64 postgresql-16.15-1.el10_2.aarch64.rpm ccd5ea935adc75796b888c834e557f35e8b464c6fcaa5ee9834de457cc1e8744
aarch64 postgresql-plpython3-16.15-1.el10_2.aarch64.rpm e0a8b095b518d7077795d3241be0e03b820f64706feef07dd3697309aac528cc
aarch64 postgresql-server-16.15-1.el10_2.aarch64.rpm e25d89f0e25bb0c32a4c2ee661e3a41406373804efe5248fe16efe7fb054efa4
noarch postgresql-test-rpm-macros-16.15-1.el10_2.noarch.rpm 49bbad5117088919b1af51fbcff00683a55c6c9606a6c7c2c8c0e25341560b44
ppc64le postgresql-16.15-1.el10_2.ppc64le.rpm 0d0149cef55ffe6b46942857cd9a167364d6ccc787bde79efd02e178fc6e89b6
ppc64le postgresql-private-devel-16.15-1.el10_2.ppc64le.rpm 138184536e251b21456bb50b6d7a72d65838432e473009218c8936bcdb8828f8
ppc64le postgresql-upgrade-devel-16.15-1.el10_2.ppc64le.rpm 15d18bef339da71f9053dc12eadf9769b8ebe62c1a4c77da55d78be43e871952
ppc64le postgresql-test-16.15-1.el10_2.ppc64le.rpm 318c9fbda3b35e6da814c97d1ffe418ed2f5d85f0c795c8ea5257dfe397d2cf1
ppc64le postgresql-static-16.15-1.el10_2.ppc64le.rpm 323bfbda8f7afc960fc51fad1ddd8e107f17b3b589190e0e257e41fbcd1346ed
ppc64le postgresql-plpython3-16.15-1.el10_2.ppc64le.rpm 4737354c44192aebb11dd45af6bfd6d80fe9bdebeb4e212643ecc8e7187f5c8b
ppc64le postgresql-docs-16.15-1.el10_2.ppc64le.rpm 48d7f24ca57430e75bae5d048aa1447b42947a095e1fc358103d1208dcb05691
ppc64le postgresql-contrib-16.15-1.el10_2.ppc64le.rpm 530bc12aed5a8bf1dfa783d6d17c5050e5afe8e9df2640e97f9e015013e97431
ppc64le postgresql-pltcl-16.15-1.el10_2.ppc64le.rpm 72226d943a68ff2ce9602aef73df84232d813ad4f4bf673cbb3406c8661d2f72
ppc64le postgresql-private-libs-16.15-1.el10_2.ppc64le.rpm 85b2069e184d4ffbac5f2f39078dc5c5138a8b948d0339e172542af4032c4575
ppc64le postgresql-server-16.15-1.el10_2.ppc64le.rpm 976fdc4c5f31f37921f7b77516832717edecf7c46d01db58d4e4c07b8db722a8
ppc64le postgresql-plperl-16.15-1.el10_2.ppc64le.rpm c8f269fb8f854fd3b035c8c84f9844ffc1ad2ea46b58d282c49b060c38708c2c
ppc64le postgresql-server-devel-16.15-1.el10_2.ppc64le.rpm d2597f1b184fa0054349210f0f0c612a18cd59fb53d12a15bfbeb659eb7e2dae
ppc64le postgresql-upgrade-16.15-1.el10_2.ppc64le.rpm f574fe4bfc04ba2bd9f4091ce650a890323d7c05131753375228af8cc74ad98b
s390x postgresql-docs-16.15-1.el10_2.s390x.rpm 0ddf8f79be25995220a8503edcf81f31e1f324c39fee88a3eb2354cba7b3d0d0
s390x postgresql-contrib-16.15-1.el10_2.s390x.rpm 16c14e896147718ff4033c914587f4471e46c493455eaecb610dd4231f3d57af
s390x postgresql-plpython3-16.15-1.el10_2.s390x.rpm 1e06bf6cfd8375bf5212ce49912c90c87dad137fb3c46334ff858de90cf4ac40
s390x postgresql-upgrade-16.15-1.el10_2.s390x.rpm 1fe4819eba1fa746639dc664e4e54eee498184a2ec8aaaaa68397a2fe18fbbed
s390x postgresql-16.15-1.el10_2.s390x.rpm 2731ce240d429a299da6b56e98980cc705fa95c3f259b6b74d4d1755a3801b8e
s390x postgresql-private-devel-16.15-1.el10_2.s390x.rpm 31c67476137e46bd5a2c0ce08132c23414d8b8cae8033bc6938bdee5edfddf75
s390x postgresql-server-devel-16.15-1.el10_2.s390x.rpm 5bf950b6d91f148ac301a8efd8f34b5be3e2a3ce5fcfa874cf7301586e2cbc37
s390x postgresql-static-16.15-1.el10_2.s390x.rpm 5ce2e057c50a77c796f20f25f7cd513701d200691310b3507ef34073e77038b7
s390x postgresql-private-libs-16.15-1.el10_2.s390x.rpm 9b98f597bf0195ac2b7e057f1e1e893ec4a8adf222424f45d6dc1d1560f92796
s390x postgresql-upgrade-devel-16.15-1.el10_2.s390x.rpm ba6cf78bee5b547dc9a8b49526255fd98484ef8c9ae7119d60f641125376b652
s390x postgresql-plperl-16.15-1.el10_2.s390x.rpm c0e47978cfa2f775c50e4cba72f841425d0b2d2f5f6459750ddd2d1e31e05872
s390x postgresql-server-16.15-1.el10_2.s390x.rpm dbb8dd80e626e69cb713a77d07a652e0c51a6cc02445821b40e1efa955ff4190
s390x postgresql-pltcl-16.15-1.el10_2.s390x.rpm f15d64362f8ac4cdf7e7d092ffc9c221bd9a40973768d3158d91804bf97c28ed
s390x postgresql-test-16.15-1.el10_2.s390x.rpm fbe260084d7d554d8d89b2b32483d4393e298a939f9ccd09b9ca413d210d5a7d
x86_64 postgresql-upgrade-devel-16.15-1.el10_2.x86_64.rpm 0ea816ec22c96377848108e9f75d2ea5331bc027470624232bf4419d03127267
x86_64 postgresql-static-16.15-1.el10_2.x86_64.rpm 39413d66a3452b4303d5426c57d981a339bea615dde18519220dc6bcaa5a45cb
x86_64 postgresql-server-16.15-1.el10_2.x86_64.rpm 3ffea9848a549471b6dbf6180f4c5959ee6d89cf3de08501e89fb3ab27ea78f2
x86_64 postgresql-server-devel-16.15-1.el10_2.x86_64.rpm 5fe632a7c9db6c5a1d5868562df360c1f69eb09c94685315351b210d2c36a4ad
x86_64 postgresql-upgrade-16.15-1.el10_2.x86_64.rpm 77a57cc244d54c62e178e3b2ca23d31fef23725f02f4d362a033e946b9f68883
x86_64 postgresql-16.15-1.el10_2.x86_64.rpm 78839f8f0f59149848cf0f9f8948176288f6467dc6b1167d69a06907cdb59e0e
x86_64 postgresql-plperl-16.15-1.el10_2.x86_64.rpm 7fdfe2825e5d4c9f825ad06c576a8a4346022844cf8e4d223a7ff4dbb8dade2f
x86_64 postgresql-contrib-16.15-1.el10_2.x86_64.rpm 936905cf51e7323339f40dbc7c8d655e0923ecb4358d98fde573813f4504acab
x86_64 postgresql-test-16.15-1.el10_2.x86_64.rpm 9eaa9d84b15d2bf0403b722c8a31b0ac544d01450f4f7b2df1e1698304b416c5
x86_64 postgresql-plpython3-16.15-1.el10_2.x86_64.rpm abfb7110a627804e8969441f1d379c2fd75347a62622e000ad42842a8125cbce
x86_64 postgresql-private-libs-16.15-1.el10_2.x86_64.rpm ca7e817848bd85c00081963c75c0160bc736f80d500bbc2b805eabec4f163c05
x86_64 postgresql-pltcl-16.15-1.el10_2.x86_64.rpm cb246d2c110051cd2adab5e5c71e7537096eb88eca4c71398bae03ff0b73450d
x86_64 postgresql-private-devel-16.15-1.el10_2.x86_64.rpm da09251947e6fbfc4d3d23c530579857be5c626b5ce48a30e710124dbc78dcf8
x86_64 postgresql-docs-16.15-1.el10_2.x86_64.rpm dfabea15e2d15f79be35cbdc52dfcc770dfc5213a777fdaf52a7372e46b50b20
x86_64_v2 postgresql-pltcl-16.15-1.el10_2.x86_64_v2.rpm 1326dbc470d5db068a3f3971fa369b0972fd3d3db39a73af0e067b39851a2844
x86_64_v2 postgresql-private-devel-16.15-1.el10_2.x86_64_v2.rpm 1e21e1e2d97f85778794ebac2dcb7b92fc5023b4a582c9987d250ffe48b0cd5a
x86_64_v2 postgresql-plperl-16.15-1.el10_2.x86_64_v2.rpm 3c2250200e39ede7bf24f816d560b5b9655a987f1cb0afa6112ff788bcdff68f
x86_64_v2 postgresql-contrib-16.15-1.el10_2.x86_64_v2.rpm 3c361ed879d09f9ce1ec75a8892dfe098094a9b91acd2c2bfd29d35cbb38b4f3
x86_64_v2 postgresql-private-libs-16.15-1.el10_2.x86_64_v2.rpm 4410cdc7b8c78075b622f71e7645c605dfa919993dc3cb3d4c5149c9af9b142d
x86_64_v2 postgresql-server-16.15-1.el10_2.x86_64_v2.rpm 6a41a10f457bf92a573ecc5aaaa9e204a728eadcf465c1bb2d4e066b8cc5ae71
x86_64_v2 postgresql-test-16.15-1.el10_2.x86_64_v2.rpm 807f674bff342bfff26675fd2c26add9902d17f82a3bc47a017d494f3844e8e4
x86_64_v2 postgresql-plpython3-16.15-1.el10_2.x86_64_v2.rpm 91f79be7f9e1cf396e520f6da55633a730d446edb7e3bd1079fc6ecf02ffe85e
x86_64_v2 postgresql-server-devel-16.15-1.el10_2.x86_64_v2.rpm a55c9718d237cf1349f0d206b305fbfe8e16caab680d4503ed87c277558567cd
x86_64_v2 postgresql-16.15-1.el10_2.x86_64_v2.rpm a861b0930d6ba870279c53e95ece6c8788e4e8372dc9fa17bf07ea504eedf812
x86_64_v2 postgresql-upgrade-devel-16.15-1.el10_2.x86_64_v2.rpm ac252adbcd0a673b833140236550e81b856b04a7b2df703c156c36a6ba56c31b
x86_64_v2 postgresql-docs-16.15-1.el10_2.x86_64_v2.rpm bb3fd7da78d9dff8f6d3b2aa87675ae0a8695e1cebb8d2d2991280d41e923c66
x86_64_v2 postgresql-upgrade-16.15-1.el10_2.x86_64_v2.rpm fa01aeded72e0bcec02ff789c3fd01e4169c7f1d81c3275a98c5551fea820b4f
x86_64_v2 postgresql-static-16.15-1.el10_2.x86_64_v2.rpm fc9b28c8b908ba8dd07f68246a30471595e091178a33f1304fad4c9744298c43
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.