[ALSA-2026:26203] Important: postgresql:16 security update
Type:
security
Severity:
important
Release date:
2026-07-02
Description:
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 postgresql-plpython3-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 0221c34ed13149623a527b5eb2a85be90931ccd14e1a91ba931b4834c1a67b3c
aarch64 postgresql-private-devel-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 0a16c1ba0099f932323c45ad311c7b7580d4bed9074849066cc52d60f45a7dfc
aarch64 postgresql-contrib-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 1008ba1a5588fb22392b23cdf396cd43f505c507ee511b5f614e226e387b84d7
aarch64 postgresql-pltcl-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 10b28859fd2216f7ee7ba0d4a57c47ef6ca852bc59bf97cd0746c04189003d36
aarch64 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.aarch64.rpm 16376ea924b9a51d373ce99c4ba8e8a55a4ee83ba1a241b8459c1b635dbd1466
aarch64 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.aarch64.rpm 182885e56ea13dad4275de2dfe2b333c4846ef506fd1510d9d900ed71da43985
aarch64 postgis-3.5.3-5.module_el9.8.0+236+2d3cbd4c.aarch64.rpm 1b3a16a86cad844ee0b4ffd28bef27894b96ddb2cfdd4b836d92c8b1a42d3601
aarch64 postgis-docs-3.5.3-5.module_el9.8.0+236+2d3cbd4c.aarch64.rpm 1e944070ebcb5d8065711577cf495816a58d1ac1b44d2a9037a26db02e88a079
aarch64 postgis-utils-3.5.3-5.module_el9.8.0+236+2d3cbd4c.aarch64.rpm 2af3a9ed2d0c637833b5db79b9da236e4bd084c6d800e1a007b53484ea3735b6
aarch64 postgresql-private-libs-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 2dd455a7611af9d5453353fe2ae1c1c1b62960bbb9d7785d02d9f768ffe4330a
aarch64 postgis-upgrade-3.5.3-5.module_el9.8.0+236+2d3cbd4c.aarch64.rpm 37e35e912ee1a7f8ec99a197408ac7d8c1a9793a0a1b2eeaa9dfc5d44a8b369f
aarch64 postgresql-upgrade-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 3a29686c670944df24c19982a68d9121e101b7661f848fdc70d25874f6eb97d2
aarch64 pgvector-0.6.2-2.module_el9.6.0+167+4e561146.aarch64.rpm 45888850ea778c05814d4ef8868997a6279e33bb324b1b7ba8ddecd7bab5a3f4
aarch64 postgresql-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 4c380b36897f96222cdec3b6058af7de0fc699fe3d6ed06d605294117ba80e33
aarch64 postgresql-upgrade-devel-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 52782cc5f8d22b1a764bd2cba6b7c728665cb10fabbe3eac7abc02a3bd6bdfec
aarch64 postgresql-server-devel-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 5e30d8140fe0dbd107b7de0a1d88d0b336eda1af22090c5cb7158e3ff48cb135
aarch64 postgresql-docs-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 7442a7bc6b68fe4c9360740e2e55243d3aee6a7fad410679dc001ff4b2e8e4f6
aarch64 postgresql-plperl-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm 7f2e20e4c121786b849025c146cf5330ac50390a7dc0cb5e1bb75bf4e6d397d2
aarch64 postgis-client-3.5.3-5.module_el9.8.0+236+2d3cbd4c.aarch64.rpm a3da9752bf54572eabd95621eb845690a82ec7d4ab0914d232ce41c381f1d9b0
aarch64 postgresql-test-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm b06c9cf06728e41d7ac75fd2d2d09c5e3131f7afa5e28daec0c1e1cca66ba1cb
aarch64 postgresql-server-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm c0bbfb198121189d56a22026af0680d2dde658b3a087c6ba8c5503ccf614cd28
aarch64 pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.aarch64.rpm c9afa10728a9bd6f2d2ab36adbb5ca141a224edb3435036e57b7805e2890cb3f
aarch64 postgresql-static-16.14-1.module_el9.8.0+266+1e661e97.aarch64.rpm e61548a14d31e70f77753be0428056b4c07b80b2dbaadc0b7e567129926e70a3
noarch postgresql-test-rpm-macros-16.14-1.module_el9.8.0+266+1e661e97.noarch.rpm 9232351ae957fe56b5a13893ddc43647683af1ce4e933cb6b2e1651d097a4163
ppc64le postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.ppc64le.rpm 03ceefeb6c273a95c8ec179a387210f1a9c7808522d4871789925b81691e196f
ppc64le postgresql-contrib-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm 0d4010cdc2f3c5107861ff841f7a2636ea0439d47ccfb9ab001a6baf3fb14536
ppc64le postgresql-server-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm 14e00d81ec08f8139b24e37640915aadd81a8113e27e445a61b6a2ceb53bd4b8
ppc64le postgresql-private-libs-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm 2359f1b6dd18c8dc3cb39e7cef4213092d9ce629c4545502160bdee67fc71254
ppc64le postgresql-server-devel-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm 33e38f2ed4cfa3a701670ec8531c8a5bed7cad3480bce121f7fcd1dd56a0f146
ppc64le postgis-docs-3.5.3-5.module_el9.8.0+236+2d3cbd4c.ppc64le.rpm 3abbc3eb1001836fece4c7db0665797fbdb41388739a12973227ce57a00c2939
ppc64le postgis-client-3.5.3-5.module_el9.8.0+236+2d3cbd4c.ppc64le.rpm 49ab85daeb24032e682e91573a554d5a1e4695569e4345e9ba07f698cd61a12d
ppc64le pgvector-0.6.2-2.module_el9.6.0+167+4e561146.ppc64le.rpm 79a6f90aee3d0d73924b84b53ccf400c7378a974bac77b8b77af149f6c6bde90
ppc64le pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.ppc64le.rpm 8588205024e2617ab6cc93c3e6c3c1ea87350cd54ca5dcdd14e19f88d47d7b6b
ppc64le postgis-3.5.3-5.module_el9.8.0+236+2d3cbd4c.ppc64le.rpm 8bc22e72eca3402d1629b03d6a0fe192a296e9d129f60b66669a6be5dfcffc6a
ppc64le postgresql-plpython3-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm 8f17ebf1c289c7ca537a73f1f775b35b30dd2ba2d12d1e1b156767b8b9fe47a6
ppc64le postgresql-pltcl-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm 96a422b342a28043160b71894821c523b3d03757e20e7d01db2dae8946f0803a
ppc64le postgresql-docs-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm a812eddae44bd0bd7658e26797ab974f2ce81169977b3995418350e4e6480ecd
ppc64le postgresql-static-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm afd90391bd55457ccf50891e86436dec105fbf88b51cb5693b06899e8dcde50c
ppc64le postgresql-private-devel-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm b1af1f01d3a47c7ca43d4ccb9d45fb7f76eb099248175ddd4eed62d394e5605d
ppc64le postgresql-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm bc262a56d2aa386b9be3aacb88aa20bde7c9826819b280b24d15e462e22802f9
ppc64le postgresql-test-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm c04f784dbbeb40858ec6e22b31d4426a5c5220c027063465af9765a4571eb216
ppc64le postgis-utils-3.5.3-5.module_el9.8.0+236+2d3cbd4c.ppc64le.rpm c34187e28d572e7cf0ba10545ec4eac0ec77ac315249c68f9397dbbf892039a2
ppc64le pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.ppc64le.rpm c76421105d2bb8d969b624faa75ce52025a40a6fcd3684e9fa9b3c1fd5cf142f
ppc64le postgis-upgrade-3.5.3-5.module_el9.8.0+236+2d3cbd4c.ppc64le.rpm cd061f0a546d4255af9a78396fe6162f30feced6366643ffb62ebee270fb1c81
ppc64le postgresql-plperl-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm d611aa69faa6ebba33405c798ab34d3394b6493913f549a383e8df9de2a37955
ppc64le postgresql-upgrade-devel-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm e034d7174d11de43a0d2ef54730195fe3b37d8d20123e64d1bafa628e1ffef4e
ppc64le postgresql-upgrade-16.14-1.module_el9.8.0+266+1e661e97.ppc64le.rpm f475c38c2366742ba3b17ef3107c8f4dcf78eea7c7fbad7024eba6d281472765
s390x pgvector-0.6.2-2.module_el9.6.0+167+4e561146.s390x.rpm 0189f49bef1c20bac87922d6991e5f0b0b8b5aa7a6b04cfdca3876c35810d906
s390x postgis-upgrade-3.5.3-5.module_el9.8.0+236+2d3cbd4c.s390x.rpm 0d1c22f319803439f1f3fe03590a8fd1e006f9b359eae567fb17c8845c24612a
s390x postgis-utils-3.5.3-5.module_el9.8.0+236+2d3cbd4c.s390x.rpm 207763f8f02b72b368e090ce2bc8dd30299169d1b91ad9caa9eeb5a46db2aed5
s390x postgresql-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 20e39b60a1104e3ae01b37c84f9efd3bc7dfef87c1b015dacafda67fc88ecf3d
s390x postgresql-plpython3-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 2c52e35cc731404883d486a1e1345f11b0881105d0600231bd48c3f2f26e78e3
s390x postgis-3.5.3-5.module_el9.8.0+236+2d3cbd4c.s390x.rpm 4a25d87093ab238fc40709991efafa8aab70effba17c6f29688a1142a0b1eeca
s390x postgresql-private-libs-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 4b25e654fd8ac5628e4dba0eccfbc4163b0e81bc9950fc302c9594c2de0baee1
s390x postgresql-test-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 502eec3fdb269233d5ac1c461c1936a9db73a568a3137fd13cc35730ef23cf98
s390x postgis-client-3.5.3-5.module_el9.8.0+236+2d3cbd4c.s390x.rpm 5496722af9373b8c71fb71cdb15cbaaf21a4e679227c9bc9316d0619309be796
s390x postgresql-private-devel-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 628b53cc01c1c654c79754558cd77a96fa763c7975b41df417609208dd69ecb6
s390x postgresql-pltcl-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 72795a86dd2e9913d1af3597ada2f0c225eeb6af43994f828532da8392745ee3
s390x postgresql-server-devel-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 7d55f2c0f4790ddfca49e5c3c4f1679c07c095553841f8db91f167fca1f39514
s390x postgresql-plperl-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 901b4e7376e840d65cd9c9690cabe5f3c31ec4818ae77872fcde455eef711aa2
s390x pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360
s390x postgresql-docs-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm b1309cf0c8b94c08b0e93ee4f264df934cc9ae7920d27db6799105d1f5653824
s390x postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c
s390x postgresql-static-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm b95aee4938f82b9a3144972c954c605f430b4e7a9d2446a49fef28fe109aee0a
s390x postgresql-upgrade-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm c2ef704e1f97003d916e1be63a21af6a052f91ed5079c604837d29f5b5664849
s390x postgresql-upgrade-devel-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm c491c66c6b045415c37170367f6c3d9991ec5954743f638e2421050f1f60aa0f
s390x postgis-docs-3.5.3-5.module_el9.8.0+236+2d3cbd4c.s390x.rpm d5e98e2f38fdf63c7a380c83e03efe4391e1c355d9a6a209d5e3298eb99645ba
s390x pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739
s390x postgresql-contrib-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm dd4c8e5c44f353b681af33a5963008b302409b53068fc5979f3d005dd9c83391
s390x postgresql-server-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm f2fdf6da725c81fe195ff375219baada36d8dad5ce6836a945a5c561b5885b96
x86_64 postgis-upgrade-3.5.3-5.module_el9.8.0+236+2d3cbd4c.x86_64.rpm 104ecaccef4330e0aa2d214a6151619cf5cfe4982524e4daaba24642174b045d
x86_64 postgresql-upgrade-devel-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 108f826b1ad0368abae3c1312401c42a85f5785ecfaad9a4e13f88083d68750c
x86_64 pgvector-0.6.2-2.module_el9.6.0+167+4e561146.x86_64.rpm 1141f322652c8d905035a08a39e707d5192236d5b4b442802732b66a0684e10f
x86_64 postgresql-private-devel-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 128c40ef6fe35f8c5f02f59fe430a9eb2b0766eb95015b4d070e703bcdbb5d08
x86_64 postgis-utils-3.5.3-5.module_el9.8.0+236+2d3cbd4c.x86_64.rpm 2c88371e0af08a707d496a8a5891097400150f6e18415934a1b1c002eeb4e776
x86_64 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1
x86_64 postgis-client-3.5.3-5.module_el9.8.0+236+2d3cbd4c.x86_64.rpm 3c147a93c46673dbcb8e9e3d9a9689aa0554ab90d0bcd4b009ff53333da8db8c
x86_64 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442
x86_64 postgresql-server-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 55e238c514463291285b9ac53fc38ff43e2f2c005d32419e1feec4f2dc4e7aeb
x86_64 postgresql-docs-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 68b7f369d1aee49c0886727f379c027876bfe0f4d4ce10f783833e36dd30f177
x86_64 postgresql-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 68d844b759f2056ee349e81fafb6613df28c629f385eb2142fca141ac699c123
x86_64 postgresql-private-libs-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 745296a2fe620971aec8560e0a4467e20c43b1b9018d6a2908ed3f38966b3022
x86_64 postgresql-server-devel-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 74b774f9bd95fe925ef0f8705f31a3cd6615f75914abfee51511ec40b8d2c0ab
x86_64 postgis-docs-3.5.3-5.module_el9.8.0+236+2d3cbd4c.x86_64.rpm 990bac10c5339141ca0fa90fb458bf60266c2fd87a53c203cba1e4b8d6466d83
x86_64 postgresql-pltcl-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 9ee7a8c0ff9d4e7846ebd476251fcc107ab23196caae9a650eeeccf324397656
x86_64 postgresql-contrib-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm ad20f86037588c59d9ca27b961083e72776e81290513d70cdc253494cb8333ce
x86_64 postgresql-upgrade-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm b05f7cd69be2a127f4ebed2ba330407795cdf2c97c54d616033c3e4213c62c5d
x86_64 postgis-3.5.3-5.module_el9.8.0+236+2d3cbd4c.x86_64.rpm b5e92397c6157fcc211a53ddbaa44edb652b0e02a1af10e1c8d8805dbd15ee0d
x86_64 postgresql-static-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm c44a6623f277bf5ddfa5e8a62a096486f3eb88233840fbc69a3af5dfd442e678
x86_64 pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.x86_64.rpm c660056970f41edeec199c6634387c8235fcf981c34cdf3f74d9d3b3fd36eb63
x86_64 postgresql-test-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm d894a7734b80004654739b4e01cabb25c36e9fbf234b928ab3522732639f65f4
x86_64 postgresql-plperl-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm fb23259a6272a801b7f504db9ad5bbe8527e2448efcc7553cbbd7f0a0ce6851e
x86_64 postgresql-plpython3-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm febb3adc5838e85e77b9b9bf85bb966d1b77af11af3c9cc41a8d5d3d9e92a9c4
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.