Oracle Errata System
Oracle Linux
5.11
2026-09-30T14:27:41
ELSA-2026-72274: postgresql:12 security update (IMPORTANT)
Oracle Linux 8
[12.22-12]
- add postgresql-CVE-2026-18408.patch
[12.22-11]
- apply backport-of-the-patch-to-fix-CVE-2025-8714.patch
[12.22-10]
- Backport fixes for multiple CVEs
- Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669
- Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679
- Resolves: CVE-2026-14680, CVE-2026-15742, CVE-2026-16239, CVE-2026-19385
- Resolves: CVE-2026-6464, CVE-2026-6471
[12.22-9]
- Apply patch for CVE-2026-6479 in prep section
- Resolves: CVE-2026-6479
[12.22-8]
- Backport fix for CVE-2026-6479 from PostgreSQL 14.23
(SSL/GSS init causes denial of service via uncontrolled recursion)
- Resolves: CVE-2026-6479
[12.22-7]
- Backport fix for CVE-2026-6478 from PostgreSQL 14.23
- Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473
- Resolves: RHEL-179790
[12.22-6]
- Fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006
[12.22-5]
- Fix previous Backport
[12.22-4]
- Backport CVE-2025-8715
[12.22-3]
- Fix backport for CVE-2025-1094
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2025-8714
CVE-2026-18408
cpe:/a:oracle:linux:8::appstream
postgresql-pltcl
postgresql-plpython3
oraclelinux-release
postgresql-server-devel
postgresql-test-rpm-macros
postgresql-contrib
postgresql-upgrade
postgresql-test
postgresql-upgrade-devel
postgresql
postgresql-server
postgresql-static
postgresql-docs
postgresql-plperl
/etc/dnf/modules.d/postgresql.module
\[postgresql\][\w\W]*
1
82562ea9ad986da3
\nstream\s*=\s*12\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*12\b
^8
aarch64
0:12.22-12.module+el8.10.0+91045+f9258fff
x86_64