Skip to content
OpenAdvisories
High ELSA-2026-4059 3 CVEs

Important: postgresql:15 security update (Oracle Linux 8)

Published Mar 9, 2026 · Updated Mar 9, 2026

Ecosystem: Oracle Linux

Summary

pgaudit
[1.7.0-1]
- Update to 1.7.0
- Support postgresql 15
- Related: #2128241

[1.5.0-1]
- Update to version 1.5.0
Related: #1855776

[1.4.0-4]
- Bump release for rebuild against libpq-12.1-3

[1.4.0-3]
- BuildRequires libpq-devel

[1.4.0-2]
- BuildRequires postgresql-server-devel

[1.4.0-1]
- Update to 1.4.0

[1.3.1-1]
- Update to 1.3.1 and apply patch for pgsql v12 compatibility

[1.2.0-4]
- SCLize the SPEC

[1.2.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

pg_repack
[1.4.8-1]
- Update to version 1.4.8
- Postgresql 15 is supported
- Related: #2128241

[1.4.6-4]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

[1.4.6-3]
- Rebuilt for RHEL 9 BETA for openssl 3.0
Related: rhbz#1971065

[1.4.6-2]
- Build jit based on what postgresql server does
Related: #1933048

[1.4.6-1]
- Rebase to upstream release 1.4.6

[1.4.5-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.4.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.4.5-1]
- Initial packaging

postgres-decoderbufs
[1.9.7-1.Final]
- Iitial import for postgresql 15 stream
- Related: #2128241

[1.4.0-4.Final]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

[1.4.0-3.Final]
- Build jit based on what postgresql server does
Related: #1933048

[1.4.0-2.Final]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[1.4.0-1.Final]
- Update to new release 1.4.0

[1.1.0-0.6.Final]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.1.0-0.5.Final]
- Rebuilt for protobuf 3.14

[1.1.0-0.4.Final]
- Rebuilt for protobuf 3.13

[1.1.0-0.3.Final]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.1.0-0.2.Final]
- Rebuilt for protobuf 3.12

postgresql
[15.17-1]
- Update to 15.17
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149369 RHEL-149403 RHEL-149337

Fixed packages 18

ReleasePackageFixed in
Oracle Linux · 8 pg_repack 0:1.4.8-1.module+el8.9.0+90110+d8a562d5
Oracle Linux · 8 pgaudit 0:1.7.0-1.module+el8.9.0+90110+d8a562d5
Oracle Linux · 8 postgres-decoderbufs 0:1.9.7-1.Final.module+el8.9.0+90110+d8a562d5
Oracle Linux · 8 postgresql 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-contrib 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-docs 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-plperl 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-plpython3 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-pltcl 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-private-devel 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-private-libs 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-server 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-server-devel 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-static 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-test 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-test-rpm-macros 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-upgrade 0:15.17-1.module+el8.10.0+90834+1f1fb20a
Oracle Linux · 8 postgresql-upgrade-devel 0:15.17-1.module+el8.10.0+90834+1f1fb20a

Vulnerabilities 3