[ALSA-2026:28143] Important: postgresql:16 security update
Type:
security
Severity:
important
Release date:
2026-06-24
Description:
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 postgresql-server-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm 1aad4d87df36f70168e1bf7f4dc4bbe444c9db853f1da7570d4cdc0afa111e61
aarch64 postgresql-pltcl-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm 1fedb22972baa26dc04651db8d0b1022979b77a23bfab55ec465ae4b094dbc77
aarch64 postgresql-private-libs-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm 48d6af8cbef352b6929382419c323be304b22baa92b37eedabb02a13bd9441e8
aarch64 postgresql-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm 63b25627c2272b3f66d0517969b4ce8ac085eb5a94ae206063966a8fc5e17fa8
aarch64 postgresql-static-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm 695d35b1e60b8158fac748be62edb98d4afd506bbd3cd09b9423d6c6d84e9b41
aarch64 postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.aarch64.rpm 6f4853faa487b4bdf999e4233e7c50ddad0d2a5925223d555635b89fc917dff8
aarch64 postgresql-docs-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm 8e7df033f143af85715e4c6fd6711a44d529974dccbdf69c2ba99ce06d47a4d0
aarch64 postgresql-plpython3-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm a061b423513ca40a015c2c221407680b57769daa70c77c5c92075f169c446caf
aarch64 postgresql-test-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm a79dfda9834b3996f8362160e8ff632de036848dd4d19c8e34250420ac900c3a
aarch64 postgresql-server-devel-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm a969d26de140a93c60cd4827f9e7fd6e30daeb70b36c9d4886aa20e91032c70a
aarch64 pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.aarch64.rpm b424749179d11a40d010ebd1944ffe90c3feb14d8cbcb1e46053ee9c3995c640
aarch64 postgresql-plperl-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm bba653b44bf739e2bf2fbfeed3b328fc028ef1056fab000a43750821f01f11ea
aarch64 postgresql-upgrade-devel-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm c4a0bccb3e5aed3856afe0cb5cb410b743a8f4d5530d1617da95160ccb6a7c2e
aarch64 pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.aarch64.rpm cda70498ebc7717adc2a3c5a2e380d495e13de64a75c6212b5e7d13875e02354
aarch64 postgresql-upgrade-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm d083ca0438cca55660900a118546cdad91b45436b70f9ae7994673b059cd2860
aarch64 postgresql-private-devel-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm dda728dd12bbcf7f67a4d7e9b82f81ff25ceaf96898423acace548a082b74bbc
aarch64 postgresql-contrib-16.14-1.module_el8.10.0+4199+bf03c564.aarch64.rpm e38cb515b34e6a48e7f8f388ea86afb4f43d42555d6fbb736888049cf1942092
noarch postgresql-test-rpm-macros-16.14-1.module_el8.10.0+4199+bf03c564.noarch.rpm 16163fc3be3f42d11f2e2387fdc46504bd16539e5c644b1255491ea5ce213813
ppc64le postgresql-plperl-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 012c0c7abf521d77575f158ddd512113d68a302db760fe1cb2711703b68fe11f
ppc64le postgresql-private-libs-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 0f6ffed73c933f455a88c29a66895543ba4e21e5b8586db6048f9cf59666da0b
ppc64le postgresql-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 1108c0cd0c8ccf6b34e15a42bc02ab4af5a7d5b3c401eea83c678e05bec25eb0
ppc64le postgresql-pltcl-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 1c4d10cd8e878170f5a416bfb1b574e262d639e9914d99352fd145e4cd03808e
ppc64le postgresql-private-devel-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 1e3b9cba67ba0d30ba877e2be0d6b81694035af79f35414dd8ecdbe5e0642749
ppc64le postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.ppc64le.rpm 3e6878f0b782f73fca85a647168df8eee7f52a6d92b72e88661fbf1ca6a3df8b
ppc64le postgresql-upgrade-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 3f2fee7fb200539a582463e63516f7a9b18bd22a77aa326056f35a33e15a76ce
ppc64le postgresql-test-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 4d768dbcac289172c4eb366baa12cde087b800d92d4e538e1f68ca99e20c26b5
ppc64le postgresql-plpython3-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 4f4839013a530fa08b154790b4e73c2963c947b1e4a70df2145ef418847eea73
ppc64le postgresql-docs-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 517f37fdcce4903a8ef367572ba1a28afcbda7944898709d83140b0e85fa2a7e
ppc64le postgresql-server-devel-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 522283c003b7821dbb48cc1120ec8d9136799c3aab7c0b483caea2f4aee497da
ppc64le pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.ppc64le.rpm 6b34e8835b78a21510cc0895efe3fd4a89c04c69c7dc93cefa5b0a4e28c10bdf
ppc64le postgresql-server-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm 6e129b2e2e964803aff9c1ff310e38fe42fbc26315d0dbc9131b5b542c61a488
ppc64le postgresql-upgrade-devel-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm a67c38c8230e28e32ed4bf0dbeace3ab3f896293909051ed2cec0e30149ddf51
ppc64le postgresql-contrib-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm ac4d50c38a67ba026f97fa6e73da4cc2e6a65aaf5191ae187ab91f70aabcd3ab
ppc64le pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.ppc64le.rpm ed97f9c208b111c7d8dd7fa730574b5fe02f80a886cea7fab804be15f8eab2e9
ppc64le postgresql-static-16.14-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm f6d8df67e68d7deaf8549d84ee1ce11c8ef24138329453b8c0a756c7cb44ee29
s390x postgresql-plpython3-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm 132abe6a8a8b062ed0c3905aa3d117568420bb48d9933a20f367a3281da01274
s390x pg_repack-1.5.1-1.module_el8.10.0+4199+bf03c564.s390x.rpm 1e4687b63ebe2c432f70a91c9a780179906d6c1257b19fce8e40e2c0ac67ff3a
s390x postgresql-private-libs-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm 2cd011ca4f55943147a497eace6cbeed47d6d1941fc3fefcfaf0748a1a7bf21d
s390x postgresql-server-devel-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm 2ea44f2d81fa36a7938de89e94d7b2a4be5bf226d5f3e039cd5e09fbdc8fbec3
s390x postgresql-test-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm 386ec5960dfa7607435035b5cfb9aa579cf5e6e2a2b3e325a460c07242285682
s390x postgresql-private-devel-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm 6153f62832064cd2f4e8eb45602ee5db851da992ca438e05529b4cacf676b74e
s390x postgresql-docs-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm 71c32af3ce2751b656870913d877c2a6d7585a4d14b3473e906dc5310e1708ef
s390x postgresql-server-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm 88e03340fd0b2c53d9e9342d38e87f08ee5cf43e77253799461dc7632e8a95fa
s390x postgresql-plperl-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm 941ac5667bed9c67223a037e2ca69d713b458c5f250bef5f89db75fb23dcae64
s390x postgresql-pltcl-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm a5ca11cb6f9e556d309fc37cc250fb03887f2e305cefcf6cc5ca96540d7f632c
s390x postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.s390x.rpm b4ab4ce80d621ce9e80cef82edec35ef1ab32c9448d690e668db0bb17bd1a90a
s390x postgresql-upgrade-devel-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm b4b2ef9301a33d666cb496fcb048e94a62093ab206df4401c56f22464c70d724
s390x postgresql-upgrade-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm b96063358400a3bb45516111e7484320a4cd87e035c2df5065a2f92b0ec6453c
s390x postgresql-contrib-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm c010c34caff439ba543de8c8f612ecddb597f5040d76af52c2932ab7a1d07e14
s390x postgresql-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm cab32516c1be8499a6e01b3b68d6ed7638ddd0a9082b071df3edee7df77709f6
s390x postgresql-static-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm d4e7bbc9d5333aea2d2da724c2abca34819ce24eefbaf043fe86d407bede47ef
s390x pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.s390x.rpm e1395e420ef0b455c809e9fbbc50b5a27410be72d91603805a4907b86ca95cce
x86_64 postgresql-upgrade-devel-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 0b2d77149fbabaaf225ce5fc6165b8d680f0abf3257fae8def701e8ccc09600f
x86_64 postgresql-private-libs-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 25c5ebb183957a4f83ddc0f33fa3f9294174f4146d888131f70067bf1cced681
x86_64 postgresql-pltcl-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 46123f47e5490ce3e619af19d0a852b68d563a2dea6219f8934fdbdc8f987364
x86_64 postgresql-docs-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 539ac7b320d77bf4655937189f1b9c193552bb7ea5147120f1462c292ce19259
x86_64 postgresql-test-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 54acf92705dedc943f564b5dca5c0e7af1f2effe120f335da836b3f6dc21c74c
x86_64 postgresql-server-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 558d2e5cd452d46b6f73da04a377c6bf85174745a8583100a2e49c32905c77c6
x86_64 postgresql-private-devel-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 562706ce4108a957c4c45f3090e0c9acaf9544bd62d473f477c504715731ddfa
x86_64 postgresql-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 63151223cef2677fd518c0cc27c2a316a7ac82dc2705bf9d98a743a0941764e9
x86_64 postgresql-server-devel-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 662f864c6057bf496ea23d9c7a5b10af49bb81e36466fd75a09c23046a6ffba1
x86_64 postgresql-plpython3-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 72036ec4776d0947afd6d713f24610493258eb75a8408883a9838de752962b2d
x86_64 postgresql-upgrade-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 7217e06f1b51d15ea86168d83faf6a52160f3c727d002b3e64685cc437113c5f
x86_64 postgresql-plperl-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm 8bd39755912204db70a6a10f3d30a03b18678f702786a1a947a3be236e3cb25e
x86_64 postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.x86_64.rpm afea2164acae98dd71ab3e7d4e8ff54811589f47dcd1271214cffc5f8a5597c9
x86_64 pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.x86_64.rpm b29297e920364cc944d575fc07a1190ca867983dc63f2146524eff79e5dbeed6
x86_64 postgresql-contrib-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm c1c050b155e05dc8c2891918d288bd8d3265791e19dc77e36b0f5b4aeb42e51b
x86_64 postgresql-static-16.14-1.module_el8.10.0+4199+bf03c564.x86_64.rpm e04c1f26621b48dc5458a96eb884ba47fbd1fdaea4e0061a3df83e622ba2e03c
x86_64 pg_repack-1.5.1-1.module_el8.10.0+4125+ceaf7d1b.x86_64.rpm e2f1d773cb956692dee6ed6ece810ca9091a4c9e855fc9946c4767d46529de4b
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.