Summary
pgaudit
[1.7.0-1]
- Initial import for postgresql 15 module
- Update to 1.7.0
- Support postgresql 15
- Related: #2128410
pg_repack
[1.4.8-2]
- Add new build dependencies to fix build with lz4 enabled
- Related: RHEL-47350
[1.4.8-1]
- Update to version 1.4.8
- Postgresql 15 is supported
- Related: #2128410
postgres-decoderbufs
[1.9.7-1.Final]
- Iitial import for postgresql 15 stream
- Related: #2128410
postgresql
[15.18-1]
- Update to 15.18
- Fix CVE-2026-6478
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | pg_repack | 0:1.4.8-2.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | pgaudit | 0:1.7.0-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgres-decoderbufs | 0:1.9.7-1.Final.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-contrib | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-docs | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-plperl | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-plpython3 | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-pltcl | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-private-devel | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-private-libs | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-server | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-server-devel | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-static | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-test | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-test-rpm-macros | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-upgrade | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
| Oracle Linux · 9 | postgresql-upgrade-devel | 0:15.18-1.module+el9.8.0+90926+92e334e4 |
Vulnerabilities 4
-
High 8.8
PostgreSQL server undersizes allocations, via integer wraparound
Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applic…
-
High 8.8CVE-2026-6475 Public exploit
PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice
Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after t…
-
High 8.8
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like ge…
-
Medium 6.5
PostgreSQL discloses MD5-hashed passwords via covert timing channel
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, cu…