Red Hat Product Errata RHSA-2026:84585 - Security Advisory
Issued:
2026-10-19
Updated:
2026-10-19

RHSA-2026:84585 - Security Advisory

Synopsis

Important: postgresql security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for postgresql is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662)
  • postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408)
  • postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464)
  • postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680)
  • postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677)
  • postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742)
  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)
  • postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)
  • postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)
  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)
  • postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2515302 - CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
  • BZ - 2515303 - CVE-2026-18408 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
  • BZ - 2515306 - CVE-2026-6464 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
  • BZ - 2515308 - CVE-2026-14680 postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
  • BZ - 2515313 - CVE-2026-14677 postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
  • BZ - 2515314 - CVE-2026-15742 postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
  • BZ - 2515316 - CVE-2026-16239 postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
  • BZ - 2515317 - CVE-2026-14669 postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
  • BZ - 2515321 - CVE-2026-14679 postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
  • BZ - 2515322 - CVE-2026-14671 postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
  • BZ - 2515325 - CVE-2026-14670 postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
postgresql-9.2.24-9.el7_9.7.src.rpm SHA-256: 7e0cb92273d25c67a777a0e3264700ecd805b6d55eaaa308de859a8d333f98ee
x86_64
postgresql-9.2.24-9.el7_9.7.i686.rpm SHA-256: b9b42b8de26f20ee4ec0874c4976cfaeeb012fc658855365d028a6a24fa58f31
postgresql-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: ea7749a2e6d4453b3447074619d1f1fed8b97f76ec0a88f805b24229f5f7f418
postgresql-contrib-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: 6961e05df8c23d5e44c8b116d42e5b788cb0a63b0077361b236ecfafe54319d2
postgresql-debuginfo-9.2.24-9.el7_9.7.i686.rpm SHA-256: ae0c063396d1462d0b503342ce5b13ed553f3dd7b787c5f085c85a1f3ef48b31
postgresql-debuginfo-9.2.24-9.el7_9.7.i686.rpm SHA-256: ae0c063396d1462d0b503342ce5b13ed553f3dd7b787c5f085c85a1f3ef48b31
postgresql-debuginfo-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: 8bcdfcab1ee7436413ea918722f7997fc04519917c254c50b926056d62b81a72
postgresql-debuginfo-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: 8bcdfcab1ee7436413ea918722f7997fc04519917c254c50b926056d62b81a72
postgresql-devel-9.2.24-9.el7_9.7.i686.rpm SHA-256: 60b8c7c30abf7b3d956695f6da4fe31988a116f9bbc0f1b96c48bf89c7817411
postgresql-devel-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: 8b5263b475bc3eac690f72f87a8a0c960eea01216e1dd290b9d9ab36f5b3526a
postgresql-docs-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: a2ba6b6b16dd9988f665b175775130ac46818593d951d9de0e827be3261eaacb
postgresql-libs-9.2.24-9.el7_9.7.i686.rpm SHA-256: 89b17efd222fd6e9946636f89a83e9179197f8c9bac4eaaf95a3de9206d1a90d
postgresql-libs-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: 2c656d103d3da81202a5f78d65ad642d19f71063cc311a964f19b45f202538f8
postgresql-plperl-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: ebebf41ad099b0129de4b6191f5569c4e663f072d3dafc698e4f4c00b4e3c3c7
postgresql-plpython-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: 3e5cf67c88ef37d0d2778887f2714417c1fdf84ccccd0ddb5b46920bfa159500
postgresql-pltcl-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: fcf1fbd6c3eeaba9492a14e617a992c685ab77146493b67125bfa9af19bf85ea
postgresql-server-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: 7dc0e230a8db454712ba773ef7cb08195aa3242e38128b5b776e1490d743a3d9
postgresql-static-9.2.24-9.el7_9.7.i686.rpm SHA-256: baaa8a1b55badb845473cb840cfa435688baf175db5d909607b849e3b851c7fb
postgresql-static-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: 0307fb729cb9980cda35b4f1659ea1b3152a0c909ce95450af1dae39d31d401c
postgresql-test-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: 5ff15f76e6e95f0d8bb6f0cb3dcb6aaa7eb46e19898d0625d548318fb38efa9c
postgresql-upgrade-9.2.24-9.el7_9.7.x86_64.rpm SHA-256: 494f3f70c11eeeeaadbdd4587de0bfdbc45e168265a7b1816c6177c8038a69f0

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
postgresql-9.2.24-9.el7_9.7.src.rpm SHA-256: 7e0cb92273d25c67a777a0e3264700ecd805b6d55eaaa308de859a8d333f98ee
s390x
postgresql-9.2.24-9.el7_9.7.s390.rpm SHA-256: 0d91d60b4d25ef193056b536c3e45bde421a30c015a48527432123602159b29e
postgresql-9.2.24-9.el7_9.7.s390x.rpm SHA-256: 33d5d332458d6d2c40f4d3f376e1074060aad4291a15b94cde5cf7d3ce22d4b2
postgresql-contrib-9.2.24-9.el7_9.7.s390x.rpm SHA-256: 28041cd52c8e1055460bf3f5de26bab0c92b29822469795a66da9bdc83828222
postgresql-debuginfo-9.2.24-9.el7_9.7.s390.rpm SHA-256: 02ebfe03c65c829b0a5fa8c55133f4d99fbdef9a3acf27ed6c300e30553864e2
postgresql-debuginfo-9.2.24-9.el7_9.7.s390.rpm SHA-256: 02ebfe03c65c829b0a5fa8c55133f4d99fbdef9a3acf27ed6c300e30553864e2
postgresql-debuginfo-9.2.24-9.el7_9.7.s390x.rpm SHA-256: b4560e9640c907c2f24c22567846d760fdf7ea759a9e9e96b10012f5a8d06c85
postgresql-debuginfo-9.2.24-9.el7_9.7.s390x.rpm SHA-256: b4560e9640c907c2f24c22567846d760fdf7ea759a9e9e96b10012f5a8d06c85
postgresql-devel-9.2.24-9.el7_9.7.s390.rpm SHA-256: f2928b03907a9d27f272aea1111655652352bc77d868a68c5ef7a29536ea9ce5
postgresql-devel-9.2.24-9.el7_9.7.s390x.rpm SHA-256: 874f02a5c68ecf873b1bbe9428503327c9b2551b69d668235d5ff9678fa3e439
postgresql-docs-9.2.24-9.el7_9.7.s390x.rpm SHA-256: a55cde8ce066465c6b32d63695b9b13b6e57bd3dee5fdb22b16d183a2049b57a
postgresql-libs-9.2.24-9.el7_9.7.s390.rpm SHA-256: aad340ee250ddb1bab849c7d2ea6b17a11a543d8adf07559660eedb130504eb9
postgresql-libs-9.2.24-9.el7_9.7.s390x.rpm SHA-256: 2dbec8a92cdb41f18f1e04a6373b3d32ddd53b949d21acb290cc3cf57ce34de9
postgresql-plperl-9.2.24-9.el7_9.7.s390x.rpm SHA-256: e40f2969a899962abb73a71ddac9162591a517c4918ff10f64e752cc8b8d6ac2
postgresql-plpython-9.2.24-9.el7_9.7.s390x.rpm SHA-256: b647efac26476ecbc551ddc095aba805714c59c1abfded1ceef1513abf27c344
postgresql-pltcl-9.2.24-9.el7_9.7.s390x.rpm SHA-256: 5b5c3698c4191714e38b58d9014e886c9a0889b6540907f2aa035f209db851a7
postgresql-server-9.2.24-9.el7_9.7.s390x.rpm SHA-256: 799e20e3dae596ad6fc31950b06eaf9e96c83a64940cd411d82fcef607932952
postgresql-static-9.2.24-9.el7_9.7.s390.rpm SHA-256: 5e811463092f0ab09bd7a5cab845cab98897bd6d3deb255cce7bd0540547a043
postgresql-static-9.2.24-9.el7_9.7.s390x.rpm SHA-256: 93771b587dfe6f7b7b73f78b4b4279e4896503ff9320a48a27762ac7c16c0aed
postgresql-test-9.2.24-9.el7_9.7.s390x.rpm SHA-256: 04e767bdce9f9343a20726dbd08bbd803fd2514ef6ccc720ba08660dd3be4325
postgresql-upgrade-9.2.24-9.el7_9.7.s390x.rpm SHA-256: ea21302dfee544509bdc413c6795ba712be235ad50b90ba9656610a5f1b360f3

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
postgresql-9.2.24-9.el7_9.7.src.rpm SHA-256: 7e0cb92273d25c67a777a0e3264700ecd805b6d55eaaa308de859a8d333f98ee
ppc64
postgresql-9.2.24-9.el7_9.7.ppc.rpm SHA-256: 258f063ab4f55b49d228b214fb87cfbf68a157e41131897abcc69b6a1f7221f3
postgresql-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: ead86fe4f08b33a4b572dfbdedc9cef62ec605a40b9ceba32b729a63574833cf
postgresql-contrib-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: 5a29637b310803c985fa11d9955b1c378beb8655ed36cbb73f7c87898731baae
postgresql-debuginfo-9.2.24-9.el7_9.7.ppc.rpm SHA-256: 67d3e48aa1f050dbdab1472f33b7abfac2394a64d3c7be0fd574b1e7c7d34b33
postgresql-debuginfo-9.2.24-9.el7_9.7.ppc.rpm SHA-256: 67d3e48aa1f050dbdab1472f33b7abfac2394a64d3c7be0fd574b1e7c7d34b33
postgresql-debuginfo-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: e021fae5180311ef7109a3efa7fe2d60173a5e7b97b5a4e57e5707d2618a0959
postgresql-debuginfo-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: e021fae5180311ef7109a3efa7fe2d60173a5e7b97b5a4e57e5707d2618a0959
postgresql-devel-9.2.24-9.el7_9.7.ppc.rpm SHA-256: fb6b88a503206cb0050698171ec0f17061b2c7184f5c373ba32bb7033960a7d5
postgresql-devel-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: 9a6bcd1eb75b2943050bd4683c3a4ee7186842331fc4f2f9d25c6957f3075c04
postgresql-docs-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: b9039070c2abdf0d97094ed6b76b6dbd540f0229602dadbb71c68e2c844b5155
postgresql-libs-9.2.24-9.el7_9.7.ppc.rpm SHA-256: 183d02128237b18c80e80bc6b3462e791084d7fe70856af46cf71a099dbfffef
postgresql-libs-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: 580694ad822548e8b35ab58199416d580f9fb7ab81a41db39d6fe3705d470a4c
postgresql-plperl-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: 07de86419900981dc373873799a169ef8394229466e0b2545819133e1af2bbcb
postgresql-plpython-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: 1e7b26c1f3d308a74ae902ff5fa6630bf201bd426f3fb63e5bf17c42508ad41f
postgresql-pltcl-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: 34171beea91919a867bb2105728879fa000099ff92b873e8d718f6ed89916e81
postgresql-server-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: 12f81bd72c322ed15baab9132a51ca3cede4991a1808db3880d5c76a9c1ac864
postgresql-static-9.2.24-9.el7_9.7.ppc.rpm SHA-256: 3c23ff39ef5b2a1ce216172805814867f283c60d8f85c8990873c3e894abd70f
postgresql-static-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: 6b49e125d13b1db2851f91530994993938b3fd186c294b5e93e5ffe06df404c2
postgresql-test-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: 31ca0220a2dd7b06036f22263416c605d21aa86ae291b78ac8ffe613c7b14893
postgresql-upgrade-9.2.24-9.el7_9.7.ppc64.rpm SHA-256: 62b0ca186147ee7f034badbf72cf447fe0a9854c76ebb4ab508929747fba39ac

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
postgresql-9.2.24-9.el7_9.7.src.rpm SHA-256: 7e0cb92273d25c67a777a0e3264700ecd805b6d55eaaa308de859a8d333f98ee
ppc64le
postgresql-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: a9c12a2eaa6834edf28ca336c9ea8451e1918f885ed9f8e09be7b9471186c172
postgresql-contrib-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: 6dce67b2c228816c5745d24042d9aee0ed148cc7954b48e0bd7f7a0e4ac080d3
postgresql-debuginfo-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: e1a27494b9b31a14803bb7733047f7bcd686faf194f1a6613e230af0375bd1e8
postgresql-debuginfo-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: e1a27494b9b31a14803bb7733047f7bcd686faf194f1a6613e230af0375bd1e8
postgresql-devel-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: 005ca4e5c811e4832b7182e06b78254fb3e7f6e5757a65e52e0a74d4bdb8d143
postgresql-docs-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: 9ff711feb6ee7f71cade27ea9cb0cf70e2193f6f175831eb382db9c482c45fef
postgresql-libs-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: 1a72ce88e912cbe2e9378711e97a1060ea7b88a184b9078bd20be28204bbe351
postgresql-plperl-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: e60201c214b2db3c429b8da20720bd31857ca2b40125075c5be0a298383ec9a8
postgresql-plpython-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: 8e1eadc2ecc25430610397ed32795c2f4c53cbb08273300d00eeb125e65fa843
postgresql-pltcl-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: 5ec1d0c84785e792f37aa5b4d1d910b1adfba0dea0ce91675bef7f131c626d1a
postgresql-server-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: 7de3e2eea85982904fa90e6da8c931f21a6fb992532a2e664cf2501d5c5058e8
postgresql-static-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: 7626d5e9422529f0d7509c77c0c9885418d8e8bb1535d33a9bf99c78df1ae339
postgresql-test-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: c85d03cb73a2c42eda515090218878a14392e704b76db540c5c570493355d9a5
postgresql-upgrade-9.2.24-9.el7_9.7.ppc64le.rpm SHA-256: 773d402d16ac4a2679499c240f114e13aff744ab6c89ee283290512aacae4ba8

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.