[ALSA-2026:26204] Important: postgresql:18 security update
Type:
security
Severity:
important
Release date:
2026-07-08
Description:
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 postgresql-server-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm 05c6f8c5c7381e4cd36c287b1cf3d28344f13797173519f8af4cd366f980d2ce
aarch64 postgresql-server-devel-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm 18db170e096b2033b72a664dc5650deecfa16f51c174ca033acd649f226669d8
aarch64 postgresql-private-libs-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm 2bd184112c21a4bf6022223ab5043e853d57a5bbb5a72fbcead27d1e14f1a0d9
aarch64 postgis-upgrade-3.6.1-2.module_el9.8.0+239+6fb51d38.aarch64.rpm 36ea7fb24e72599fa89dccf0c0ff6be0df026de4508340fc0cfdc6a397aab9cb
aarch64 postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.aarch64.rpm 3e736e83508a9cea622023e3ec620c86e9cc9735241e184ec1ce0e54056a98b0
aarch64 pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.aarch64.rpm 3ee33d558ad420cfe340290a854f15ff4cd0cc439825106c0294ec5b19b5bd22
aarch64 postgis-docs-3.6.1-2.module_el9.8.0+239+6fb51d38.aarch64.rpm 40d707f4e162c4c576c589f48b30a7c15b143e60a7724296aff6d39895b344d7
aarch64 postgresql-private-devel-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm 483b32fa60b1a235a94272d9e5df813971fe6b828818500da4f9fa3ba7969f0e
aarch64 postgresql-static-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm 64479aa73a287252fb7b02a79fecf1bcf81325f03f7cf3fbaddc306460d03809
aarch64 postgresql-contrib-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm 66863a0010f41a769ce25d6a13ae7598881d9942790db3e7d4995ff2b92ea679
aarch64 postgis-3.6.1-2.module_el9.8.0+239+6fb51d38.aarch64.rpm 66f79b6744477762a3c8254f35950a9a41e36affa057cda3a7e8b4f5600acbf9
aarch64 postgresql-pltcl-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm 695f062198e324e8546c187d20e0f7ac775c3a2ea8ae6187aab8ac1628ef8780
aarch64 pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.aarch64.rpm 7020f6898e5f8084689015dd23da55e3614943e4662592cdbb745013f5ed1ba6
aarch64 postgresql-upgrade-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm 7df57f3f0e4134f5c6d4ee6c1a0b67e6dc2ada430dffe980968a6cd92ad1bd6b
aarch64 pgaudit-18.0-1.module_el9.8.0+234+5456f35d.aarch64.rpm 90e4d05cb0900404c4beb41f53a6055765c3af373f813379aaf0db9f74b609e0
aarch64 postgresql-plperl-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm 979e1c48936f6739e95681446252debf87004aecfbe32b093c094d4b693b3c50
aarch64 postgresql-upgrade-devel-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm 99ee98effd9d99ed181153b5e10a498cffd5fd68ea977cd624969197b20927ec
aarch64 postgresql-plpython3-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm a0232fb85ac9dec6cef915804bc3c05a6465ced73a0d9430a25f9f164e26c983
aarch64 postgresql-test-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm b5ee801eeafaf1bae5e157bc66be885fcc45fc59bb86fe2380a2572e9383ef8a
aarch64 postgresql-docs-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm bb711588450160d05c34f2eeb7ab45b1af2ce5f002e99935fe86e4e25de4927e
aarch64 postgresql-18.4-2.module_el9.8.0+280+5ad12178.aarch64.rpm bed06d33eeb3c7bde7c0eb4aefaad34d30b635db2531b9d5f4516a19d09ef7d5
aarch64 postgis-utils-3.6.1-2.module_el9.8.0+239+6fb51d38.aarch64.rpm d750f3f4cef14fb12b559186082cbfda03703d03ff77b29793c916d563584851
aarch64 postgis-client-3.6.1-2.module_el9.8.0+239+6fb51d38.aarch64.rpm df56d6fdc9a5d5d47d5ce5e63c5b649703fd6a3832faf949c949c9dd4c9aba39
noarch postgresql-test-rpm-macros-18.4-2.module_el9.8.0+280+5ad12178.noarch.rpm 81dd7290e5be11670a1072bc113b92cf9e802f39ce597fd2b6c9d72761542cf2
ppc64le postgis-client-3.6.1-2.module_el9.8.0+239+6fb51d38.ppc64le.rpm 058986066faf06970f447d010277bbf5e9362ff95018e18b5130fd61fa81ac1e
ppc64le postgresql-plpython3-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm 0c97d82d2f30e387dc1d987676788d1764dead5ef442a126e6bc9ace10204c65
ppc64le pgaudit-18.0-1.module_el9.8.0+234+5456f35d.ppc64le.rpm 0e5a9fc795e419a1fdb31bac035dbd2feb6a7344bd133058627f809166dfb273
ppc64le postgis-upgrade-3.6.1-2.module_el9.8.0+239+6fb51d38.ppc64le.rpm 2332bf83a7cbe6e0551850d3278624308b899f8f4c239008d6388c2b2be04607
ppc64le postgresql-server-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm 3311b4450c2ba1782a5f7df0b9537a137f3119e4d9208b67b710f4d6e3b804c4
ppc64le postgresql-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm 3c3ae178baf3643d5b807c07fab7be722f1444aed7acce5318d09363dc78d7bb
ppc64le postgresql-contrib-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm 493f1315acb0149cf555f3f27614afb13b7c9f3b8523c9567403daa121416745
ppc64le postgis-docs-3.6.1-2.module_el9.8.0+239+6fb51d38.ppc64le.rpm 4c5d503cc2a872006aa72876ff07dae56f8a17226046498841f748fdf11ed12c
ppc64le postgresql-docs-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm 5abd0f6ce0e443184e704586d61528ca52c86a2a2e42cd8473a16c6ae2b34203
ppc64le postgresql-pltcl-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm 5bb3c8f61ed80ba3b16c417e3b288b73926cdf6be9aa5972883d6c127455e516
ppc64le postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.ppc64le.rpm 6d45e9da0d4357d696119ca81cf0e727b05dfd86b8600a36472461327a7694e3
ppc64le pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.ppc64le.rpm 6eac0af18abc6afe402735cc42b6f3fb257788fd07c21d9efb3cd98cd532ebd0
ppc64le postgis-utils-3.6.1-2.module_el9.8.0+239+6fb51d38.ppc64le.rpm 91aec6db33319be398f327366a02071b26d30c49ef9020b2f26e86638a58c709
ppc64le postgresql-plperl-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm a79f4239b5ef63b14a69ced421c1d570c5938b6e8235e40fcc0f55ac2ea0cb09
ppc64le postgresql-private-libs-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm b583d2d36261063990fe53af96596978696b6423c8f49a7ea9fe689b44f0534d
ppc64le pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.ppc64le.rpm b7fcaf843e8ee099defaac3eaf072a2d9aede65d69b832444f04e2555fdf5e92
ppc64le postgresql-private-devel-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm c01222b0dd2dba9a884211e0a1bd081a5f3d8bce2aa8ee148274207ada4e5626
ppc64le postgresql-upgrade-devel-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm c1dfcf6b8f2ba0994c6fe1d9711a9f8d777f1500d4bbe9dda05b54dfa7028586
ppc64le postgresql-upgrade-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm e2606b864b765bf8c7d5eb9f0fbbca82e4237bcdc0f5163ae26a59fedb0a27c7
ppc64le postgresql-static-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm e5189250ab390b9b80ecf77a366b282e4a4f7e1d332e47856ed540a0bf030c74
ppc64le postgresql-test-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm f3a511cbcc1099ec5a98f0e80c3b503ca9737cb7c2a86e481ca699a872d41d0f
ppc64le postgresql-server-devel-18.4-2.module_el9.8.0+280+5ad12178.ppc64le.rpm f521c94d0378a0ac1c63cbbc46c5a7142ef7cbc07dab12e6f44e0bb708d02f95
ppc64le postgis-3.6.1-2.module_el9.8.0+239+6fb51d38.ppc64le.rpm fd4c4da07130518dd0f0eb73c855afb2a3a430c7122d073d5050aa8e24bcc68b
s390x pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.s390x.rpm 0aee221df9fcadb4e5d55081ba918710e491dd25e75f4cbb868972cba3020269
s390x postgis-3.6.1-2.module_el9.8.0+239+6fb51d38.s390x.rpm 0b52cca59e22c5219b56da5d9b96c86c042dbf31ba07f3aecbbb9b21da046266
s390x postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.s390x.rpm 2620edfd9ab8983b1d904b2ebe15fd1a471e2c9b841578def8489c160a857b43
s390x postgresql-contrib-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 2a59876754017ea882aa897dc106f7f9f4960e5171c98b4d6091fd2b6e86f339
s390x postgis-docs-3.6.1-2.module_el9.8.0+239+6fb51d38.s390x.rpm 2e532d21729c79293a68567f875ec8a8f286d2dd83f46f6de723360ca66b8083
s390x postgresql-server-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 425a0d6e4a5f41d66693fd6605545a087358d074078238e21f2ed34aa54a259e
s390x postgresql-pltcl-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 431b20ba5ad4a7a7c7dc5bb1d2d09206a1221e99b352fcdea32708c115c4842b
s390x postgis-utils-3.6.1-2.module_el9.8.0+239+6fb51d38.s390x.rpm 4349c80a1ad7b2913c1fa5276b656c83cd2ab516e10c7a6f2c00afbdb95e7aef
s390x postgresql-plperl-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 459ba186838c84c8cbb5e2cd4efc6eff481d95c872d8b4ffe821038271a7047d
s390x pgaudit-18.0-1.module_el9.8.0+234+5456f35d.s390x.rpm 8c4fc11feb6c33f647222fe6ab3a8655915ccf335954744c8092d36a4732ac0e
s390x postgresql-upgrade-devel-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 8f520ad19241bdb0f904f4728971983a1bb9e87e180326bc4f68b69a35e284c8
s390x postgresql-upgrade-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 96be368961c5ae0fef0dda5895ac288a9ea59ba1e415058e00d4c66cdf62517b
s390x postgresql-docs-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm a1bbbc933e63e1340d94c7cb3f0a7812b0e54360f3f7f18a82b6033e184e3007
s390x pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.s390x.rpm a74781a4f88bc94ae1c1617e887bf0c8a360b201e425d5cd327754bba1187458
s390x postgresql-private-libs-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm b167cb493f138e8476e05d7130fd864f0449a0f31cf3a29525f823141461d952
s390x postgresql-server-devel-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm b537996513f75eed5b47af67a1d332fbff33e23b628faf2f325b5437108784ae
s390x postgresql-static-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm d3fb1d883a12dd551a7f73bcfa9ab3366936521b9d15cc0d2ae386bf0ea36522
s390x postgresql-test-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm e0925207dfc02a28afedb953b036952724c045d210abab6d0685ffb4e0068813
s390x postgresql-private-devel-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm f25c92db1d796dcaed8433a22798b4e3bbbfc708f0f8f11e882643e8e40701bd
s390x postgresql-plpython3-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm f2712a1d8ca8762938ffcb897552ed15ef0fa87e779caed7f16cb788d93ff057
s390x postgresql-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm f3ac56dc1378376a0ccbc159d81f7a3cd10e9a36e90de2960a595ddf07cbcee5
s390x postgis-client-3.6.1-2.module_el9.8.0+239+6fb51d38.s390x.rpm f55d1f7792bf767efeb290fd80942f1973b6a1d1ee149d48d72358e5b352f855
s390x postgis-upgrade-3.6.1-2.module_el9.8.0+239+6fb51d38.s390x.rpm f86b7be743fc25489506e36c3736e46d5a7b560bb07bec5ef0ca5b4ce3c2ec7a
x86_64 postgis-upgrade-3.6.1-2.module_el9.8.0+239+6fb51d38.x86_64.rpm 037e0d3665e71b78f1404903e05475457f861b67f4ed942e721d4d8b616e221e
x86_64 postgis-docs-3.6.1-2.module_el9.8.0+239+6fb51d38.x86_64.rpm 21c72dfd427ebc7c946536cc37a6fc190e01174121eff47c9e569ef0a66b6ce3
x86_64 postgresql-static-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 2c8a343a9c6baee7ce299d965b5c3ee2aca1e2eb2b63eb5e03d73392ebd786df
x86_64 postgresql-private-libs-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 3086e7973d210a04dc7c97a39d61b4fb30da25a834893c728afb061fc53c1893
x86_64 postgresql-private-devel-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 547de31aa767bdc6a57a6751afeea770a3b1875df24d00aff444d4173aeebaca
x86_64 postgresql-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 6315027408242f599b4f71f331be7bc19c8c587988174579303cd0106914218b
x86_64 postgresql-pltcl-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 6ccdf5bc6a47493743c483099349b46a6c65b0ebe60c98d594e03ae6fa9000b3
x86_64 pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.x86_64.rpm 73073e39b560916558cf7a8f43740f64b0941058d81dc88eaa8172312aa3ee09
x86_64 postgresql-server-devel-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 7a98bc123d24c3f1a2fc85c0d32311bb651e98ab6f301c3791ff43b22fbc9ed3
x86_64 postgis-3.6.1-2.module_el9.8.0+239+6fb51d38.x86_64.rpm 7c590a5ab1386f44b0889bf4d925dfd9ee44e508117b6c1439e44f6eef619883
x86_64 postgresql-server-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 801ec1abac7fcf50ad68a4073f300d0370e25a823b4eee57f11418bf6cd1f7d6
x86_64 postgresql-upgrade-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 9587e1fc0baa53b13764b6747e90596a6586ac912a3626e9dc34027f833bdbc9
x86_64 postgresql-contrib-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm a74cc678f1547e877944d9dd2e2034d9ae71e40ba5e36e19a757e22843296499
x86_64 pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.x86_64.rpm ac5c05b5931f90b0f9c1905b375a1b91b30d967f960e149d92265259d6d9a484
x86_64 postgis-client-3.6.1-2.module_el9.8.0+239+6fb51d38.x86_64.rpm b78a595d87e06de2b4ba04ad34230a07b1fe3e98ba85f65f958def1a45a1f4e2
x86_64 postgresql-plperl-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm b9ec4d368a14e66a112d66698256b7d4996bf7887ec5e7205bb845d74fe67ab6
x86_64 postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.x86_64.rpm c187a7e2e80a5628dd7c120a1ad9bd8241f2f34a57986c68a2e92ddf59d6ab13
x86_64 pgaudit-18.0-1.module_el9.8.0+234+5456f35d.x86_64.rpm d6732e77dcbe9d5cb8e802b5fe884dfcc1d7b2857df1edf3c98988bfcf832e03
x86_64 postgresql-plpython3-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm d6b50fd570a4a09ec72dca6a0c484cbf1b56022b5eaea8adee37f641c911992d
x86_64 postgresql-test-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm da2a4e27144d44849dc0c3f9da7a17b93d3e500a892c6313926d0704963e8fa9
x86_64 postgresql-upgrade-devel-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm dc3528114a387334ab744eb2f90143679afd332cabebfeccc9ce1ac874c82444
x86_64 postgis-utils-3.6.1-2.module_el9.8.0+239+6fb51d38.x86_64.rpm ee6b50bfd9bb34124a4395971cb483ee93f6ceaec01d6cd5950816dd14a1ee0d
x86_64 postgresql-docs-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm f59fefc1fb825f16c64dd4bb18a9104aeeabec503ead5f4eb248f51a9331a18b
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.