[El-errata] ELSA-2026-4024 Important: Oracle Linux 8 postgresql:13 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-4024

http://linux.oracle.com/errata/ELSA-2026-4024.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
pgaudit-1.5.0-1.module+el8.9.0+90098+1560b6c2.x86_64.rpm
pg_repack-1.4.6-3.module+el8.9.0+90098+1560b6c2.x86_64.rpm
postgres-decoderbufs-0.10.0-2.module+el8.9.0+90098+1560b6c2.x86_64.rpm
postgresql-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-contrib-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-docs-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-plperl-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-plpython3-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-pltcl-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-server-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-server-devel-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-static-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-test-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-test-rpm-macros-13.23-2.module+el8.10.0+90833+a7c23b2e.noarch.rpm
postgresql-upgrade-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm
postgresql-upgrade-devel-13.23-2.module+el8.10.0+90833+a7c23b2e.x86_64.rpm

aarch64:
pgaudit-1.5.0-1.module+el8.9.0+90098+1560b6c2.aarch64.rpm
pg_repack-1.4.6-3.module+el8.9.0+90098+1560b6c2.aarch64.rpm
postgres-decoderbufs-0.10.0-2.module+el8.9.0+90098+1560b6c2.aarch64.rpm
postgresql-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-contrib-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-docs-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-plperl-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-plpython3-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-pltcl-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-server-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-server-devel-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-static-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-test-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-test-rpm-macros-13.23-2.module+el8.10.0+90833+a7c23b2e.noarch.rpm
postgresql-upgrade-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm
postgresql-upgrade-devel-13.23-2.module+el8.10.0+90833+a7c23b2e.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/pgaudit-1.5.0-1.module+el8.9.0+90098+1560b6c2.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/pg_repack-1.4.6-3.module+el8.9.0+90098+1560b6c2.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/postgres-decoderbufs-0.10.0-2.module+el8.9.0+90098+1560b6c2.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/postgresql-13.23-2.module+el8.10.0+90833+a7c23b2e.src.rpm

Related CVEs:

CVE-2026-2004
CVE-2026-2005
CVE-2026-2006




Description of changes:

pgaudit
[1.5.0-1]
- Update to version 1.5.0
  Related: #1855776

[1.4.0-4]
- Bump release for rebuild against libpq-12.1-3

[1.4.0-3]
- BuildRequires libpq-devel

[1.4.0-2]
- BuildRequires postgresql-server-devel

[1.4.0-1]
- Update to 1.4.0

[1.3.1-1]
- Update to 1.3.1 and apply patch for pgsql v12 compatibility

[1.2.0-4]
- SCLize the SPEC

[1.2.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.2.0-1]
- Initial RPM packaging for Fedora
- Based on Devrim Gündüz's packaging for PostgreSQL RPM Repo

pg_repack
[1.4.6-3]
- Release bump - enable gating

[1.4.6-2]
- Rebuild
- Resolves:#1954442

[1.4.6-1]
- Rebase to upstream release 1.4.6

[1.4.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.4.5-1]
- Initial packaging

postgres-decoderbufs
[0.10.0-2]
- Release bump for rebuild against libpq-12.1-3

* Wed Oct 09 2019 Patrik Novotný <panovotn at redhat.com - 0-10-0-1
- Initial release for upstream version 0.10.0

postgresql
[13.23-2]
- fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006

[13.23-1]
- Update to 13.23
- Resolves: RHEL-128818 (CVE-2025-12818)

[13.22-1]
- Update to 13.22

[13.20-1]
- Update to 13.20
- Fix CVE-2025-1094

[13.18-1]
- Update to 13.18
- Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979

[13.16-1]
- Update to 13.16
- Fix CVE-2024-7348

[13.14-1]
- Update to 13.14
- Fix CVE-2024-0985

[13.13-1]
- Update to 13.13
- Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417

[13.11-2]
- Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
- Resolves: #2207933

[13.11-1]
- Update to 13.11
- Resolves: #2212815