ELSA-2026-4059

ELSA-2026-4059 - postgresql:15 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-03-09

Description

pgaudit
[1.7.0-1]
- Update to 1.7.0
- Support postgresql 15
- Related: #2128241

[1.5.0-1]
- Update to version 1.5.0
Related: #1855776

[1.4.0-4]
- Bump release for rebuild against libpq-12.1-3

[1.4.0-3]
- BuildRequires libpq-devel

[1.4.0-2]
- BuildRequires postgresql-server-devel

[1.4.0-1]
- Update to 1.4.0

[1.3.1-1]
- Update to 1.3.1 and apply patch for pgsql v12 compatibility

[1.2.0-4]
- SCLize the SPEC

[1.2.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

pg_repack
[1.4.8-1]
- Update to version 1.4.8
- Postgresql 15 is supported
- Related: #2128241

[1.4.6-4]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

[1.4.6-3]
- Rebuilt for RHEL 9 BETA for openssl 3.0
Related: rhbz#1971065

[1.4.6-2]
- Build jit based on what postgresql server does
Related: #1933048

[1.4.6-1]
- Rebase to upstream release 1.4.6

[1.4.5-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.4.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.4.5-1]
- Initial packaging

postgres-decoderbufs
[1.9.7-1.Final]
- Iitial import for postgresql 15 stream
- Related: #2128241

[1.4.0-4.Final]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

[1.4.0-3.Final]
- Build jit based on what postgresql server does
Related: #1933048

[1.4.0-2.Final]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[1.4.0-1.Final]
- Update to new release 1.4.0

[1.1.0-0.6.Final]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.1.0-0.5.Final]
- Rebuilt for protobuf 3.14

[1.1.0-0.4.Final]
- Rebuilt for protobuf 3.13

[1.1.0-0.3.Final]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.1.0-0.2.Final]
- Rebuilt for protobuf 3.12

postgresql
[15.17-1]
- Update to 15.17
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149369 RHEL-149403 RHEL-149337

Related CVEs

CVE-2026-2004

CVE-2026-2005

CVE-2026-2006

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	pg_repack-1.4.8-1.module+el8.9.0+90110+d8a562d5.src.rpm	90a9559e08e5ac39d6f8a699880c58314b7cb64dde76c78e685e95008660d9cc	-	ol8_aarch64_appstream
	pgaudit-1.7.0-1.module+el8.9.0+90110+d8a562d5.src.rpm	f1cae95d02f71fdfa8450413921d7c7c11f5fc404d4e857d69f6449dc70eaef6	-	ol8_aarch64_appstream
	postgres-decoderbufs-1.9.7-1.Final.module+el8.9.0+90110+d8a562d5.src.rpm	dabba60dfc70121192fc24261e4bf4fed3acfaef47f706162a35643cee817af6	-	ol8_aarch64_appstream
	postgresql-15.17-1.module+el8.10.0+90834+1f1fb20a.src.rpm	5d76f2d60c55b31282f7c5be4fc9304edcf0edd81587d838e1473d8778ea7868	-	ol8_aarch64_appstream
	pg_repack-1.4.8-1.module+el8.9.0+90110+d8a562d5.aarch64.rpm	fcbc5b2ed8e13c2d8edac866a37579fd413c9853737e8d09e4dd01cb21c05e1b	-	ol8_aarch64_appstream
	pgaudit-1.7.0-1.module+el8.9.0+90110+d8a562d5.aarch64.rpm	224ea2aec4cb656f0d604f8361fe93b24220a7f8c11ce46f01c331092bd44ead	-	ol8_aarch64_appstream
	postgres-decoderbufs-1.9.7-1.Final.module+el8.9.0+90110+d8a562d5.aarch64.rpm	935c236eb24d7eed66729f6ac5fb51a727c63a7950f8d0de9242cdf3f1cd17dc	-	ol8_aarch64_appstream
	postgresql-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	862bff95c9402b39d7a1878b1df5d4c2fa49417bc007155f40ae21c03c199066	-	ol8_aarch64_appstream
	postgresql-contrib-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	c5cda87762bfad1638f321fa2a99602269fc6eb0fed5d61c5cea9b13c3c3a09c	-	ol8_aarch64_appstream
	postgresql-docs-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	f11d80a917009bcde1d198d5c3fff17be68dfb7529ad996f21d5210eef7b053a	-	ol8_aarch64_appstream
	postgresql-plperl-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	a6454efbe95397b82cc07f8a43ac7911cef198ee340f52f67c4b9184880da9c1	-	ol8_aarch64_appstream
	postgresql-plpython3-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	96d6eb0a729388778e40acb80d5e11f419bb86525ae002e6a3a2f01a0584efff	-	ol8_aarch64_appstream
	postgresql-pltcl-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	65f1dab96e8020da060438cc4f22ce165f7f250554fa42662882f4b6dfc9104f	-	ol8_aarch64_appstream
	postgresql-private-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	364a6d2b63082eb2b27f825637f95e040da4f08c4eba08ab71d0096ec79be830	-	ol8_aarch64_appstream
	postgresql-private-libs-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	738ebee4ba723ccafaed627d3e7cd6f550af9bf1d0b1ed14b0df25e52b7fc93d	-	ol8_aarch64_appstream
	postgresql-server-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	2f26be9dc5ed330f7c2cda2a7eade702c33349b2795b7747835420969fb6b38b	-	ol8_aarch64_appstream
	postgresql-server-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	263fde8389a45a772aac132781b51d2b269cbcbe58f5dd8236ba8c080b04e0ff	-	ol8_aarch64_appstream
	postgresql-static-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	547cb88d472f7ffeb00473157f638b88037b2aed6cd9fcbd32cb7c02729216c9	-	ol8_aarch64_appstream
	postgresql-test-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	eecd5958a30837b7510ec84383b174b5117ba0f365d2a57c69172a8ff48f812b	-	ol8_aarch64_appstream
	postgresql-test-rpm-macros-15.17-1.module+el8.10.0+90834+1f1fb20a.noarch.rpm	8863623f35e8ef3bb5e4d90c817f3da91cf31c0d8bba87019c769f34db0462c4	-	ol8_aarch64_appstream
	postgresql-upgrade-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	98bc1f383c02516c110aff1af84c476a34ec72c22b7d73256515caeb483ee964	-	ol8_aarch64_appstream
	postgresql-upgrade-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm	42e2870e2174728b3ee4f8f028656726e91dff86b62c140a97529eb70f368de8	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	pg_repack-1.4.8-1.module+el8.9.0+90110+d8a562d5.src.rpm	90a9559e08e5ac39d6f8a699880c58314b7cb64dde76c78e685e95008660d9cc	-	ol8_x86_64_appstream
	pgaudit-1.7.0-1.module+el8.9.0+90110+d8a562d5.src.rpm	f1cae95d02f71fdfa8450413921d7c7c11f5fc404d4e857d69f6449dc70eaef6	-	ol8_x86_64_appstream
	postgres-decoderbufs-1.9.7-1.Final.module+el8.9.0+90110+d8a562d5.src.rpm	dabba60dfc70121192fc24261e4bf4fed3acfaef47f706162a35643cee817af6	-	ol8_x86_64_appstream
	postgresql-15.17-1.module+el8.10.0+90834+1f1fb20a.src.rpm	5d76f2d60c55b31282f7c5be4fc9304edcf0edd81587d838e1473d8778ea7868	-	ol8_x86_64_appstream
	pg_repack-1.4.8-1.module+el8.9.0+90110+d8a562d5.x86_64.rpm	07b3c1dc51c29c1d14d0af01ad131493b90f3007eb04d7beadc6b3677879ab4e	-	ol8_x86_64_appstream
	pgaudit-1.7.0-1.module+el8.9.0+90110+d8a562d5.x86_64.rpm	dc9b6d754dd9836e3cfcc2db0e32141c1aee2be2d8405a30dd59294eb5bf0e20	-	ol8_x86_64_appstream
	postgres-decoderbufs-1.9.7-1.Final.module+el8.9.0+90110+d8a562d5.x86_64.rpm	ef020cb6f6c25569cf608a1fb02028850bd6d4ba478322c6829fe714c238ded4	-	ol8_x86_64_appstream
	postgresql-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	17deb1cf9998c490e3b8305f0c57d5daea6548786ddfd3fb4b5d57ff8dc50b3a	-	ol8_x86_64_appstream
	postgresql-contrib-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	65f8bd301a5662b06e81522892a356b57f1070591c2c28ae154c73e617ec7f56	-	ol8_x86_64_appstream
	postgresql-docs-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	4d79204cfa91e9dd24513bf6f793377f3e552c62400002e3ce9ccc283d8192ea	-	ol8_x86_64_appstream
	postgresql-plperl-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	07732ada6cc22bfae1850530cb586c05a3ab5fc43b365a6c1035df2c963904ea	-	ol8_x86_64_appstream
	postgresql-plpython3-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	0d7c504d82427ead86814582d2d6aaab2fceb60f4f42af14143058c57a8fbf2d	-	ol8_x86_64_appstream
	postgresql-pltcl-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	7b6d69e5b4e65c1ab96b51e71e22e475b0a75ced384c6fc5da79cc989540a9ed	-	ol8_x86_64_appstream
	postgresql-private-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	2b3a9e9aacf689abd3fef9f3ae4cf8f2d1cde95b74211fe6594c85e251c20c42	-	ol8_x86_64_appstream
	postgresql-private-libs-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	50c0353c79b1e48a9709a087bfc008805eb9166f2672b40696118669bf139f91	-	ol8_x86_64_appstream
	postgresql-server-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	baaf109991674b5163f28140d621c04182330f4ef10a85fd12348f437f69974b	-	ol8_x86_64_appstream
	postgresql-server-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	6e39b6084a52d00dda2a408521a0934a88dbb86866bc9d96978d364681ea3d8d	-	ol8_x86_64_appstream
	postgresql-static-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	8c71745e6651ba042f411ba684d6259db40dbfc22ed0b4073529812d34aecced	-	ol8_x86_64_appstream
	postgresql-test-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	ee16fe731fa2244b1787b1d97ad4440baedc8786544cdbc12b1bd1dab4744f3f	-	ol8_x86_64_appstream
	postgresql-test-rpm-macros-15.17-1.module+el8.10.0+90834+1f1fb20a.noarch.rpm	8863623f35e8ef3bb5e4d90c817f3da91cf31c0d8bba87019c769f34db0462c4	-	ol8_x86_64_appstream
	postgresql-upgrade-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	3b06782667e44c34c19c7f13bcd7133c5083f3afe7945cfa964f7c27dfa36dad	-	ol8_x86_64_appstream
	postgresql-upgrade-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm	21a7fd20c8093f8879fa55ec09a8663f310210aeae1a5f8922ecb34585f499fb	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team