ALSA-2026:69607

[ALSA-2026:69607] Important: postgresql security update

Type:

security

Severity:

important

Release date:

2026-09-23

Description:

PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662)
  * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408)
  * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464)
  * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)
  * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680)
  * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)
  * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677)
  * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742)
  * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)
  * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)
  * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)
  * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)
  * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670)
  * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668)
  * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	postgresql-private-devel-13.23-6.el9_8.aarch64.rpm	0f944570046f6e38ad564bc4d389144e9143980c8faa0d512e8c66039ebf083e
aarch64	postgresql-upgrade-13.23-6.el9_8.aarch64.rpm	2f053d660ff6ea253d3dfb7fb568c16d0898f0770df05fb2ad345cdf45b47608
aarch64	postgresql-plperl-13.23-6.el9_8.aarch64.rpm	351d03997033f7422ec4be8904482392a05fbbe08cc9754510d90b002ec06c0a
aarch64	postgresql-upgrade-devel-13.23-6.el9_8.aarch64.rpm	45b797ef251db3abc8a5e35f928b83eb95d2293a34b90716f47dd4a8f3e8f921
aarch64	postgresql-docs-13.23-6.el9_8.aarch64.rpm	4bd48bf6ccc652a696d4d9dd7fa6abe705df47ab5ce731a134e79afdcf6214f2
aarch64	postgresql-contrib-13.23-6.el9_8.aarch64.rpm	5f44cd99fae7c320ace0056f6523c1ed279dea3ccf88797f47a52bbe23e2f323
aarch64	postgresql-private-libs-13.23-6.el9_8.aarch64.rpm	995208107ea0411cf4ec842fd235a750a0e2a52d5b15e944701446d29a27d59f
aarch64	postgresql-13.23-6.el9_8.aarch64.rpm	9a8ce1ca69485a5746398436a5c093374990ddc15ac6bd5e4e5541faec54b3d6
aarch64	postgresql-server-devel-13.23-6.el9_8.aarch64.rpm	9fabbba71cb6a403c4657028fb54b62ea29719606216926a009618baab9476cd
aarch64	postgresql-pltcl-13.23-6.el9_8.aarch64.rpm	ac5031c1decdff999c9818f9f9afa5e96af5a426b06a4e0abc80236c2a2da7ec
aarch64	postgresql-static-13.23-6.el9_8.aarch64.rpm	b146bcb07e674e97a8d7236e1d01c2532aa975ca81c7541f6fc042e3ae1b987b
aarch64	postgresql-server-13.23-6.el9_8.aarch64.rpm	c03c98e3f27ae94658680d8cd001c1b68558c5a1e8c3d9a46ce1c97261ab14d9
aarch64	postgresql-plpython3-13.23-6.el9_8.aarch64.rpm	c0cc01f61fd0719499f0d07d5121563c9427b56b17fb60b9b1c2a78454a04893
aarch64	postgresql-test-13.23-6.el9_8.aarch64.rpm	d5971dc6b652e2f19cf670b31c1889dec8e851293747280b20ede302164196a9
noarch	postgresql-test-rpm-macros-13.23-6.el9_8.noarch.rpm	044ccbdab6973b9c28f68ec9d3f12e3ae4050a40b55a0bf43371a25d1afda6c9
ppc64le	postgresql-upgrade-devel-13.23-6.el9_8.ppc64le.rpm	0f7a65aae5ccb986f3cc2adc22958cae5b1244a37cfc482dc20e910f9eb35d36
ppc64le	postgresql-plperl-13.23-6.el9_8.ppc64le.rpm	22e0c11b3e855e73f29c3574fd8e4c581917c2d2fa989d5eddddaab4bec45104
ppc64le	postgresql-static-13.23-6.el9_8.ppc64le.rpm	272ad4e3a4735ab543fa1baf98f749d95a1a250a18621a1447ea60e78128b21f
ppc64le	postgresql-server-13.23-6.el9_8.ppc64le.rpm	4063bd6f0d29d2d9091b8660925d1a01573007c468843451775f222976d62b24
ppc64le	postgresql-13.23-6.el9_8.ppc64le.rpm	5729a646204956aca8814c80fd3250455c16cd43521263ed5c7e8e273a9084b8
ppc64le	postgresql-plpython3-13.23-6.el9_8.ppc64le.rpm	598be6a64a5a6060aea4d280ddef5d68f41da7e507a1aca3f9bf2dcaa8651c6b
ppc64le	postgresql-private-libs-13.23-6.el9_8.ppc64le.rpm	63d144abd66e1762266b4ce0888788ffa3b71a6a9b6dd47c687fab7e6a814927
ppc64le	postgresql-server-devel-13.23-6.el9_8.ppc64le.rpm	6ba70dbbf65a7ca2f770324edd35a53adce84c59acbeb9097379f45548c6917c
ppc64le	postgresql-pltcl-13.23-6.el9_8.ppc64le.rpm	70345d00266056c068e78323c8ba3a94d3d19fc5e908e30a48f3bb2bf0b09af4
ppc64le	postgresql-test-13.23-6.el9_8.ppc64le.rpm	78886a6dc4ee0e0d43c010161af6efb91871795d45600d11768a55ca7919e25e
ppc64le	postgresql-contrib-13.23-6.el9_8.ppc64le.rpm	789f934d04a07a887ba6cdc83658cbd703961da5de850b616bdad6769037ec7a
ppc64le	postgresql-private-devel-13.23-6.el9_8.ppc64le.rpm	7d95aaaadf9d804127ccf829e6621f40bf076e6e77e37b7302e5ba966960054a
ppc64le	postgresql-upgrade-13.23-6.el9_8.ppc64le.rpm	c2f190dd312ddb4a6786f12e01f3135dd35c4663998c44b86114be86cc782753
ppc64le	postgresql-docs-13.23-6.el9_8.ppc64le.rpm	f2730a57ae6a283903def37a83baed181084b2f1903b455a3840e74967b700e6
s390x	postgresql-static-13.23-6.el9_8.s390x.rpm	030e16298e6d9246e5fbe5d566663cd4a9dd0573d69380d38354b2ab13275e17
s390x	postgresql-pltcl-13.23-6.el9_8.s390x.rpm	16a86186240ca24099f7784b48ca26018eb54a3f5f7aea83fc859690f407d82f
s390x	postgresql-13.23-6.el9_8.s390x.rpm	3243b2104d45bd7d568d3bf09b887821864d30a4e7ba2577e15257e2b7ac1372
s390x	postgresql-docs-13.23-6.el9_8.s390x.rpm	3c3a80e860fa030cb4c35c2b4af81165bd5b6e62c21dbb558e0de4478c567f9d
s390x	postgresql-upgrade-devel-13.23-6.el9_8.s390x.rpm	4c40e255156e2ec38b7caac4d8cb52dc9733b3da831cf3ca8edb882bc1bb89d2
s390x	postgresql-server-13.23-6.el9_8.s390x.rpm	70a9821d90073a64f70dde352090a492eb1f07e4b6b621915c08a4fa290728ff
s390x	postgresql-upgrade-13.23-6.el9_8.s390x.rpm	8307c61553b02703c70dba1501f34d3106ea4dd8b2b4180a095a81a4d388a6cd
s390x	postgresql-private-libs-13.23-6.el9_8.s390x.rpm	8b60f230d653701f5e333f40d0662796602a2fedc4108d9513b154fc925d4e48
s390x	postgresql-test-13.23-6.el9_8.s390x.rpm	9d85fdfbc941cefb9d90b6aff7cf72ec021e5e2e7778fe36936d3efe01a5f4ac
s390x	postgresql-private-devel-13.23-6.el9_8.s390x.rpm	a3503276a4c07258e5e32a74dfaec40f1f33e99972599cff0b1365ca527f330c
s390x	postgresql-plperl-13.23-6.el9_8.s390x.rpm	b4bf8c4d22e44f50a02db242299a2278b3a429e4803650c14025fffb360e80cb
s390x	postgresql-plpython3-13.23-6.el9_8.s390x.rpm	c46dbe7f882c9c6f78846113c7d8e6b81fa02a728d862139a8afdc1fa8106e20
s390x	postgresql-contrib-13.23-6.el9_8.s390x.rpm	f474ba00320c2d3e8d26c546a2bb590e45de89732fa18e5f3332f3d2ba8245b3
s390x	postgresql-server-devel-13.23-6.el9_8.s390x.rpm	f5bf9f74490dc02a8de5fc8880596fdd1b126ad5a0db14cd717fc4a3ae99bbb8
x86_64	postgresql-upgrade-13.23-6.el9_8.x86_64.rpm	16c2b3b963eab8162b45a20e4b349e368defc1847a439a80f5daa5274db89cd6
x86_64	postgresql-contrib-13.23-6.el9_8.x86_64.rpm	26131bc6028db37bc8d2b2387aeb13637a1a5e01ee4d6177b97af46969e8724c
x86_64	postgresql-private-libs-13.23-6.el9_8.x86_64.rpm	35801f147d03495e9603b671411b21f40b6b2c463368668db26b54e78372ac40
x86_64	postgresql-plperl-13.23-6.el9_8.x86_64.rpm	4a6fb601dcf59f593825c5991e34a7332036b45c6304fe909a5235c6ffb4153f
x86_64	postgresql-pltcl-13.23-6.el9_8.x86_64.rpm	5bef8daf221b217e5bef9806b76695aafa4f76111dbbaf46046f522575e1c365
x86_64	postgresql-upgrade-devel-13.23-6.el9_8.x86_64.rpm	625023b308f568f7cface0d35bf15055adce18ef8fc294e006c83b7363de3abb
x86_64	postgresql-test-13.23-6.el9_8.x86_64.rpm	6c5ca3224799399868e3144d493f200454bd1148fe09c3f6e469052097ef5cfb
x86_64	postgresql-server-13.23-6.el9_8.x86_64.rpm	9d4303950f66b8dc88b44fa652d63d5c0acc614b8754789ef5a334a570321f39
x86_64	postgresql-plpython3-13.23-6.el9_8.x86_64.rpm	c0980565bb741d58b701498bbf5346d78efd6d9803f3f69cfbd83b2663147fdd
x86_64	postgresql-docs-13.23-6.el9_8.x86_64.rpm	cf3482c242b1efff03cc667a2aa50d28b30b8c70800c87114e6470e21f561565
x86_64	postgresql-static-13.23-6.el9_8.x86_64.rpm	d411e935350e1a94f341b408dff762f0541418ed3fbaa288d413f6589f045fa7
x86_64	postgresql-server-devel-13.23-6.el9_8.x86_64.rpm	e354a2ad9d48a0080cba2326977a698ee70936c9669843dff8e8fd053a273c61
x86_64	postgresql-private-devel-13.23-6.el9_8.x86_64.rpm	e9e129beb5829248fc0240a928a2c247baad26d224bcff4aa4e57a601c34405c
x86_64	postgresql-13.23-6.el9_8.x86_64.rpm	f0ec54eccebbeffa74f1b6f44f171bb8b8b1b143540fb0783c8a2adf99917a5d

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.