[ALSA-2026:67491] Important: postgresql:16 security update
Type:
security
Severity:
important
Release date:
2026-09-17
Description:
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.aarch64.rpm 16376ea924b9a51d373ce99c4ba8e8a55a4ee83ba1a241b8459c1b635dbd1466
aarch64 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.aarch64.rpm 182885e56ea13dad4275de2dfe2b333c4846ef506fd1510d9d900ed71da43985
aarch64 postgis-docs-3.5.3-6.module_el9.8.0+311+c39b793b.aarch64.rpm 412c0bd5278cda5be8ae351ac151b0f7f7f2befe27e1e58a44d33e05b4f081ad
aarch64 pgvector-0.6.2-2.module_el9.6.0+167+4e561146.aarch64.rpm 45888850ea778c05814d4ef8868997a6279e33bb324b1b7ba8ddecd7bab5a3f4
aarch64 postgresql-server-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm 4930f63bed27f93d131f6bd7a07689b38a92d6cb0c0a94c1e96b2e7e9abe8ad6
aarch64 postgresql-pltcl-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm 4c34d3065403829da9908a24f8d31d5e0fa12fb7ffb638f29510854c25504209
aarch64 postgis-utils-3.5.3-6.module_el9.8.0+311+c39b793b.aarch64.rpm 5118652d0634fbd04cdaa812863f4839591059775648be54958f8e40483ff1f1
aarch64 postgresql-plperl-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm 5a734333d2e68501d267589f10b387872f8f0006cc53fae65540a7bb2c78257e
aarch64 postgresql-test-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm 5fdc1a925cda32cd14203681f0349904dd3b9aa266197718e40ea8024d642f55
aarch64 postgresql-static-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm 614ee2864d11dc779eb2b5797a7aaf3d0a781236a3266864ec13a0fec7f8b050
aarch64 postgresql-private-devel-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm 63652fb18c6462e64025faa06f4072c0b502d3105303fabe5255532245bb11c0
aarch64 postgresql-contrib-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm 72a4403988a869f30495dc4c4bda980ff0d4dd25f3ef67d05774c813fc4d17af
aarch64 postgresql-upgrade-devel-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm 8c0004dfbc94d17d55f8f1d48cdebaef76919813673806144f7ff6c1dd1e08ea
aarch64 postgresql-upgrade-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm 8c9053ad2852581b79b66a37cf7c4cb3fd6e523642a6f26e6b4bbf8680a6137f
aarch64 postgresql-private-libs-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm 8e1bcba80d85eaffd9949ea701a30291b98b35418a20ff2e0f5a4209524ce018
aarch64 postgresql-docs-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm b3f20f920718fb669001685621dcbc097899e3e7660c0ecc0fe2bd2a83518160
aarch64 postgresql-server-devel-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm c3a4d408433df442f5026c0964a93832cfa4b01d83a9d93ecee0b21f219ef0c6
aarch64 postgresql-plpython3-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm c9208b3edf059289fc4aee6d61fdb4afb6da560e04a8d9c93761a890d4c990a6
aarch64 pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.aarch64.rpm c9afa10728a9bd6f2d2ab36adbb5ca141a224edb3435036e57b7805e2890cb3f
aarch64 postgis-upgrade-3.5.3-6.module_el9.8.0+311+c39b793b.aarch64.rpm cebe3300909017838b5009ae1ec4e126337bdacc0d9dbdb9231a13baa7436c11
aarch64 postgis-client-3.5.3-6.module_el9.8.0+311+c39b793b.aarch64.rpm d24b859d2c4fddb01e05d2b2b3a8d7fc88e310b912cd42af1d8ac71ef0e1cf86
aarch64 postgresql-16.15-1.module_el9.8.0+311+c39b793b.aarch64.rpm f44019def2410e25e231b062ece2f72aa3eb0a678facb6b80da1aacfe2bd7da3
aarch64 postgis-3.5.3-6.module_el9.8.0+311+c39b793b.aarch64.rpm f4b34fd7c64c13936f8bc5f7b601a28cb434d4caa75d82294b5672388528ee02
noarch postgresql-test-rpm-macros-16.15-1.module_el9.8.0+311+c39b793b.noarch.rpm 1f8e0041a0fd1a55a894b645a43c1bef24abc455b3b25fe575e89120bfda9388
ppc64le postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.ppc64le.rpm 03ceefeb6c273a95c8ec179a387210f1a9c7808522d4871789925b81691e196f
ppc64le postgresql-static-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 0f320d0299a71e05d123aa2e324f1312dbbd06c38900dea57e62f4928be2af0f
ppc64le postgis-upgrade-3.5.3-6.module_el9.8.0+311+c39b793b.ppc64le.rpm 16d84c16678984bcf4453cec8d1883b0b53a53650cb8f806edbafcdc9eb5b687
ppc64le postgis-utils-3.5.3-6.module_el9.8.0+311+c39b793b.ppc64le.rpm 1804955f3e4cbad1d0340a68bd0cf211ff444a9286054d1f07e31b93bc3aa806
ppc64le postgresql-test-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 2766c7b3cab22301b64f67f873c896b7806c7c1463cefc51051b8db9f94472ab
ppc64le postgresql-private-libs-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 3cdf0eeba7543b950d8c156fda6864472f2aeceb57a709f2ca51f4d3237fb356
ppc64le postgresql-private-devel-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 4584123b592fa1e90d9b48bcffae3f59112c53e7dc4d31015deffee79dce45fd
ppc64le postgis-3.5.3-6.module_el9.8.0+311+c39b793b.ppc64le.rpm 565e16b28ef0636d3e4df6bb22831a7ca8eb5909f3783229969fbaa8811d860c
ppc64le postgresql-contrib-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 6b642c29834984e812c0ac2f96c7cf904bb0781980353f23d395ad00bd800fc7
ppc64le postgresql-plpython3-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 727ecbb74e262583968f0a75252205a02f6a7d242b8de33cde3f3abd67b8090e
ppc64le pgvector-0.6.2-2.module_el9.6.0+167+4e561146.ppc64le.rpm 79a6f90aee3d0d73924b84b53ccf400c7378a974bac77b8b77af149f6c6bde90
ppc64le postgresql-upgrade-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 83988a393ea38531276b22796d7fd4fb8f1275f21cc20b30f93d619ec4190942
ppc64le pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.ppc64le.rpm 8588205024e2617ab6cc93c3e6c3c1ea87350cd54ca5dcdd14e19f88d47d7b6b
ppc64le postgresql-upgrade-devel-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 8d2e6127e3a8d431682e0728138f4a77befee9fa3bc4c6077b75d56b369b5461
ppc64le postgresql-server-devel-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 96c09eba7f1ece9a09a33c6cf47f49b148ef08e5af8132314684d25ff0bbe807
ppc64le postgresql-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 96cdb957069d3e21321e224a3e19cc48e36cba7f340dea4203eddf121f481fc1
ppc64le postgresql-docs-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm 9a73a031ff2c9e1c35184ca40694bf9eb8e484b9e6083960805f0321e716ba18
ppc64le postgis-docs-3.5.3-6.module_el9.8.0+311+c39b793b.ppc64le.rpm 9fcdab746603d810f98655f676935f3fea4fd46b363bcfca4e9342b254acd477
ppc64le postgresql-pltcl-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm ad8ca577ab5a3369b057a98fb05ad6dbea4f5babb8db5637953399d640903db3
ppc64le postgresql-plperl-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm c40ebb8ca95ebfd9ff68d21fcf997ae82a6777ab8eb0123cfd069d4619381612
ppc64le pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.ppc64le.rpm c76421105d2bb8d969b624faa75ce52025a40a6fcd3684e9fa9b3c1fd5cf142f
ppc64le postgis-client-3.5.3-6.module_el9.8.0+311+c39b793b.ppc64le.rpm d71727445d587c113dd7e7547ccf465534d2d327268d883789f32f55e7613592
ppc64le postgresql-server-16.15-1.module_el9.8.0+311+c39b793b.ppc64le.rpm daaa6dc619e07a9376675728b4f8c0512119278e0ec0f92517c1dd4f0bd82800
s390x postgresql-plpython3-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 0066af49473552e981b74d77b870fee9e63bac1036d35e6c4746cf7f50209a90
s390x pgvector-0.6.2-2.module_el9.6.0+167+4e561146.s390x.rpm 0189f49bef1c20bac87922d6991e5f0b0b8b5aa7a6b04cfdca3876c35810d906
s390x postgresql-server-devel-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 03098498b14804e05099f19e87612c19a6169ec09e96d55352eb00cd5a652678
s390x postgresql-pltcl-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 096e94407d79c9e7052a347f1cae602804e90dedbb93e30e0b467c2d037234d3
s390x postgresql-private-devel-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 0b8acb99047c9ff7f60e7f366d494dd327a1bbfca1b2640bc4e0ad4b2d57f989
s390x postgis-docs-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm 1f8badf906c166b3b673ef8cab77c9c50da35aa172078e12692505e7e6cacaf5
s390x postgresql-plperl-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 2f9f268d3c604488e0d176a3210f5474db641ee3215ff3122e597376ecfe8c81
s390x postgresql-test-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 3b648ae855e2c8a808cc23897ede8ef914607281bd5bb9994381807d8f93f0fe
s390x postgis-utils-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm 653135074ae16c24f1999605bed4b1435c7a0849ca5683980fb79ae74570713f
s390x postgis-client-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm 8f719a399f3020fcb3dec2ef66310c2a0474800e9db8c92b7ad00cdbd17c3257
s390x postgresql-private-libs-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm a3bd3695eb00f0d37e4a54e65f0428db8c8a92b6fc4196d5a7a5b843d6b3992a
s390x pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360
s390x postgis-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm a5e446aa220be67fbed83aef41073b03900ba55924fc1b2d1105df72ea119be5
s390x postgresql-upgrade-devel-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm aa631aa845a02d38b026c297d00099ada302ffddf4ad6bd31665cd5f11ef2502
s390x postgresql-static-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm b81e6f45e47e41b1c7b8adf114a3841fee5e1f1f46cd877bc64a7509cfd04e9c
s390x postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c
s390x postgresql-upgrade-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm bac457026ec968f28e6a88c8e62a6e8702b1e7ead5a273115564b9a161fa2db3
s390x postgresql-server-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm be9b7a18b2848c5c2de80a57cb88621833f47cad345a843aa68142910a08811f
s390x postgis-upgrade-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm cf89b52ed2eec449e222b03d3f398fd1a516a615c7eae941e8055c157f34ba24
s390x postgresql-docs-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm d6964008cb05db32b08046d5dae1ccce757fb55dab5e0f43d755b4b61b9c824a
s390x postgresql-contrib-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm db3a64ef06c4c2991f7a1da00fa139fc44a9b5b38594b1efb5eda5f6eb52f240
s390x pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739
s390x postgresql-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm e8996dc72b1875e054e465e9309215b06f59a3b48d759ee70143903a1816d961
x86_64 postgis-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 024230f4a139facaa7270ce774378bb80831f176edecf808f4700cfae6db90b4
x86_64 pgvector-0.6.2-2.module_el9.6.0+167+4e561146.x86_64.rpm 1141f322652c8d905035a08a39e707d5192236d5b4b442802732b66a0684e10f
x86_64 postgis-utils-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 2412a2cb2d1d015dd94f89a6102818732d93181becd6a630a537a92573482005
x86_64 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1
x86_64 postgresql-docs-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 344d4d163c53504e9d5807099630e1f85fb4ce554df0b0ef433f8d04ca5ed57d
x86_64 postgresql-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 34b5c64cb8218bd879c5db20de9e1fe86608cd2c284de0faffc01e8fd0ccb639
x86_64 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442
x86_64 postgresql-private-libs-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 4ba5ab89e6cfe35c2820914af153934cd7e03432d9d1451082b49f5bf3aa8f90
x86_64 postgis-docs-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 4e95565ce7fb1532a63248653207ae3f64537f78f9b599c5bb119a661c062edf
x86_64 postgresql-contrib-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 50bf7ed56809c4a3de701be8740cf27972a836c94a5ce75e5ed806c42aeb854b
x86_64 postgresql-plperl-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 50bf98d1167287ec72168d1dabe37c7f2e6314d3a129e7153f35f7aa8c46cd45
x86_64 postgresql-static-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 5c59254b794f7ad14935a7de9b526edd70d21eb4787cced6af10c5a6604522d9
x86_64 postgis-upgrade-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 8637d8e40586d15e60d191a7f59f3743d7cfd14603e8851143e7df1db33e6ab1
x86_64 postgresql-pltcl-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 9253bbf2d70116a1845cfc109c914381b78ef152beb4dcc798105412021d09ec
x86_64 postgresql-plpython3-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 95ecb2269937c169831de4a606758e803d9d2e70b1145a2f599b0d2c805ed0a2
x86_64 postgresql-server-devel-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 987a44a9b461d32f702e3a6b54bce3726f3f772d46a143e920985e9a8d952e48
x86_64 postgresql-server-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm a8cee20e1d29b96506336c399ae0779bd77206332803b48ed03e29206909278b
x86_64 postgresql-test-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm b292efaeec4a32d94038d7a28892f9237c9d2c504764ac5b3ffefa4342791b7e
x86_64 postgresql-upgrade-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm c6542a019fd5e5350158bb7d172c52ba24a958fe531e05c8791345d50383354b
x86_64 pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.x86_64.rpm c660056970f41edeec199c6634387c8235fcf981c34cdf3f74d9d3b3fd36eb63
x86_64 postgis-client-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm debbcc969c9601f47c100348a6df2f3e251ab55ef6eb8864238bc4da64a9ffdd
x86_64 postgresql-private-devel-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm fd6d8094357be219d1d3ca1a89840dd01300aabc268dcdd951903d99cc8031dd
x86_64 postgresql-upgrade-devel-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm fef39b9191da2394a5af58a44a503e0d7dff2464b6a950ce3182a78e0046b1f9
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.