[El-errata] ELSA-2026-4063 Important: Oracle Linux 8 postgresql:16 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-4063

http://linux.oracle.com/errata/ELSA-2026-4063.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
pgaudit-16.0-1.module+el8.10.0+90275+c15b12cb.x86_64.rpm
pg_repack-1.5.1-1.module+el8.10.0+90451+109c7b24.x86_64.rpm
postgres-decoderbufs-2.4.0-1.Final.module+el8.10.0+90275+c15b12cb.x86_64.rpm
postgresql-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-contrib-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-docs-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-plperl-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-plpython3-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-pltcl-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-private-devel-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-private-libs-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-server-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-server-devel-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-static-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-test-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-test-rpm-macros-16.13-1.module+el8.10.0+90835+54dee7b0.noarch.rpm
postgresql-upgrade-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm
postgresql-upgrade-devel-16.13-1.module+el8.10.0+90835+54dee7b0.x86_64.rpm

aarch64:
pgaudit-16.0-1.module+el8.10.0+90275+c15b12cb.aarch64.rpm
pg_repack-1.5.1-1.module+el8.10.0+90451+109c7b24.aarch64.rpm
postgres-decoderbufs-2.4.0-1.Final.module+el8.10.0+90275+c15b12cb.aarch64.rpm
postgresql-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-contrib-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-docs-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-plperl-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-plpython3-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-pltcl-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-private-devel-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-private-libs-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-server-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-server-devel-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-static-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-test-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-test-rpm-macros-16.13-1.module+el8.10.0+90835+54dee7b0.noarch.rpm
postgresql-upgrade-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm
postgresql-upgrade-devel-16.13-1.module+el8.10.0+90835+54dee7b0.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/pgaudit-16.0-1.module+el8.10.0+90275+c15b12cb.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/pg_repack-1.5.1-1.module+el8.10.0+90451+109c7b24.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/postgres-decoderbufs-2.4.0-1.Final.module+el8.10.0+90275+c15b12cb.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/postgresql-16.13-1.module+el8.10.0+90835+54dee7b0.src.rpm

Related CVEs:

CVE-2026-2004
CVE-2026-2005
CVE-2026-2006




Description of changes:

pgaudit
[16.0-1]
- Update to 16.0
- Support postgresql 16
- Initial import for PG 16 module
- Resolves: RHEL-3636

pg_repack
[1.5.1-1]
- Update to 1.5.1

postgres-decoderbufs
[2.4.0-1.Final]
- Initial import for postgresql 16 stream
- Related: RHEL-3636

postgresql
[16.13-1]
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149371 RHEL-149404 RHEL-149338