ELSA-2026-69924

ELSA-2026-69924 - postgresql:12 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-09-23

Description


[12.22-10.0.1]
- Add backport of CVE-2025-8714 [Orabug: 38667546]

[12.22-10]
- Backport fixes for multiple CVEs
- Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669
- Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679
- Resolves: CVE-2026-14680, CVE-2026-15742, CVE-2026-16239, CVE-2026-19385
- Resolves: CVE-2026-6464, CVE-2026-6471

[12.22-9]
- Apply patch for CVE-2026-6479 in prep section
- Resolves: CVE-2026-6479

[12.22-8]
- Backport fix for CVE-2026-6479 from PostgreSQL 14.23
(SSL/GSS init causes denial of service via uncontrolled recursion)
- Resolves: CVE-2026-6479

[12.22-7]
- Backport fix for CVE-2026-6478 from PostgreSQL 14.23
- Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473
- Resolves: RHEL-179790

[12.22-6]
- Fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006

[12.22-5]
- Fix previous Backport

[12.22-4]
- Backport CVE-2025-8715

[12.22-3]
- Fix backport for CVE-2025-1094

[12.22-2]
- Backport fix for CVE-2025-1094


Related CVEs


CVE-2026-14662
CVE-2026-14664
CVE-2026-14668
CVE-2026-14669
CVE-2026-14670
CVE-2026-14671
CVE-2026-14677
CVE-2026-14679
CVE-2026-14680
CVE-2026-15742
CVE-2026-16239
CVE-2026-19385
CVE-2026-6464
CVE-2026-6471

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) postgresql-12.22-10.0.1.module+el8.10.0+91042+87bee92d.src.rpmd615e97b055c75913d4a60c34c6787bcd7cc1d40f0e497a3c9e5d08ec7daae6e-ol8_aarch64_appstream
postgresql-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm3fee985e765052720310d1850670a35b4190c25d7e3c9f79dabdf75613a5dde8-ol8_aarch64_appstream
postgresql-contrib-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm6200d0cb30a2ca1fa2cbb3ca27dead5baea06b9e69f9a7f2fb2cc5b2ebb21da2-ol8_aarch64_appstream
postgresql-docs-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpmfd066eaa504b725a9e0992e5c5dc92b06a0676fa826ff2592dd40a55e3575c5f-ol8_aarch64_appstream
postgresql-plperl-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpmaa3a2ab1f44320ae39c60fa7f5fa3c822aeedeb39e743644f55a57f19b01ebc5-ol8_aarch64_appstream
postgresql-plpython3-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpmf67550fb77828009008792025cacdd99ea9602b7a9031889117408d814e84396-ol8_aarch64_appstream
postgresql-pltcl-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm36d8458e7938fe85c9a9b95669aff15031c5d445101d84faa8aefc40655094d9-ol8_aarch64_appstream
postgresql-server-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpma24d525a318fdccc1f6d6a61331947f836973d42a0a4e212a008608cb3c9430f-ol8_aarch64_appstream
postgresql-server-devel-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpme90388fc2cfc98fdebce600098fac0766eebae3fb8979125e81e830ce16574d2-ol8_aarch64_appstream
postgresql-static-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm114254f3d296e0e1f2a36f9fcdac40714025385b42427fbadf232b6831c9fd40-ol8_aarch64_appstream
postgresql-test-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm79a730351429fd3eb8975947271d8fed1ad0a563b483938dbab76d5863ef248d-ol8_aarch64_appstream
postgresql-test-rpm-macros-12.22-10.0.1.module+el8.10.0+91042+87bee92d.noarch.rpm48967f6d9fb587722d78ce894491ed66ffcb19528e132a2253bc00239c0d8d22-ol8_aarch64_appstream
postgresql-upgrade-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm0eee0413adc916c1d0eb9d9f7ed82db38ba035f89f2625ebb264fe86778a4685-ol8_aarch64_appstream
postgresql-upgrade-devel-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm558e40e968704b60f4d85134c10f9761b431c3d223def5c4588755f7823812cb-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) postgresql-12.22-10.0.1.module+el8.10.0+91042+87bee92d.src.rpmd615e97b055c75913d4a60c34c6787bcd7cc1d40f0e497a3c9e5d08ec7daae6e-ol8_x86_64_appstream
postgresql-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpmbd91e4210da25a9f80f4a5d39caf5a2ebbfb14124337904b9313020e2e81dd0f-ol8_x86_64_appstream
postgresql-contrib-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpmce895f4200b83cf2006f8d8bfb9ba3765d06e2299032235801d4c0cc8868ad0b-ol8_x86_64_appstream
postgresql-docs-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm9e2030b36e2b400f1f36f907eec8cfe06b6ab3cfe03a0aa052e98496e1842e27-ol8_x86_64_appstream
postgresql-plperl-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpmbf0c7b86df3b2a2f77997cfab9ca5e3b2335ee1e74707a63f9b284da1ff61098-ol8_x86_64_appstream
postgresql-plpython3-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm6557e838833cde63f6ddfd2c92a2ae40f96fb5f53f0b3f4b1193d8a5594dbbad-ol8_x86_64_appstream
postgresql-pltcl-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpme39b8352b476e242f04b1f49942efa3577b7201e6f49c09fc6f1747db9838478-ol8_x86_64_appstream
postgresql-server-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpmdd725cf609665233f2c6b99d8adb10a904c551a6c7741b00be6b5a6e4dcb5c04-ol8_x86_64_appstream
postgresql-server-devel-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpmf8c58b077b447d40f85a85497a0b29dd7c42fa629ec699eb2328382d7680e9e7-ol8_x86_64_appstream
postgresql-static-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpmbb83f2d84195e8655751fecd30b95d133f766a98894e81f4af9b79a7d4311095-ol8_x86_64_appstream
postgresql-test-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm07d582124aa02bf18a21bd6acf71a19857e7cb1a7aef2a5e896f38779e891ec1-ol8_x86_64_appstream
postgresql-test-rpm-macros-12.22-10.0.1.module+el8.10.0+91042+87bee92d.noarch.rpm48967f6d9fb587722d78ce894491ed66ffcb19528e132a2253bc00239c0d8d22-ol8_x86_64_appstream
postgresql-upgrade-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpmde8eded3773f8b0df716dcd4d07ab01470218fe82bdf2cdf8bf72ef061ec6999-ol8_x86_64_appstream
postgresql-upgrade-devel-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm92820ac29cd84a8af25331cd156dd82e9bbddc86671c721c394bfe65a3c00adc-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete