[ALSA-2026:69923] Important: postgresql:15 security update
Type:
security
Severity:
important
Release date:
2026-09-29
Description:
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 postgresql-server-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm 049202c636a7c8cb6aad4bc876f3e6be6d2d14c0df47d1550a2ceda6d123d67a
aarch64 pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.aarch64.rpm 0d00727f0324d8f17e570ecd7c60540054ee7db14e75c7096d70e50c29182e3a
aarch64 postgresql-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm 27744c3d3197af2d85837910095557b7da50ffc598fba7603c79711354f3dbe3
aarch64 postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.aarch64.rpm 2883c59bbad57293c2c9c8afeed6c3284983667c90aca5c224fe1b7e159f4539
aarch64 pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.aarch64.rpm 2fde2ee0f51f343ae3a6c7454b7c4c83b49112072dcf17c2adb44824f0fb3a66
aarch64 postgresql-contrib-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm 3a790724a61638aae7b01ace25bf0b28447373ae66907190f3bf7a98b301f88c
aarch64 postgresql-test-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm 70429f637749289924c3b7244029d98633d9dce245fb20ad90c24048e977c466
aarch64 postgresql-server-devel-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm 8c686e48c66e16fde118338d4ee7c28e47db554238a81ac79c7bf3e148f78b03
aarch64 postgresql-pltcl-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm 939b8f4f047eff440dacd371bee472395068c6f57eb6c6e55dc490886321f721
aarch64 postgresql-plperl-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm 93d6cb192fd769c6f6a6e9cb0a7ffd7ca6aae9299717d325f089d99215a7231b
aarch64 postgresql-upgrade-devel-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm 9a422e5703f791cfb8aa69424903c1b2a0fe31da99ad3b3907e53eded54fdd27
aarch64 postgresql-private-libs-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm b5b16921006894e00542edd74a2c6d76fbc92f7af7cc23b771c58044198636d3
aarch64 postgresql-private-devel-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm beb4c152d211c4c84368ecc791724ee128b34a3d21849d3c8b54dc9b9d3026a0
aarch64 postgresql-static-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm ceda8f25763ac55a750a150f9d7ea5a665edcacb4511d54f0017ec97ce285c65
aarch64 postgresql-plpython3-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm e0229dc78a391b17f038b0bb57312502d9fcff8a18130349870ead4c4db1ca8e
aarch64 postgresql-upgrade-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm e7b8f511098c2707647c530c495994d2ed829c00260b7cfef2f59954c44a2e68
aarch64 postgresql-docs-15.19-1.module_el8.10.0+4287+eeacefcc.aarch64.rpm efca047e02329ff976e0f6bf0dc265eb18d83bb9981953f3842143978af00cf0
noarch postgresql-test-rpm-macros-15.19-1.module_el8.10.0+4287+eeacefcc.noarch.rpm 6225663d8dd076d621effc02e86030f3834a8548be5bad008889e9b445b1313c
ppc64le pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.ppc64le.rpm 0d310f491164ed0964f87af87b0986a6332dba9d9e35cd0b4afdc84be5d2cbd0
ppc64le postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.ppc64le.rpm 405a9312f1e964d4dcc0fce38d137c9eafdff384c6fd48e46eea97c7dee74c40
ppc64le postgresql-contrib-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm 43c73335c9c4c4004e77500199bc4598c6489ef463b787c6eab0b5b301c6b825
ppc64le postgresql-server-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm 4919216a7f7f9611b28298d9e8f76efe38e48b85af2b6e24a4b1fa2668078c1e
ppc64le postgresql-private-devel-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm 4df73d5cda5dc2d72b583406fba17146714f3eaef09e5d219dee4346241c1f0c
ppc64le postgresql-private-libs-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm 50701200e8b750d2baf61182861b68c190b978adf07631db12205b80543ed90e
ppc64le postgresql-static-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm 6fba1d4fd38c6a281d4acc7aa815426ab46fe2660ddbdd94fb0976c951808a28
ppc64le postgresql-plpython3-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm 7421b279d97fdfbfbad1930956abd48d7ecc2db490451b791a28a770b9e1c4aa
ppc64le pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.ppc64le.rpm 96f58e742bb6823cd6dbb895a7bbb7522964440c80ca4a2bd4da32753e4f1e42
ppc64le postgresql-docs-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm 972617e9b1c6fc650ff08c77a3dcb735b99b09f31fa9e9d27bf6b541d317b203
ppc64le postgresql-upgrade-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm b3d42214600cc07733a246386facc1aa3450a236a93a70dd4c667ade185c73ac
ppc64le postgresql-test-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm c684ab253edc9f28b2a3dab6b246b561dee59cca3a816d0d5d7eab7255725054
ppc64le postgresql-pltcl-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm ce7f08d8c026cefa8796dafbe9f254349761dd11d372ad6d69ea6e411f0ea804
ppc64le postgresql-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm ce9c45d782fc6caaea59817e9d3c128f6b87b0db1b950d8c792b4dffe560b064
ppc64le postgresql-server-devel-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm d67f2a9b17dea4cf0a00f5b361edbc9b26df3a6fa41610dcefff23faec6b8bdf
ppc64le postgresql-upgrade-devel-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm e6d8a0d4127ac7e6b4c173ab4bdbe1683421cfaeb4b345256d3bc7b83c7ad10d
ppc64le postgresql-plperl-15.19-1.module_el8.10.0+4287+eeacefcc.ppc64le.rpm f90327770e7a62d8d8a1971cd44cc1fe0c59931d7711d5335372e4f2be870dfb
s390x postgresql-server-devel-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm 1f13a746ebbdc15620d11f1f435feb52881408ee9d5be1fd537e2ab85ee40dfa
s390x postgresql-plperl-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm 4583d92360d11fb46e77db67bcca03fc5847884718b0333c1ba301f1bd8e4701
s390x pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.s390x.rpm 7fbd57e759f737f8bc3c7bc2715300640b00ae84ed9b74d469be03ee537d20b9
s390x postgresql-upgrade-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm 8c9eed21b31fba033c958774f8b4141a0dc0210f0dc808929612b0ce46628269
s390x postgresql-server-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm 98d785b3a01cf1e1b7b1c1958bdbfa87993011f9a2dae86a9c6493bceea55a2a
s390x postgresql-private-devel-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm ab65cd9d61014e1b497332b9e09fdb8f01e8215d29446698f469dd5c3cbb7f34
s390x postgresql-private-libs-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm af510fdb504b1e006b7a14bf4c25920e751fe21095c36817156ce201150c695d
s390x postgresql-plpython3-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm b8f4f38ebf8b081bcfcc238e193edafa4d7c4ce834adcef814d0e58d4b9e6375
s390x postgresql-contrib-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm bdeb2ea954c3da27e1b77b0a991cd0c06e4e9af6bcccdeb47dce9388c5289c5e
s390x pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.s390x.rpm bebebc0b85b4d88d466cf43a44e5ae321c851b621377e2c96e1564cf00fd07bd
s390x postgresql-docs-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm c3c093d89a9a196f73c02c9f470157d9be466d80d0f9c90c998098e06cdfdde1
s390x postgresql-test-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm c444f0941145ccadff68613d7a412e36e5a90a2853734754a723d3448309abfc
s390x postgresql-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm c663469b306d0ee1f4d02a1e7aa590ef3f5a939179b1e2e77adea952428b4ee6
s390x postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.s390x.rpm d93f26982b8a0299bb5535e5aed623996c696a2eb2f9157554b4dae3f5cce2ef
s390x postgresql-static-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm f2db62a8112abf9b3dcaf048ce2b0df7beb201c302bc3ef98a777a4d0ab70d63
s390x postgresql-upgrade-devel-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm f4bc23b8159d25be4e608f3818a345274db0a9396186684713106fb5a73cec16
s390x postgresql-pltcl-15.19-1.module_el8.10.0+4287+eeacefcc.s390x.rpm f516a57dff191619a00016688b4f0e2c46ee68001b48dbb01a157eede1ca66a7
x86_64 postgresql-upgrade-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm 0d7e6cef130cf5340c9a4299d519dcb6a9ec454fa338fbf98512cc90205d4326
x86_64 postgresql-upgrade-devel-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm 225a0fcb63fbff5011543c612e44f2b98c2e56eca146e3475f98857301efbc68
x86_64 postgresql-docs-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm 38ee7f6a9dd3e98656e8b7722becf4f5f794bf9390c149f8ef4c29a23d2e1c32
x86_64 postgresql-contrib-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm 4250b557dfaf71536a17e5b2893a5147cedfafb67a2257b76ae2aca4803c1191
x86_64 postgresql-test-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm 42a6952e30577aa2865ff35cb20034eb0823e0fbcddfc923261f447bd6ff1fc9
x86_64 pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.x86_64.rpm 4d697ebcb886ad755585c50ed8b035b100f519dd64f7f69671a8bfb86051430c
x86_64 postgresql-static-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm 83609da3acc0bd0caac2a7ed119705f221c803dbf144e69d7232ae5bb90b78b3
x86_64 postgresql-private-devel-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm 886a4a18d7ddd840da0a4d26b4b0c0a887d2890707062eb21c717b764f5665d8
x86_64 postgresql-private-libs-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm 94fb165062030ab04b21d9caa4824cd0dcf3546d2d77bcaf061b2e601c243479
x86_64 postgresql-plpython3-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm a062e42b9beee58fffa5c556b878dc25bdc2fd54d046fbbad6bd297326225b76
x86_64 postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.x86_64.rpm b3aab0fa367edd2a996d12281b9c44277839836853605b7fcf3fe9282015786b
x86_64 postgresql-server-devel-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm c28759d9e152eb44e89758d649fe1ded581564a098e869159516703c887b902b
x86_64 postgresql-server-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm cdb72ae546b7e033ccc560f89c792f07abea9790459f06d45b4d75e57d7af007
x86_64 postgresql-pltcl-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm e37ca682a295ebf59523f56278a9af4502bd40c0323a33624fe12fdc98b50809
x86_64 pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.x86_64.rpm e5cb9fa83d25b815ae911743a37e7a02c5b90750f4d48ec23482f009b84a5291
x86_64 postgresql-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm f9d095e6be631c07212ead8ebb6b8dd351595e4923657fb2f0df8dd1a3408318
x86_64 postgresql-plperl-15.19-1.module_el8.10.0+4287+eeacefcc.x86_64.rpm fa3b918a088e1568fbd43c4653e828b8c0819968be0642a6cb315f82b5ba3b48
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.