[ALSA-2026:67848] Important: postgresql:18 security update
Type:
security
Severity:
important
Release date:
2026-09-17
Description:
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser (CVE-2026-6476) * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats() (CVE-2026-16238) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow (CVE-2026-14676) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 postgis-3.6.1-4.module_el9.8.0+310+22372bcc.aarch64.rpm 0f28885f9740bdb81f5271dc31acb91182a7ab129ab6804e0bd7532ac92df336
aarch64 postgresql-docs-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm 139b7d6a147f7d223229a2441bd35369e15d4a5cac7ed6377b56448fdb737d66
aarch64 postgresql-test-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm 2300d578e670e2120ca449290bc956a4f3ad26929d509ac2e0cee5ef514c186a
aarch64 postgresql-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm 2b40d14da0280f7336c94cc27fffeb5d8a92ea36cf096c29a8f9d935530b2015
aarch64 postgresql-private-libs-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm 3354a71d46a533bc4e69c57caf07656fe2efe94be88492eb715a10caba78a676
aarch64 postgresql-private-devel-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm 3cdacd9df9e3ca1c2fd09fded7b8b130da59ba8ce885bbca9e38570adfef00eb
aarch64 postgresql-plperl-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm 3d7de49d394c415f8c6c5b135eaaff7df1904411bc9faa6342e248b5fd9743b0
aarch64 postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.aarch64.rpm 3e736e83508a9cea622023e3ec620c86e9cc9735241e184ec1ce0e54056a98b0
aarch64 pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.aarch64.rpm 3ee33d558ad420cfe340290a854f15ff4cd0cc439825106c0294ec5b19b5bd22
aarch64 pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.aarch64.rpm 7020f6898e5f8084689015dd23da55e3614943e4662592cdbb745013f5ed1ba6
aarch64 postgresql-upgrade-devel-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm 7a622bfb832140ecc9c8c8d8f150d4fe19304630e20078c7a4fbf80b442d75ce
aarch64 postgresql-plpython3-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm 8e2b23865e1f9453ce1361af3246e412e7e5e48d10c0e44b7c90b684f21299bb
aarch64 pgaudit-18.0-1.module_el9.8.0+234+5456f35d.aarch64.rpm 90e4d05cb0900404c4beb41f53a6055765c3af373f813379aaf0db9f74b609e0
aarch64 postgis-docs-3.6.1-4.module_el9.8.0+310+22372bcc.aarch64.rpm 9acc04fedb6adaf56e7adc4e92773c2f69dea81c9e79f5f833100bc9522caac8
aarch64 postgresql-static-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm 9db78065f04a9b19c88a3b79d47a144d8c741b3b29eb2e609869d6aab02f1c60
aarch64 postgresql-server-devel-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm a125da63ffd5ad1340413e087018033c09e2b971a96bdf134adf90b6fa3aac2a
aarch64 postgresql-contrib-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm a40b4181002f38cdbb4baa3ece0b7fbd5ee9a0804c004216e1945e8fe697ff6b
aarch64 postgresql-server-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm b737701920a5fbb66a53bf12adc2b6494ba13226c9ced3b5d689bc6d9809a5a3
aarch64 postgresql-pltcl-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm cedeba210bf4cf27f259117c11fd40e1954b460e9d025def4af2ed69c3ba391a
aarch64 postgis-utils-3.6.1-4.module_el9.8.0+310+22372bcc.aarch64.rpm ed512d6aecfb36be40564fa4eec56d103043fb061976ba1cd77497b1820b2493
aarch64 postgis-client-3.6.1-4.module_el9.8.0+310+22372bcc.aarch64.rpm f080d378f051f26ddc3a257413758a9cab2157ddba0efeed09b632beb804b901
aarch64 postgresql-upgrade-18.6-1.module_el9.8.0+310+22372bcc.aarch64.rpm f5fbf795382b0883eaf39280e3ae45104d070499218dbc18ab70fa5e220896e4
aarch64 postgis-upgrade-3.6.1-4.module_el9.8.0+310+22372bcc.aarch64.rpm f68391f3c2daac946fccca5696bcf59cd4734177f113abaefcfba31cf28a1d11
noarch postgresql-test-rpm-macros-18.6-1.module_el9.8.0+310+22372bcc.noarch.rpm 8eaf675017f8792c3580aef927e0dbee1bcf5fcec60c7539b7858bdd65d78062
ppc64le postgis-client-3.6.1-4.module_el9.8.0+310+22372bcc.ppc64le.rpm 0543cce799a4b5f479bfd857cc77301914ab3ce1ebfc67f981c5147b70b67d41
ppc64le pgaudit-18.0-1.module_el9.8.0+234+5456f35d.ppc64le.rpm 0e5a9fc795e419a1fdb31bac035dbd2feb6a7344bd133058627f809166dfb273
ppc64le postgresql-plperl-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm 0f60525c18d81daa978fb2c7b76588358ae16043a7f53d518ee72224cec79204
ppc64le postgresql-pltcl-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm 305e2c984476da596096489abeb3133a4a5929325f5ffe9ea5beaac7f9c89424
ppc64le postgis-utils-3.6.1-4.module_el9.8.0+310+22372bcc.ppc64le.rpm 42d0a0289c6b535a9c8fec3865633c35ed83b9baad932c6e69f7f958c50b184e
ppc64le postgresql-server-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm 4d4d76b5a29a4457921b987ccfe3f64f405a227e77a0b0000312009e1400d328
ppc64le postgresql-test-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm 6240fa52809c37b5b86ec7181a9e9e772d7cb58a7dc41972a175b0a17396219f
ppc64le postgresql-upgrade-devel-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm 65cb7e2fec701ae38abfcef30401ba4e2af0722e18e5c5e8f3bc4699421f340f
ppc64le postgresql-static-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm 67f8b94ba7bc9783f6dd7e319813d0b716e55c9e0c33dd1427ef43160c3ad246
ppc64le postgresql-server-devel-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm 6d354bc71a022c0c79712debbde3f4bc8ee7ec6eb2066b7c97ca9dacdabf7ae5
ppc64le postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.ppc64le.rpm 6d45e9da0d4357d696119ca81cf0e727b05dfd86b8600a36472461327a7694e3
ppc64le pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.ppc64le.rpm 6eac0af18abc6afe402735cc42b6f3fb257788fd07c21d9efb3cd98cd532ebd0
ppc64le postgis-upgrade-3.6.1-4.module_el9.8.0+310+22372bcc.ppc64le.rpm 70cdf8d2c7be6c5491a2258c9374f2fe550305853a51b67e9dd919c2da4b3088
ppc64le postgresql-plpython3-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm 80f87a45a0db2542b4bba30ca97fd22489074e12d402e633dbe45c8ef575e4e3
ppc64le postgresql-docs-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm 859d49b5e20e0773796641260f68d3443249a4a2d9aed6a35c1aef0cdefe4c2d
ppc64le pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.ppc64le.rpm b7fcaf843e8ee099defaac3eaf072a2d9aede65d69b832444f04e2555fdf5e92
ppc64le postgresql-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm c1d6dcfc49272c7fcd10a9e77330cd63ea16959cca576cb6a53dd9eed48c653d
ppc64le postgresql-private-libs-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm c1e908e93095bb51c6f61e91fe0c95d7849ffd7de887006923b90bd55ac70309
ppc64le postgresql-contrib-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm c3b4c3453fb5d32386468cdba9a78b8fc8c04e078c72270ce99ef1c256b11a08
ppc64le postgis-3.6.1-4.module_el9.8.0+310+22372bcc.ppc64le.rpm c82a1045b5567f00ff9f9e59f31f6a5994f13b062b88027326dfe74beab59eed
ppc64le postgis-docs-3.6.1-4.module_el9.8.0+310+22372bcc.ppc64le.rpm edd899497363f8e629f5d685bfa48b970096c322aa39da7c03da90388eaba512
ppc64le postgresql-upgrade-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm f21dd960dae8b870c613010838f8f372d8597015c1e2ca94422c7cc06bb45ad4
ppc64le postgresql-private-devel-18.6-1.module_el9.8.0+310+22372bcc.ppc64le.rpm f3962377885a7c8ee520250084951efd047025a5ba46aa4bd1f64906b90f3938
s390x pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.s390x.rpm 0aee221df9fcadb4e5d55081ba918710e491dd25e75f4cbb868972cba3020269
s390x postgresql-docs-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 1bc3a174f8c38f3dbef50d73cfc010bf65f9f8edc5bc37c078d03f1ac71531d8
s390x postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.s390x.rpm 2620edfd9ab8983b1d904b2ebe15fd1a471e2c9b841578def8489c160a857b43
s390x postgis-utils-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm 32a8b615fcdf8f4245b098cd1b5fb68dc1722b858997956b47fcde3b57aac878
s390x postgresql-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 353722ea47901b496015c9fdc3441f698c84006c416f91250ac549638a2698f9
s390x postgresql-server-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 35ddb5d79c187150f7327920e38a9e31e33f3316bcd5a1b7d0d15ea3e58c01b0
s390x postgresql-static-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 35e09508a0486bcad11d2201eb49e5826bfeba426bcf1c9e0805187a0f64ed1a
s390x postgis-upgrade-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm 67a0ea0e8e35a206ea08bd70a70fe1b4d0e4cac0c187213f3be8f88d869c2f6b
s390x postgresql-server-devel-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 6c39ee992ec36c1461d81c2b4222001848f9810732c0046af772a11b139255ab
s390x postgresql-plperl-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 6fb3e5726098690c0877e174fb90a5a060ae6f83c42f5340ac630e9fabcef794
s390x postgresql-pltcl-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 727aafa6ecfe136114d50652ce8fb1c480adf42d026ae7bb37943b2a277f070a
s390x postgresql-upgrade-devel-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 86e4ec343046a93246b4a0c9249fb3e5819bc95b45d0a49111b26336611eb149
s390x postgresql-private-devel-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 899780bbad2b2c81bebe5982c11d96bc989bc99ea9640eabb137b48455bbd083
s390x pgaudit-18.0-1.module_el9.8.0+234+5456f35d.s390x.rpm 8c4fc11feb6c33f647222fe6ab3a8655915ccf335954744c8092d36a4732ac0e
s390x postgis-client-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm a2c3ee833fd37b1d62a17aebf239c9629c9cf27cbdcdf9580d5666f9db2b4a37
s390x pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.s390x.rpm a74781a4f88bc94ae1c1617e887bf0c8a360b201e425d5cd327754bba1187458
s390x postgresql-private-libs-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm a9d1d0c4671aa0fdedff559ac195fccf9b4230c314119126acf6a83cf15000ae
s390x postgresql-contrib-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm cca6975e9a06a6e839274ac73ee7143e4c5f300260ff1b8f32f547fad898f951
s390x postgresql-upgrade-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm d09ee17798a00b7ee5d2c77f36b0d9ee818aef82c4c036f6178a857ad0f12cb4
s390x postgresql-test-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm f1ad7548dba6a82ae604251e617a7e10d8d2abdbd1a2b306db5772819c1a4464
s390x postgresql-plpython3-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm f47890ff0cc4ef169bd335a14910ab425ebe8bf3dd7cc6acc808f55834832362
s390x postgis-docs-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm f7ebb9a4f0e8c7321eed998f338f5706d8d86b5247f0346152a5d5992ea0b867
s390x postgis-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm fa9d9173d563edf37121742f81aa0ed4a401a313b4c6d6cc52b270c30183b7bf
x86_64 postgresql-plpython3-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 012245838f3d860ba5f40f83a88d50bd8c0d90eb8dbf400834fd13567d87512e
x86_64 postgresql-test-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 02ad593bd3137959fc272602fcb24f7472d78a2dd9e0aa2a3094d5a45e7f7861
x86_64 postgis-utils-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 077591f0af5ef2567852b12f99b96aad9824dcb3975a3c4b7bf8b31cfef0b9fe
x86_64 postgis-docs-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 0df02de20003dfaa1d0d8ae6fe7c0c68077ce2c698be4aac2629d26df13abb77
x86_64 postgresql-private-libs-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 1a22a62003a6c8448e591bce4de383b687d13a297a29ca65595ed8d7df1e9d47
x86_64 postgresql-contrib-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 2199f6d13d817ae1161f6d8aef814b825709fef14070ccea9341841924a8a6f5
x86_64 postgis-upgrade-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 2388a805f13eb5a577b1501710d186b993724ee644f06980fda0b734e5d3dd33
x86_64 postgresql-upgrade-devel-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 2f4cf4fca3fe8ce018b361098e1df2408978782c28e1accdd0cd27fb96036673
x86_64 postgis-client-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 32a96419992cf65f9ebb101fbbbafc57bfb1908664917607dd93dad01899d7ae
x86_64 pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.x86_64.rpm 73073e39b560916558cf7a8f43740f64b0941058d81dc88eaa8172312aa3ee09
x86_64 postgresql-docs-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 89db9baea7b0071499421ab18b06d4193f19cb476ef490f92ebf0796468be197
x86_64 postgresql-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 8d6fe45c130dc8df375d1dd7bbc2999683719c78e56ef8cd44d7fc7d0ff369c6
x86_64 postgresql-server-devel-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 8f25e0adbcdaa240cf7b969dfaae3bf7d8eac52139b5a290a5a39b63d97873b4
x86_64 postgresql-upgrade-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 9cad1f636d0143d8703571c053ffd66000438a3d11edf0ae609ad5f91c8e1f49
x86_64 postgresql-pltcl-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm a3d954d43929db978e756917bdb986153ddd0d521cbadf2edbbc524b465de09a
x86_64 postgresql-server-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm aa994348551d56bad4b995d536fb71847103ceda6258227192b8e802b8ac8643
x86_64 pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.x86_64.rpm ac5c05b5931f90b0f9c1905b375a1b91b30d967f960e149d92265259d6d9a484
x86_64 postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.x86_64.rpm c187a7e2e80a5628dd7c120a1ad9bd8241f2f34a57986c68a2e92ddf59d6ab13
x86_64 pgaudit-18.0-1.module_el9.8.0+234+5456f35d.x86_64.rpm d6732e77dcbe9d5cb8e802b5fe884dfcc1d7b2857df1edf3c98988bfcf832e03
x86_64 postgresql-private-devel-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm db79e12f1aac879c496e06a6c1cb480b1fe0a6c982504edad112f8b841c5b5e9
x86_64 postgresql-plperl-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm eb669b0e4ce1a29e7a7fec9bbd9ec50bfdccc08740b3d0b0ce9e7c6492c0ad96
x86_64 postgresql-static-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm f5b3f8604d61e4a5b1291e89e2a6f685f3a394e3920608e376462dd475a11df6
x86_64 postgis-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm fbbcba344dac7121602e4a15b506758a2078ba2c78b99a84d6617b337ab2d050
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.