Summary
pgaudit
[16.0-1]
- Update to 16.0
- Support postgresql 16
- Initial import for PG 16 module
- Resolves: RHEL-3636
pg_repack
[1.5.1-1]
- Update to 1.5.1
postgres-decoderbufs
[2.4.0-1.Final]
- Initial import for postgresql 16 stream
- Related: RHEL-3636
postgresql
[16.14-1]
- Update to 16.14
- Fix CVE-2026-6478
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pg_repack | 0:1.5.1-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | pgaudit | 0:16.0-1.module+el8.10.0+90275+c15b12cb |
| Oracle Linux · 8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+90275+c15b12cb |
| Oracle Linux · 8 | postgresql | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-contrib | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-docs | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-plperl | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-plpython3 | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-pltcl | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-private-devel | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-private-libs | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-server | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-server-devel | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-static | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-test | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-test-rpm-macros | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-upgrade | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
| Oracle Linux · 8 | postgresql-upgrade-devel | 0:16.14-1.module+el8.10.0+90923+42a72dfe |
Vulnerabilities 2
-
High 8.8
PostgreSQL server undersizes allocations, via integer wraparound
Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applic…
-
Medium 6.5
PostgreSQL discloses MD5-hashed passwords via covert timing channel
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, cu…