RHSA-2026:79009 — Red Hat Security Advisory: postgresql:12 security update

Fixed packages 68

Release	Package	Fixed in
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	pg_repack	0:1.4.6-3.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	pg_repack-debuginfo	0:1.4.6-3.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	pg_repack-debugsource	0:1.4.6-3.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	pgaudit	0:1.4.0-5.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	pgaudit-debuginfo	0:1.4.0-5.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	pgaudit-debugsource	0:1.4.0-5.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgres-decoderbufs	0:0.10.0-2.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgres-decoderbufs-debuginfo	0:0.10.0-2.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgres-decoderbufs-debugsource	0:0.10.0-2.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-contrib	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-contrib-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-debugsource	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-docs	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-docs-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-plperl	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-plperl-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-plpython3	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-plpython3-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-pltcl	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-pltcl-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-server	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-server-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-server-devel	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-server-devel-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-static	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-test	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-test-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-test-rpm-macros	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-upgrade	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-upgrade-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-upgrade-devel	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	postgresql-upgrade-devel-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	pg_repack	0:1.4.6-3.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	pg_repack-debuginfo	0:1.4.6-3.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	pg_repack-debugsource	0:1.4.6-3.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	pgaudit	0:1.4.0-5.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	pgaudit-debuginfo	0:1.4.0-5.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	pgaudit-debugsource	0:1.4.0-5.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgres-decoderbufs	0:0.10.0-2.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgres-decoderbufs-debuginfo	0:0.10.0-2.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgres-decoderbufs-debugsource	0:0.10.0-2.module+el8.5.0+11354+78b3c9c5
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-contrib	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-contrib-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-debugsource	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-docs	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-docs-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-plperl	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-plperl-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-plpython3	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-plpython3-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-pltcl	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-pltcl-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-server	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-server-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-server-devel	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-server-devel-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-static	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-test	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-test-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-test-rpm-macros	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-upgrade	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-upgrade-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-upgrade-devel	0:12.22-1.module+el8.8.0+25013+234c17ba.7
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	postgresql-upgrade-devel-debuginfo	0:12.22-1.module+el8.8.0+25013+234c17ba.7

Vulnerabilities 1

High 8.8

CVE-2026-18408

PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \restrict meta-command in…

postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine Wolfi

Aug 13, 2026

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2515303
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79009.json
report
https://access.redhat.com/security/cve/CVE-2026-18408
advisory
https://www.cve.org/CVERecord?id=CVE-2026-18408
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-18408
article
https://www.postgresql.org/support/security/CVE-2026-18408/

Red Hat Security Advisory: postgresql:12 security update

Fixed packages 68

Vulnerabilities 1

PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client

References