[ALSA-2026:69914] Important: postgresql:15 security update
Type:
security
Severity:
important
Release date:
2026-09-24
Description:
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 postgresql-upgrade-devel-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm 0460fd370c4388e7b10a085adf60a85fc0262d2877df16b4b16c351f98a0e47b
aarch64 postgresql-plperl-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm 17ac7f9dd3e1514f872493b95bb7e6113927ded84c3b41a0b9605d52be827c2b
aarch64 pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.aarch64.rpm 19553c3fc3bd024a194094278ed7a9ffedac41a85e58d03273bd757cfe8687e3
aarch64 postgresql-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm 2e0d974c9f14190e22ef0bff9c64a3b227829c82102c6c171eda42d7272cd842
aarch64 postgresql-static-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm 318f613ea5cac616abe5a422b5a76dc05746af147e99f4e8b096efb2d58d11ec
aarch64 postgresql-server-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm 33d61903e3a111db2e4f8da45af0f6090da21643fb82aea00e8e201fa0a13705
aarch64 postgresql-plpython3-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm 502875e06f83cb47fdf559c0a859b08d3d4253e3f7ef77aa97fdff2143ab94b5
aarch64 postgresql-test-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm 52de38e51e4ed2dafbb5d5399444a68005a8cd2df58e1e86c943593d7b5897d9
aarch64 postgresql-contrib-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm 645582686262cfa1f2477b8b9a18b48e5afa75ad4b943de6f49da405fc05bea9
aarch64 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.aarch64.rpm 70c3cc4d5f24674cf5e9caf97e7c16b4898e6c3f6c976f6e2d4cc4f64967816e
aarch64 postgresql-server-devel-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm 8273fde10a7311d18b10f2d9136919524a73cb1b023af2ebc0a519f8f10bac37
aarch64 postgresql-docs-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm a8823861203bf285071b805d56a022ea10765ba8439549cb24f2fcd75666cbae
aarch64 postgresql-private-libs-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm b67b93949691f8984c96986f729bc0260431baf1c1ed2a27e740dd63f1a646d8
aarch64 postgresql-pltcl-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm d63227fcc742e27b4e06f8ea738d0611f76dc5f4150f9e2d1157aaf3e4ca1e7e
aarch64 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.aarch64.rpm e5cbbf39e62321f182fe209827434bddb26d3b29d3be7609370a3edfc17ad5a8
aarch64 postgresql-upgrade-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm edf4cf52cecc0552ef87f3e52f440fdf41722925ffde5636646973386b5001f1
aarch64 postgresql-private-devel-15.19-1.module_el9.8.0+318+764e137c.aarch64.rpm ee61dc1fbbd8b3e8b0f964af6006489feb4a014f3430eacf822779b2772d6b3d
noarch postgresql-test-rpm-macros-15.19-1.module_el9.8.0+318+764e137c.noarch.rpm 4811baaf65686bca1a77984dcf7cf5ae0d97326f1e759012b50a8eaa53aaf392
ppc64le postgresql-upgrade-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 2c53942b7a14cdc3ef7ae7bf78170fd0008f343bb41ae9ead52368df68de1293
ppc64le postgresql-server-devel-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 326f7b06098ffed876f77af42da6141b6c68c300c9ca392c50276c431e37e940
ppc64le postgresql-plperl-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 348a015d5762f3004a5b4a0ed57e71966710bb63b78fbc4652abadc7110aa4e3
ppc64le postgresql-upgrade-devel-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 52964731401bda3410bdcfed640434af8496c22be351d1e5cfdb9b10ce90743b
ppc64le postgresql-docs-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 59ebce58f9cdd7eee2bd305cc42db0e18aa8477217c43642ef1e3f3ee4b6a5f4
ppc64le postgresql-pltcl-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 61be28cf7bd234e2b50ae82ddba1846c3ce7e90aa279aede4f2ae6b7da3962bf
ppc64le postgresql-static-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 69b6f529f6c9ac922ea7e331bc1c29a720af3888f1a9df3c318ef32ff8840265
ppc64le postgresql-private-libs-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 6bade7a3c5e2fa7ef74955f89508a1ee26b379d4e8cb98ec7b3411f35fed1051
ppc64le postgresql-contrib-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 82682e3e9d4bf8dcbb7bcd63f9e69b80a08ac512be52a53ae0e348e1fd8e6c2b
ppc64le pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.ppc64le.rpm 82d2754d3b326611d5b3004036c42b46d61f22a9308e0d571d96ac778b105831
ppc64le postgresql-server-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 82f0ed2aef66c1d854ae8d6554dcb3d0c464c08fc4c6b728e4d14ea31730c57d
ppc64le postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.ppc64le.rpm 8f4180654b363231c09fb0ba05b49fc47e2d138ab584ccf2c1b6b4c8effdd1c6
ppc64le postgresql-plpython3-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm 92565d2aee1dec165142f242accbfab9e6a99079df2770a2bdfda71a7f38a141
ppc64le postgresql-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm c575e1cef62100c3da008826f2e777e1f06e11b471a39c266b14780e000c774a
ppc64le pgaudit-1.7.0-1.module_el9.3.0+52+21733919.ppc64le.rpm c5aca9e9d5f3e300dff4c8dd29559054a0f9298a7d58b4b6c3d16f0a3013940f
ppc64le postgresql-test-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm c81a8c9ca018acb4bd65e2f731fcca5a6ef60d7f8a527b026256253cd5af91f7
ppc64le postgresql-private-devel-15.19-1.module_el9.8.0+318+764e137c.ppc64le.rpm ecce7c1d5064ef473edbcd4ae631ad029c86f350db49f0adba14eab5ed9d598c
s390x postgresql-contrib-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 0167de262d3e44fb42a382f909b3a87fcb2f4ba9f09f864434a6fd3a31c9b5a9
s390x postgresql-private-libs-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 0299ba2129bdd5f40a80ae0b578a151c25e16e60b86350fd41745201b8ac8830
s390x pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm 1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89
s390x postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm 35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445
s390x postgresql-test-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 397484f580752274291bf92f5455a6b2008d3a64c6229493b8188973a2df8fff
s390x postgresql-server-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 3a4bb74768cf3032be317b9c3d4f464eac545bbc27e7969079e08bcc8eee61d1
s390x postgresql-static-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 44e47dc7fee7691c15b5bc40ff950a31f8851425a2dc19ce39c6e10bf0b01da8
s390x pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.s390x.rpm 565b4d4edc782cf6df048e990f78d9a96ef21d4a91af2800aa9a0d66ac77ae8f
s390x postgresql-server-devel-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 6df1e0804d129fd781225b2b8029df03e0f299e07939637574276997bbe6a8fe
s390x postgresql-plperl-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 99e01a15857895e0ff40c6c05b3f060cb13ab5cb3d61bd3827c207fe5b5ab6ee
s390x postgresql-private-devel-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm a97a2cf9a45fb57b852798cd96f467a1677d0a3c8f7e0abd9aba195e55d6ce8a
s390x postgresql-pltcl-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm c156f1fc205bca73fe33de0cbc2dcbc23d41b35381c50be3660294ad88c8e634
s390x postgresql-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm d133ad238b73731bc2f41f41b21e4a408d0e886c97adf9599730d0425aee89a2
s390x postgresql-docs-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm e350aacc60c7e0c7156e8adf690e94fff6ab009a04eebb83aedbab16fdac5b8f
s390x postgresql-upgrade-devel-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm e8860fe2696710b1a0200af24aaf289003bc06e0608d765e173a5c27730f1684
s390x postgresql-plpython3-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm ea562030673c8b0f1395a76b28f35e831b15c4bc1aaeb023c7176d9b2f683f16
s390x postgresql-upgrade-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm ff21814cded44aed3c0342bbf830ea4f665a4482541f1a0ee8d6ed0e1d853cc1
x86_64 postgresql-upgrade-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 0af31a91684f1a7c4f7d562c8cfbeb6d9b270f5983e8fd70377a0ec641e9a899
x86_64 postgresql-server-devel-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 170a74405de406a81d692871a220d87f5a526904a1ea4d019effb137078dc3f1
x86_64 postgresql-server-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 1a461bcdaaa7df03dbe7592129e755fd6c00e9333ada4a62ad711ff46d74ef80
x86_64 pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.x86_64.rpm 1c17fe11db244a9e23cf757cfe3615a7256f34ef84e836c69f08b5d37efc9ea0
x86_64 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.x86_64.rpm 1e7dcca31912928f8f81927e2ee52575148e6f737824c95c15b2f94d0d426bde
x86_64 postgresql-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 2f13cbba1041399c64a8821e3ab4208f3666e50a9eab39ff95ac855f8be91345
x86_64 postgresql-private-devel-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 418ea3ac5431036b4ba3141299bb43ca0c452e4dba53b3bbb4439dac19eb3378
x86_64 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.x86_64.rpm 444045e97d9babf7b4e33fb62d3d2c649646ff143597832c1d6548aa49dd24ba
x86_64 postgresql-plperl-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 45c789901f5cd4445bd053d188ba6015741c315f9877f0df9a2ed1b532f8654d
x86_64 postgresql-test-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 5838bd513515c1190b9f3bc7a3b90ad7a784a818de9f1c0d0ca99ec3ac417ed1
x86_64 postgresql-private-libs-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 66a28f149b260da024baa42abc8f394e09ed7eb98e47af3d377bd457b6743851
x86_64 postgresql-plpython3-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 8828f7d6035e44f49d85e3eb9dbc11951eac43f77a037b217613bdfd12c535fa
x86_64 postgresql-upgrade-devel-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 8d1aeefb46688ca22bffac1d5d5fa7e6c62b3c3c0928898aaa2dbd4de7d409b8
x86_64 postgresql-contrib-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 90e52c9a65cf74137d6c6ccee5188749839a2cba01331ff12d3949ff58266ab7
x86_64 postgresql-static-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 9ccac807931cd8447b02b3fd6066a6a3a3fc53e4c5d6cdc39afae034a6adb3e4
x86_64 postgresql-docs-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm b85006111dd7b3f9bb08c90644bec47cc79dce3f1efcb5d3a5ae44089de15ef5
x86_64 postgresql-pltcl-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm e62930c5c82a1e22a4a672a203a76690737a95fad842e89194be954e38872872
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.