RLSA-2026:69924

Опубликовано: 23 сент. 2026

Источник: rocky

Оценка: Important

Описание

Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662)
postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464)
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)
postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680)
postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)
postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677)
postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742)
postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)
postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)
postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)
postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)
postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670)
postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668)
postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 8

Наименование	Архитектура	Релиз	RPM
postgresql-test-rpm-macros	noarch	10.module+el8.10.0+40333+409bd81c	postgresql-test-rpm-macros-12.22-10.module+el8.10.0+40333+409bd81c.noarch.rpm
pgaudit	x86_64	7.module+el8.9.0+1735+a332307b	pgaudit-1.4.0-7.module+el8.9.0+1735+a332307b.x86_64.rpm
pg_repack	x86_64	3.module+el8.9.0+1594+4a6adae9	pg_repack-1.4.6-3.module+el8.9.0+1594+4a6adae9.x86_64.rpm
pg_repack	x86_64	3.module+el8.10.0+40055+b85d5ce2	pg_repack-1.4.6-3.module+el8.10.0+40055+b85d5ce2.x86_64.rpm
pg_repack	x86_64	3.module+el8.9.0+1603+444d1b54	pg_repack-1.4.6-3.module+el8.9.0+1603+444d1b54.x86_64.rpm
pg_repack	x86_64	3.module+el8.10.0+1862+29bef648	pg_repack-1.4.6-3.module+el8.10.0+1862+29bef648.x86_64.rpm
postgres-decoderbufs	x86_64	2.module+el8.9.0+1594+4a6adae9	postgres-decoderbufs-0.10.0-2.module+el8.9.0+1594+4a6adae9.x86_64.rpm
postgres-decoderbufs	x86_64	2.module+el8.9.0+1603+444d1b54	postgres-decoderbufs-0.10.0-2.module+el8.9.0+1603+444d1b54.x86_64.rpm
postgres-decoderbufs	x86_64	2.module+el8.10.0+1862+29bef648	postgres-decoderbufs-0.10.0-2.module+el8.10.0+1862+29bef648.x86_64.rpm
postgres-decoderbufs	x86_64	2.module+el8.10.0+40055+b85d5ce2	postgres-decoderbufs-0.10.0-2.module+el8.10.0+40055+b85d5ce2.x86_64.rpm