[ALSA-2026:69876] Important: postgresql:16 security update
Type:
security
Severity:
important
Release date:
2026-09-22
Description:
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 postgresql-upgrade-devel-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 15e470e858c8f298aa59011c2dfc345e9f32b147c74c57053b004fabe5226911
aarch64 postgresql-server-devel-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 261203a319642b7767ec34034cce77d231942440b5febd4b0db7e1ce81721ffb
aarch64 postgresql-private-libs-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 4125ba7c3fc3b350627a7ad1c5d782aedeb1d0eb5cb903d66224243b6b74ff27
aarch64 postgresql-test-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 4877f169e35e02ce76ced7d420a416d863424e28f839169375bf129864ebdd3c
aarch64 postgresql-upgrade-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 577123eeff67e00f72c1e7b3e860c1cc5d05f3b4f4e38f95fd3c7e9550b0fef7
aarch64 postgresql-contrib-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 59b158f31aa69901707c60df909dcf6a52a2d08d3004d371a5c98b5199f1a06c
aarch64 postgresql-docs-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 65518974e5ead9bfa9ead40c682c0387890a14e7091d20a8f6810521210d3b79
aarch64 pg_repack-1.5.1-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 6d373dacd0302cdeafd4c7dd6bbf7415a1b30aeb2a754f43b9f18a5ec85ab3fd
aarch64 postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.aarch64.rpm 6f4853faa487b4bdf999e4233e7c50ddad0d2a5925223d555635b89fc917dff8
aarch64 postgresql-static-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 71609b329ef918b1321d36e6d273ca09bae2fb8e127f5dab11d43264cb8a189f
aarch64 postgresql-plpython3-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 75b1d21d33bca13e7875a5ab9aa157253b391fdf8857924d80e06a1aac2a5b86
aarch64 postgresql-pltcl-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm 9b9df7863062d17fe15443cff3f8461dc2bdf68c451ece452a371684d185a7ac
aarch64 postgresql-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm bfd0d91338ad393b2476b42970dedc7b4cdf7f1f564902ca937b0d24bc275fc8
aarch64 pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.aarch64.rpm cda70498ebc7717adc2a3c5a2e380d495e13de64a75c6212b5e7d13875e02354
aarch64 postgresql-server-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm e1cf1f3d3801165097522155cedba58e61921ab0bddbf071724cd47130588ef2
aarch64 postgresql-private-devel-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm e2a310dba4366a934dc92562280d0fd65ed53f466e34cd464f7fb0de975e0ed6
aarch64 postgresql-plperl-16.15-1.module_el8.10.0+4286+3c445f53.aarch64.rpm eba8b67051c59cc3184cabbcc00c24bcd270d5a0d39073525d5ac281c1327704
noarch postgresql-test-rpm-macros-16.15-1.module_el8.10.0+4286+3c445f53.noarch.rpm 24f74c2b2f93b575f6214687f541faddf24290c86133de5d8d090693be00d1f0
ppc64le postgresql-upgrade-devel-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm 05139f2295de656d9ca81bcb336712eb84ecef6e4c1fc6f2cc6083080c1e5da5
ppc64le postgresql-server-devel-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm 0f61ab901ff25dcfa3590438dcf811a7106ed37ce6ff62563eb54d1aaac42819
ppc64le postgresql-upgrade-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm 107abe948b77e999ffbad59093e4eb5984f428795fe631336173407d0855675b
ppc64le postgresql-static-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm 1bbe0cf4e885a83ce8268b482b7b465e03a7e3310d3487c686d7c18fa279d626
ppc64le postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.ppc64le.rpm 3e6878f0b782f73fca85a647168df8eee7f52a6d92b72e88661fbf1ca6a3df8b
ppc64le postgresql-plpython3-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm 60593afdbd5e73cb317fc9b7b6003972a4db816b8716d767329d1ccdf1c78b0e
ppc64le postgresql-plperl-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm 6aaf35d9afb8efecd829101ecfa76fe4573c067b1e3d763e24f3e42d05b3811a
ppc64le postgresql-docs-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm 7c4c5e077a67f5f402723923d53511d46ccf4b35fc32db924c9b3815e9fecbfa
ppc64le postgresql-server-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm 8f44c67b5c5e6fe355a792e91ea6932fd20848c55917c1595ddfeb8bc8dec698
ppc64le postgresql-test-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm a95484a34bac236081369b03dd0f579a8d3b40d756148419df848184640134ff
ppc64le postgresql-contrib-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm be8cc4b06aa281ec76e8a9771776efa31b5f455f54329723a4c0d13b755bce60
ppc64le postgresql-private-devel-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm c4b81cc9fc2e2ef9c3776c63f0e6cdfc8dcf6df261cd979c76f5672f39a20c38
ppc64le pg_repack-1.5.1-1.module_el8.10.0+4199+bf03c564.ppc64le.rpm d5c781809cf143cd01c8ae1463b93f14655dc36d790770ac3fc0fec2b4d3c478
ppc64le postgresql-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm d883e0ccabdcdcc114559bf735a8f77912143081e9a6c2cad678d24c026ad1f2
ppc64le postgresql-private-libs-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm eca3c5244f3152359568149ecd7da72239320a8f2247ba4a33db972e0086586e
ppc64le pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.ppc64le.rpm ed97f9c208b111c7d8dd7fa730574b5fe02f80a886cea7fab804be15f8eab2e9
ppc64le postgresql-pltcl-16.15-1.module_el8.10.0+4286+3c445f53.ppc64le.rpm f4294797220ae9b3a4d5488c4262f8e89c403b959f5fc570e23354caac579407
s390x postgresql-contrib-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 034e839d75beb4b51b1034517f151dcc2d74853a5aaf12ac156dfacb8e34bba4
s390x postgresql-docs-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 0506b04d2bb864d7b638b1cce6f5eb304ebe738c978d1c0298dc87e2110c10de
s390x postgresql-server-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 0e7050cf0f4e1e9e294492fa0e860aedfd83b4f55795eafc95d90c21ad0d3fde
s390x postgresql-upgrade-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 113c13bcd5216fc2956f77549705450d29be22eeb4519947a3f6ae4e4201d5a5
s390x postgresql-plpython3-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 12a0db6ead2806730ed7391bd7f0b90797f47a1711992333862f2596cf676506
s390x postgresql-private-devel-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 1696e170543d1df71eec272c0df8b11b1fa8ecea071940ced2826b69db90dec6
s390x pg_repack-1.5.1-1.module_el8.10.0+4199+bf03c564.s390x.rpm 1e4687b63ebe2c432f70a91c9a780179906d6c1257b19fce8e40e2c0ac67ff3a
s390x postgresql-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 4b22453eb5e7d96b0c8343d66b2764ced8dd458910250ae6e7d5024d825bf006
s390x postgresql-test-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 4c71fdca22fe338579943f57d91865b202809e14886a2759ec261152259a159f
s390x postgresql-plperl-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 6bda85c345a805c26cb2171e9e391286b3d6a72ce6f87f74abfc40e0b91cc51c
s390x postgresql-server-devel-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 7e9a334aab93a4c670e396028cec5afcadd2384c789db5f48d9d180c86ac6176
s390x postgresql-static-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm 9ce4bed6b1a4db7c9df428edb4c8deb9a0a7cc176fd0d6d6e4a12a39d15faea7
s390x postgresql-pltcl-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm ad4490e3bbeec5d81bc8d05a8885e67031b33ba97e63caae72f3d5a10ea17d8e
s390x postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.s390x.rpm b4ab4ce80d621ce9e80cef82edec35ef1ab32c9448d690e668db0bb17bd1a90a
s390x postgresql-private-libs-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm d99ed1178c537aa09c15a0a0a0dc644d4f49fb32a1f90eab3d862c1e412134b7
s390x pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.s390x.rpm e1395e420ef0b455c809e9fbbc50b5a27410be72d91603805a4907b86ca95cce
s390x postgresql-upgrade-devel-16.15-1.module_el8.10.0+4286+3c445f53.s390x.rpm f993cec0bbffdc11c2c740e02242e4e2c56eb8a8a35a72ca64db26814a8d595f
x86_64 postgresql-static-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm 1714a8237285027b6707c7f6250992a8d2fafc5c630cbbadf8cc84da3c21cd46
x86_64 postgresql-private-libs-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm 2f93ef651a6715fe49f2cfa8f50df7cfb73eeb5109229278dcbb921e95d2d885
x86_64 postgresql-plperl-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm 36a6190ed335d29b3a7e4d3fbccf8dd8dd7f2a3049f179050c889865f72139a1
x86_64 postgresql-upgrade-devel-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm 382d99d28eac4af381bfaa5342263d921128e8fbda9b88762d12832b7cfe7c6a
x86_64 postgresql-contrib-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm 5116a748d25d3a1302f01bff5ecd0ab0b77758a06a534864e0c327702c0ce528
x86_64 postgresql-server-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm 774efa7527488942a12a5a2aa31593edb98e0b4d29ea27a605857ad32b0a0fc4
x86_64 postgresql-test-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm 95c350f8444e11aea38a2ebd872d8aa5a82758c425dabd1faf966fd0df2d4aad
x86_64 postgresql-upgrade-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm 9cf76286c809bce5f26d9a5c5d04fae6cb5975bad4d584bf1817c2697838e392
x86_64 postgresql-server-devel-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm 9e0396288ef04acc0466f4b2ce0f2e2d7a4ad10562e290778c82df9e19b9dbaf
x86_64 postgresql-private-devel-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm a6c0774d50ae621d0d3f2f31cb46fc40c7219b2a41f203ae39628a8cee1b1359
x86_64 postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.x86_64.rpm afea2164acae98dd71ab3e7d4e8ff54811589f47dcd1271214cffc5f8a5597c9
x86_64 pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.x86_64.rpm b29297e920364cc944d575fc07a1190ca867983dc63f2146524eff79e5dbeed6
x86_64 postgresql-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm b8db9226933fc5a1322215f5811999a85a7f5f0bd90c2cbed48138a4bf7bbbeb
x86_64 postgresql-docs-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm c16b84d5c424f58f49cd6f921da44fb565efa3c1c8a8ebc1cb75a631be86cda8
x86_64 postgresql-plpython3-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm c7a3722053049d6d9e63449440ae999c9a96cf3f9353935e9415dac7ff1b0822
x86_64 postgresql-pltcl-16.15-1.module_el8.10.0+4286+3c445f53.x86_64.rpm d171deda68d168588f6d063ef2af1c92b51c76732df9bfa96e40f5451b2e0448
x86_64 pg_repack-1.5.1-1.module_el8.10.0+4125+ceaf7d1b.x86_64.rpm e2f1d773cb956692dee6ed6ece810ca9091a4c9e855fc9946c4767d46529de4b
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.