ELSA-2026-19009

ELSA-2026-19009 - postgresql18 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-08

Description

[18.3-1.0.1]
- Replace upstream reference

[18.3-1]
- Update to 18.3
- Enable pltcl
- Update gating configuration
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
- Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error

[18.1-2]
- create user and group using useradd/groupadd

[18.1-1]
- Update to 18.1

[18.0-2]
- Bump release for gating

[18.0-1]
- Initial commit on c10s
- Resolves: RHEL-116546

Related CVEs

CVE-2026-2003

CVE-2026-2004

CVE-2026-2005

CVE-2026-2006

CVE-2026-2007

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	postgresql18-18.3-1.0.1.el10_2.src.rpm	cf57da1adc8529ecfb7af9f16d6f362831d63b6d43fbf72dbdf326455905e541	-	ol10_aarch64_appstream
	postgresql18-18.3-1.0.1.el10_2.src.rpm	cf57da1adc8529ecfb7af9f16d6f362831d63b6d43fbf72dbdf326455905e541	-	ol10_aarch64_codeready_builder
	postgresql18-18.3-1.0.1.el10_2.aarch64.rpm	138416fcbb28cf5020219388be10a791d7b62faead259aca5dc42a4aa40e77b5	-	ol10_aarch64_appstream
	postgresql18-contrib-18.3-1.0.1.el10_2.aarch64.rpm	b289a2a28464fea57e15dfcfda1bff70e78da2baeabbe0c9b03b3091a6c64691	-	ol10_aarch64_appstream
	postgresql18-docs-18.3-1.0.1.el10_2.aarch64.rpm	5d0c5877b181a7e7c40d70bd989f96fc2b787d8b12b667c0aca9014f1738ea10	-	ol10_aarch64_appstream
	postgresql18-plperl-18.3-1.0.1.el10_2.aarch64.rpm	5150a1dabab80e6a0d684a0d7f7a76f5026c06be3d59275c3d73515ec6849cfb	-	ol10_aarch64_appstream
	postgresql18-plpython3-18.3-1.0.1.el10_2.aarch64.rpm	4ea525ba4db24409adee404c92c70969692e3f84a25c9d42f5d37fe7a2a1df6a	-	ol10_aarch64_appstream
	postgresql18-private-devel-18.3-1.0.1.el10_2.aarch64.rpm	3ec3c483c0b37f5b322bb0da1026743188b25461bff071ef7fbc083b79c1f174	-	ol10_aarch64_appstream
	postgresql18-private-libs-18.3-1.0.1.el10_2.aarch64.rpm	7ed49afbb3c8a8f2e6c26aabb0ef515c3f783c736a4eb81c6d3cd619c4d696ef	-	ol10_aarch64_appstream
	postgresql18-server-18.3-1.0.1.el10_2.aarch64.rpm	01aa322b9eac92902668fd9973441160c0b10d44fd6df7c33565d61e120e2b98	-	ol10_aarch64_appstream
	postgresql18-server-devel-18.3-1.0.1.el10_2.aarch64.rpm	4ed25ade8f5e921600f0d391f71c688a188f3e9f1b4a1f5b45b7dcdf94ca2cc2	-	ol10_aarch64_appstream
	postgresql18-static-18.3-1.0.1.el10_2.aarch64.rpm	92e2ebd9aa9c2eec54c7cf8534fb890a32522bada43557f7b4411cb9567ce095	-	ol10_aarch64_appstream
	postgresql18-test-18.3-1.0.1.el10_2.aarch64.rpm	ff424e61048a81ad6423f3b9eff7f10d4a23d3909ae1ab288699a8c3dea04031	-	ol10_aarch64_appstream
	postgresql18-test-rpm-macros-18.3-1.0.1.el10_2.noarch.rpm	11d5e8832da058de19f239d5728496c54fb6bc1b47adb8f8bfd8bf89ed4f97c1	-	ol10_aarch64_codeready_builder
	postgresql18-upgrade-18.3-1.0.1.el10_2.aarch64.rpm	7f871259c3fbae6fc39d919ac2a61f1657a55faedacb8fe37d80e9b2881271da	-	ol10_aarch64_appstream
	postgresql18-upgrade-devel-18.3-1.0.1.el10_2.aarch64.rpm	5d7a5e024b171df9a043ae0e821c2ab0e9b779483b9df56bb6d4da812a089e88	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	postgresql18-18.3-1.0.1.el10_2.src.rpm	cf57da1adc8529ecfb7af9f16d6f362831d63b6d43fbf72dbdf326455905e541	-	ol10_x86_64_appstream
	postgresql18-18.3-1.0.1.el10_2.src.rpm	cf57da1adc8529ecfb7af9f16d6f362831d63b6d43fbf72dbdf326455905e541	-	ol10_x86_64_codeready_builder
	postgresql18-18.3-1.0.1.el10_2.x86_64.rpm	f189cd50b22886eef41ed31c9309d5e6e39ec3e3a523039ed59e430ec9d95a8b	-	ol10_x86_64_appstream
	postgresql18-contrib-18.3-1.0.1.el10_2.x86_64.rpm	6883f769bc37f78102076afc914edfe7629849b0d8b25e6ea18864a2aefb5324	-	ol10_x86_64_appstream
	postgresql18-docs-18.3-1.0.1.el10_2.x86_64.rpm	4e0fecc7cee0c88e4b6794632293eb1acaa1daa409dfaa855bb5eede787caf59	-	ol10_x86_64_appstream
	postgresql18-plperl-18.3-1.0.1.el10_2.x86_64.rpm	062395b97fa3438f7fe6001ee31fc05cca7fce4b2552a7fdbc9a68e22721e469	-	ol10_x86_64_appstream
	postgresql18-plpython3-18.3-1.0.1.el10_2.x86_64.rpm	af94c09d28583c23cf1814c519dacaeb315146b3832f2b04305a448557afadf0	-	ol10_x86_64_appstream
	postgresql18-private-devel-18.3-1.0.1.el10_2.x86_64.rpm	40a58fbf5d37ab73812bb60a35acc39ab7a9bab9368830d07331a7d3b38e215a	-	ol10_x86_64_appstream
	postgresql18-private-libs-18.3-1.0.1.el10_2.x86_64.rpm	542195e8c859d9471266173968b2c5f5e657647b5f96688a2a53d197f7193499	-	ol10_x86_64_appstream
	postgresql18-server-18.3-1.0.1.el10_2.x86_64.rpm	c581fd8e0d72fbbab49ad9d74f61243f1caf3cf560d790a7d92ad4709879d72c	-	ol10_x86_64_appstream
	postgresql18-server-devel-18.3-1.0.1.el10_2.x86_64.rpm	c8534e6307a2151db35b62e5e91b16fa5630d6f281211bac092a45045514bfb6	-	ol10_x86_64_appstream
	postgresql18-static-18.3-1.0.1.el10_2.x86_64.rpm	f645e31a459de45d4907c093ae1abaaa5afc71718c2c0a8adab7cad1c9d0266d	-	ol10_x86_64_appstream
	postgresql18-test-18.3-1.0.1.el10_2.x86_64.rpm	5e5f88564fe4d30d82ffc6d5268179d5ce89c85f0987976f3e61f275c1eec485	-	ol10_x86_64_appstream
	postgresql18-test-rpm-macros-18.3-1.0.1.el10_2.noarch.rpm	11d5e8832da058de19f239d5728496c54fb6bc1b47adb8f8bfd8bf89ed4f97c1	-	ol10_x86_64_codeready_builder
	postgresql18-upgrade-18.3-1.0.1.el10_2.x86_64.rpm	f336b655bf13ba6c0c20cee25cd5fb25965a0f05b6d6c1cd471a34fd0427bcb8	-	ol10_x86_64_appstream
	postgresql18-upgrade-devel-18.3-1.0.1.el10_2.x86_64.rpm	4ddce1bc6445c6bfa467f174cb0309f02a319ae07e22d6a7bc0364783b778efa	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team