ELSA-2026-72274

ELSA-2026-72274 - postgresql:12 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-29

Description

[12.22-12]
- add postgresql-CVE-2026-18408.patch

[12.22-11]
- apply backport-of-the-patch-to-fix-CVE-2025-8714.patch

[12.22-10]
- Backport fixes for multiple CVEs
- Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669
- Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679
- Resolves: CVE-2026-14680, CVE-2026-15742, CVE-2026-16239, CVE-2026-19385
- Resolves: CVE-2026-6464, CVE-2026-6471

[12.22-9]
- Apply patch for CVE-2026-6479 in prep section
- Resolves: CVE-2026-6479

[12.22-8]
- Backport fix for CVE-2026-6479 from PostgreSQL 14.23
(SSL/GSS init causes denial of service via uncontrolled recursion)
- Resolves: CVE-2026-6479

[12.22-7]
- Backport fix for CVE-2026-6478 from PostgreSQL 14.23
- Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473
- Resolves: RHEL-179790

[12.22-6]
- Fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006

[12.22-5]
- Fix previous Backport

[12.22-4]
- Backport CVE-2025-8715

[12.22-3]
- Fix backport for CVE-2025-1094

Related CVEs

CVE-2025-8714

CVE-2026-18408

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	postgresql-12.22-12.module+el8.10.0+91045+f9258fff.src.rpm	8d00cee3bf8f36c0ffa18bb34d4576ecb400d387cac1db8ee01ec15acbf1dfe0	-	ol8_aarch64_appstream
	postgresql-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	38d36189232108a63c5e250f6a87399ce26fbc4ffcda778b3b61e1dbb094c883	-	ol8_aarch64_appstream
	postgresql-contrib-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	7626c41f88893a2501469fa78307ba117f598176d5603aac1ebff5b9475b214b	-	ol8_aarch64_appstream
	postgresql-docs-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	77f29b68661db34b2dc0c941ee0f2ee8bff4aef18d1b0fe16629643ec8d62911	-	ol8_aarch64_appstream
	postgresql-plperl-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	dd41b193a364782fe4273b9bde1df366ee56a6acfcefccfcc640f24c19de5c14	-	ol8_aarch64_appstream
	postgresql-plpython3-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	d612239c80aca47ab1dac57167c65e071a6e467d3d2168ccaeae8129598434ed	-	ol8_aarch64_appstream
	postgresql-pltcl-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	57802a14ca3b3d6341386fa0f9e5ddf89b06e743a32ae9d0578cf9d083f8ddb4	-	ol8_aarch64_appstream
	postgresql-server-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	af54a3239730edaff1dab7885d97e2a3ac25a7db4d92bd1d06d71b7d674a0d22	-	ol8_aarch64_appstream
	postgresql-server-devel-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	85301cf58b0bdf95c64cd04449c686e8ad40aacb85b2af70a908e5e03cdce90c	-	ol8_aarch64_appstream
	postgresql-static-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	ba96d243d0b89967812163a79f670eadf00d7779939386253e9ba577db4b72bc	-	ol8_aarch64_appstream
	postgresql-test-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	1f499bacc85af4c1b470af0440576653585c653956403850723f29a0a502731d	-	ol8_aarch64_appstream
	postgresql-test-rpm-macros-12.22-12.module+el8.10.0+91045+f9258fff.noarch.rpm	0dd990248cc3d2c7252c11d81c5f53e0762483da579c1e0b4284d5340a00e28a	-	ol8_aarch64_appstream
	postgresql-upgrade-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	6c87384e39168b019ff1b07be13872c1735ebace698f2d1e2f30446880c0c534	-	ol8_aarch64_appstream
	postgresql-upgrade-devel-12.22-12.module+el8.10.0+91045+f9258fff.aarch64.rpm	76e7f68ffe5fcc8b2bb575625acbbed2a4d5c5975950d737cfbe2f4bbf11aceb	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	postgresql-12.22-12.module+el8.10.0+91045+f9258fff.src.rpm	8d00cee3bf8f36c0ffa18bb34d4576ecb400d387cac1db8ee01ec15acbf1dfe0	-	ol8_x86_64_appstream
	postgresql-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	781f5a991c77dd6d1ae2a9a964eefdd7e7e17415de01e94cd060ccae6516618f	-	ol8_x86_64_appstream
	postgresql-contrib-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	55020489ef0abb23a6685670942a3b49548373ad9f47f3f667a2bf7d3c72db77	-	ol8_x86_64_appstream
	postgresql-docs-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	c80eeab200b119eef0b209272f61be6de087e6a0b4e4904bab5639fb2d968e10	-	ol8_x86_64_appstream
	postgresql-plperl-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	63d8ae84af2aac0ac43d545ce3aba82889a6c519823b2c7abe977985e8391240	-	ol8_x86_64_appstream
	postgresql-plpython3-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	e6fe671c9efb67a534eb3be8f03cb19ef462e217cf8e5156a8fd96b0d36c05fb	-	ol8_x86_64_appstream
	postgresql-pltcl-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	7742a42ed8cf75d565b4dfe8b749090b57d616c0a6e5ccb5247d524b096ff811	-	ol8_x86_64_appstream
	postgresql-server-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	18f7b60a7858efe07b4869014637e1c618c04d6a2df164fb35144019e06adc86	-	ol8_x86_64_appstream
	postgresql-server-devel-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	8a3b437b65bd79cbee7ee8d0f842be2f9a0e1d9b236ebeb062d2fa7f46c4bd3c	-	ol8_x86_64_appstream
	postgresql-static-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	6c2a8819261ba71068a131b3a4fc05ae5fdd715b5739d0bb23638e6de2b3ebb5	-	ol8_x86_64_appstream
	postgresql-test-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	44252b3aee248e9a4e811dd322026dcdb34510fbcb620f479949fb74ff42aa0a	-	ol8_x86_64_appstream
	postgresql-test-rpm-macros-12.22-12.module+el8.10.0+91045+f9258fff.noarch.rpm	0dd990248cc3d2c7252c11d81c5f53e0762483da579c1e0b4284d5340a00e28a	-	ol8_x86_64_appstream
	postgresql-upgrade-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	461e5028ea61ed13fa4a2b30ff683ad19a037012bf44517baa43b76b70e2c117	-	ol8_x86_64_appstream
	postgresql-upgrade-devel-12.22-12.module+el8.10.0+91045+f9258fff.x86_64.rpm	ebc9944cee38effe39237bbd87cb9c34a5ad30b08c9f9de6dc2ce8568e17718b	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team