Summary
pgaudit
[1.5.0-1]
- Update to version 1.5.0
Related: #1855776
[1.4.0-4]
- Bump release for rebuild against libpq-12.1-3
[1.4.0-3]
- BuildRequires libpq-devel
[1.4.0-2]
- BuildRequires postgresql-server-devel
[1.4.0-1]
- Update to 1.4.0
[1.3.1-1]
- Update to 1.3.1 and apply patch for pgsql v12 compatibility
[1.2.0-4]
- SCLize the SPEC
[1.2.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
[1.2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
[1.2.0-1]
- Initial RPM packaging for Fedora
- Based on Devrim Gunduz's packaging for PostgreSQL RPM Repo
pg_repack
[1.4.6-3]
- Release bump - enable gating
[1.4.6-2]
- Rebuild
- Resolves:#1954442
[1.4.6-1]
- Rebase to upstream release 1.4.6
[1.4.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
[1.4.5-1]
- Initial packaging
postgres-decoderbufs
[0.10.0-2]
- Release bump for rebuild against libpq-12.1-3
* Wed Oct 09 2019 Patrik Novotny <panovotn@redhat.com - 0-10-0-1
- Initial release for upstream version 0.10.0
postgresql
[13.23-2]
- fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006
[13.23-1]
- Update to 13.23
- Resolves: RHEL-128818 (CVE-2025-12818)
[13.22-1]
- Update to 13.22
[13.20-1]
- Update to 13.20
- Fix CVE-2025-1094
[13.18-1]
- Update to 13.18
- Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979
[13.16-1]
- Update to 13.16
- Fix CVE-2024-7348
[13.14-1]
- Update to 13.14
- Fix CVE-2024-0985
[13.13-1]
- Update to 13.13
- Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417
[13.11-2]
- Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
- Resolves: #2207933
[13.11-1]
- Update to 13.11
- Resolves: #2212815
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pg_repack | 0:1.4.6-3.module+el8.9.0+90098+1560b6c2 |
| Oracle Linux · 8 | pgaudit | 0:1.5.0-1.module+el8.9.0+90098+1560b6c2 |
| Oracle Linux · 8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.9.0+90098+1560b6c2 |
| Oracle Linux · 8 | postgresql | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-contrib | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-docs | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-plperl | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-plpython3 | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-pltcl | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-server | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-server-devel | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-static | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-test | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-test-rpm-macros | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-upgrade | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
| Oracle Linux · 8 | postgresql-upgrade-devel | 0:13.23-2.module+el8.10.0+90833+a7c23b2e |
Vulnerabilities 3
-
High 8.8
PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and …
-
High 8.8CVE-2026-2005 Public exploit
PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
-
High 8.8
PostgreSQL missing validation of multibyte character length executes arbitrary code
Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions…