RHSA-2026:72283 - Security Advisory

Topic

An update for postgresql is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

• postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662)
• postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408)
• postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464)
• postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)
• postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680)
• postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)
• postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677)
• postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742)
• postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)
• postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)
• postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)
• postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)
• postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670)
• postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668)
• postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
• Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64
• Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le
• Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x

Fixes

• BZ - 2515302 - CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
• BZ - 2515303 - CVE-2026-18408 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
• BZ - 2515306 - CVE-2026-6464 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
• BZ - 2515307 - CVE-2026-6471 postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
• BZ - 2515308 - CVE-2026-14680 postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
• BZ - 2515311 - CVE-2026-14664 postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
• BZ - 2515313 - CVE-2026-14677 postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
• BZ - 2515314 - CVE-2026-15742 postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
• BZ - 2515316 - CVE-2026-16239 postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
• BZ - 2515317 - CVE-2026-14669 postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
• BZ - 2515321 - CVE-2026-14679 postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
• BZ - 2515322 - CVE-2026-14671 postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
• BZ - 2515325 - CVE-2026-14670 postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
• BZ - 2515326 - CVE-2026-14668 postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
• BZ - 2515328 - CVE-2026-19385 postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

CVEs

• CVE-2026-6464
• CVE-2026-6471
• CVE-2026-14662
• CVE-2026-14664
• CVE-2026-14668
• CVE-2026-14669
• CVE-2026-14670
• CVE-2026-14671
• CVE-2026-14677
• CVE-2026-14679
• CVE-2026-14680
• CVE-2026-15742
• CVE-2026-16239
• CVE-2026-18408
• CVE-2026-19385

References

• https://access.redhat.com/security/updates/classification/#important