[Apollo] Advisories Statistics light light Login

RLSA-2026:67491

Security Mirrored from RHSA-2026:67491
Issued at: 2026-09-15
Updated at: 2026-09-16

Advisory content derived from Red Hat RHSA-2026:67491, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: postgresql:16 security update



Description

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662)

* postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408)

* postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464)

* postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)

* postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680)

* postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)

* postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677)

* postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742)

* postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)

* postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)

* postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)

* postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)

* postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670)

* postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668)

* postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)

* postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)

* postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2515302 2515303 2515306 2515307 2515308 2515311 2515313 2515314 2515316 2515317 2515321 2515322 2515325 2515326 2515328 2515332 2515434

CVEs

CVE-2026-14662 CVE-2026-14664 CVE-2026-14668 CVE-2026-14669 CVE-2026-14670 CVE-2026-14671 CVE-2026-14677 CVE-2026-14679 CVE-2026-14680 CVE-2026-15741 CVE-2026-15742 CVE-2026-16239 CVE-2026-18408 CVE-2026-19385 CVE-2026-6464 CVE-2026-6471 CVE-2026-73515

Affected packages

Rocky Linux 9 aarch64 - AppStream

pgaudit-0:16.0-1.module+el9.8.0+40159+adcaa225.aarch64.rpm pgaudit-0:16.0-1.module+el9.8.0+40212+d6f50005.aarch64.rpm pgaudit-0:16.0-1.module+el9.8.0+40159+adcaa225.src.rpm pgaudit-0:16.0-1.module+el9.8.0+40212+d6f50005.src.rpm pgaudit-debuginfo-0:16.0-1.module+el9.8.0+40159+adcaa225.aarch64.rpm pgaudit-debuginfo-0:16.0-1.module+el9.8.0+40212+d6f50005.aarch64.rpm pgaudit-debugsource-0:16.0-1.module+el9.8.0+40212+d6f50005.aarch64.rpm pgaudit-debugsource-0:16.0-1.module+el9.8.0+40159+adcaa225.aarch64.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40159+adcaa225.aarch64.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40212+d6f50005.aarch64.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40159+adcaa225.src.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40212+d6f50005.src.rpm pg_repack-debuginfo-0:1.5.1-1.module+el9.8.0+40159+adcaa225.aarch64.rpm pg_repack-debuginfo-0:1.5.1-1.module+el9.8.0+40212+d6f50005.aarch64.rpm pg_repack-debugsource-0:1.5.1-1.module+el9.8.0+40159+adcaa225.aarch64.rpm pg_repack-debugsource-0:1.5.1-1.module+el9.8.0+40212+d6f50005.aarch64.rpm pgvector-0:0.6.2-2.module+el9.8.0+40159+adcaa225.aarch64.rpm pgvector-0:0.6.2-2.module+el9.8.0+40212+d6f50005.aarch64.rpm pgvector-0:0.6.2-2.module+el9.8.0+40159+adcaa225.src.rpm pgvector-0:0.6.2-2.module+el9.8.0+40212+d6f50005.src.rpm pgvector-debuginfo-0:0.6.2-2.module+el9.8.0+40212+d6f50005.aarch64.rpm pgvector-debuginfo-0:0.6.2-2.module+el9.8.0+40159+adcaa225.aarch64.rpm pgvector-debugsource-0:0.6.2-2.module+el9.8.0+40159+adcaa225.aarch64.rpm pgvector-debugsource-0:0.6.2-2.module+el9.8.0+40212+d6f50005.aarch64.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.aarch64.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.aarch64.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.src.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.src.rpm postgres-decoderbufs-debuginfo-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.aarch64.rpm postgres-decoderbufs-debuginfo-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.aarch64.rpm postgres-decoderbufs-debugsource-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.aarch64.rpm postgres-decoderbufs-debugsource-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

pgaudit-0:16.0-1.module+el9.8.0+40212+d6f50005.ppc64le.rpm pgaudit-0:16.0-1.module+el9.8.0+40159+adcaa225.ppc64le.rpm pgaudit-0:16.0-1.module+el9.8.0+40159+adcaa225.src.rpm pgaudit-0:16.0-1.module+el9.8.0+40212+d6f50005.src.rpm pgaudit-debuginfo-0:16.0-1.module+el9.8.0+40159+adcaa225.ppc64le.rpm pgaudit-debuginfo-0:16.0-1.module+el9.8.0+40212+d6f50005.ppc64le.rpm pgaudit-debugsource-0:16.0-1.module+el9.8.0+40159+adcaa225.ppc64le.rpm pgaudit-debugsource-0:16.0-1.module+el9.8.0+40212+d6f50005.ppc64le.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40212+d6f50005.ppc64le.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40159+adcaa225.ppc64le.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40159+adcaa225.src.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40212+d6f50005.src.rpm pg_repack-debuginfo-0:1.5.1-1.module+el9.8.0+40159+adcaa225.ppc64le.rpm pg_repack-debuginfo-0:1.5.1-1.module+el9.8.0+40212+d6f50005.ppc64le.rpm pg_repack-debugsource-0:1.5.1-1.module+el9.8.0+40159+adcaa225.ppc64le.rpm pg_repack-debugsource-0:1.5.1-1.module+el9.8.0+40212+d6f50005.ppc64le.rpm pgvector-0:0.6.2-2.module+el9.8.0+40212+d6f50005.ppc64le.rpm pgvector-0:0.6.2-2.module+el9.8.0+40159+adcaa225.ppc64le.rpm pgvector-0:0.6.2-2.module+el9.8.0+40159+adcaa225.src.rpm pgvector-0:0.6.2-2.module+el9.8.0+40212+d6f50005.src.rpm pgvector-debuginfo-0:0.6.2-2.module+el9.8.0+40159+adcaa225.ppc64le.rpm pgvector-debuginfo-0:0.6.2-2.module+el9.8.0+40212+d6f50005.ppc64le.rpm pgvector-debugsource-0:0.6.2-2.module+el9.8.0+40159+adcaa225.ppc64le.rpm pgvector-debugsource-0:0.6.2-2.module+el9.8.0+40212+d6f50005.ppc64le.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.ppc64le.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.ppc64le.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.src.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.src.rpm postgres-decoderbufs-debuginfo-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.ppc64le.rpm postgres-decoderbufs-debuginfo-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.ppc64le.rpm postgres-decoderbufs-debugsource-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.ppc64le.rpm postgres-decoderbufs-debugsource-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

pgaudit-0:16.0-1.module+el9.8.0+40212+d6f50005.s390x.rpm pgaudit-0:16.0-1.module+el9.8.0+40159+adcaa225.s390x.rpm pgaudit-0:16.0-1.module+el9.8.0+40159+adcaa225.src.rpm pgaudit-0:16.0-1.module+el9.8.0+40212+d6f50005.src.rpm pgaudit-debuginfo-0:16.0-1.module+el9.8.0+40212+d6f50005.s390x.rpm pgaudit-debuginfo-0:16.0-1.module+el9.8.0+40159+adcaa225.s390x.rpm pgaudit-debugsource-0:16.0-1.module+el9.8.0+40212+d6f50005.s390x.rpm pgaudit-debugsource-0:16.0-1.module+el9.8.0+40159+adcaa225.s390x.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40159+adcaa225.s390x.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40212+d6f50005.s390x.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40212+d6f50005.src.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40159+adcaa225.src.rpm pg_repack-debuginfo-0:1.5.1-1.module+el9.8.0+40212+d6f50005.s390x.rpm pg_repack-debuginfo-0:1.5.1-1.module+el9.8.0+40159+adcaa225.s390x.rpm pg_repack-debugsource-0:1.5.1-1.module+el9.8.0+40159+adcaa225.s390x.rpm pg_repack-debugsource-0:1.5.1-1.module+el9.8.0+40212+d6f50005.s390x.rpm pgvector-0:0.6.2-2.module+el9.8.0+40159+adcaa225.s390x.rpm pgvector-0:0.6.2-2.module+el9.8.0+40212+d6f50005.s390x.rpm pgvector-0:0.6.2-2.module+el9.8.0+40159+adcaa225.src.rpm pgvector-0:0.6.2-2.module+el9.8.0+40212+d6f50005.src.rpm pgvector-debuginfo-0:0.6.2-2.module+el9.8.0+40159+adcaa225.s390x.rpm pgvector-debuginfo-0:0.6.2-2.module+el9.8.0+40212+d6f50005.s390x.rpm pgvector-debugsource-0:0.6.2-2.module+el9.8.0+40212+d6f50005.s390x.rpm pgvector-debugsource-0:0.6.2-2.module+el9.8.0+40159+adcaa225.s390x.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.s390x.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.s390x.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.src.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.src.rpm postgres-decoderbufs-debuginfo-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.s390x.rpm postgres-decoderbufs-debuginfo-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.s390x.rpm postgres-decoderbufs-debugsource-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.s390x.rpm postgres-decoderbufs-debugsource-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

pgaudit-0:16.0-1.module+el9.8.0+40159+adcaa225.src.rpm pgaudit-0:16.0-1.module+el9.8.0+40212+d6f50005.src.rpm pgaudit-0:16.0-1.module+el9.8.0+40212+d6f50005.x86_64.rpm pgaudit-0:16.0-1.module+el9.8.0+40159+adcaa225.x86_64.rpm pgaudit-debuginfo-0:16.0-1.module+el9.8.0+40212+d6f50005.x86_64.rpm pgaudit-debuginfo-0:16.0-1.module+el9.8.0+40159+adcaa225.x86_64.rpm pgaudit-debugsource-0:16.0-1.module+el9.8.0+40159+adcaa225.x86_64.rpm pgaudit-debugsource-0:16.0-1.module+el9.8.0+40212+d6f50005.x86_64.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40212+d6f50005.src.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40159+adcaa225.src.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40159+adcaa225.x86_64.rpm pg_repack-0:1.5.1-1.module+el9.8.0+40212+d6f50005.x86_64.rpm pg_repack-debuginfo-0:1.5.1-1.module+el9.8.0+40212+d6f50005.x86_64.rpm pg_repack-debuginfo-0:1.5.1-1.module+el9.8.0+40159+adcaa225.x86_64.rpm pg_repack-debugsource-0:1.5.1-1.module+el9.8.0+40159+adcaa225.x86_64.rpm pg_repack-debugsource-0:1.5.1-1.module+el9.8.0+40212+d6f50005.x86_64.rpm pgvector-0:0.6.2-2.module+el9.8.0+40159+adcaa225.src.rpm pgvector-0:0.6.2-2.module+el9.8.0+40212+d6f50005.src.rpm pgvector-0:0.6.2-2.module+el9.8.0+40159+adcaa225.x86_64.rpm pgvector-0:0.6.2-2.module+el9.8.0+40212+d6f50005.x86_64.rpm pgvector-debuginfo-0:0.6.2-2.module+el9.8.0+40212+d6f50005.x86_64.rpm pgvector-debuginfo-0:0.6.2-2.module+el9.8.0+40159+adcaa225.x86_64.rpm pgvector-debugsource-0:0.6.2-2.module+el9.8.0+40159+adcaa225.x86_64.rpm pgvector-debugsource-0:0.6.2-2.module+el9.8.0+40212+d6f50005.x86_64.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.src.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.src.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.x86_64.rpm postgres-decoderbufs-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.x86_64.rpm postgres-decoderbufs-debuginfo-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.x86_64.rpm postgres-decoderbufs-debuginfo-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.x86_64.rpm postgres-decoderbufs-debugsource-0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225.x86_64.rpm postgres-decoderbufs-debugsource-0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005.x86_64.rpm