[El-errata] ELSA-2026-4059 Important: Oracle Linux 8 postgresql:15 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-4059

http://linux.oracle.com/errata/ELSA-2026-4059.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
pgaudit-1.7.0-1.module+el8.9.0+90110+d8a562d5.x86_64.rpm
pg_repack-1.4.8-1.module+el8.9.0+90110+d8a562d5.x86_64.rpm
postgres-decoderbufs-1.9.7-1.Final.module+el8.9.0+90110+d8a562d5.x86_64.rpm
postgresql-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-contrib-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-docs-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-plperl-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-plpython3-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-pltcl-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-private-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-private-libs-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-server-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-server-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-static-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-test-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-test-rpm-macros-15.17-1.module+el8.10.0+90834+1f1fb20a.noarch.rpm
postgresql-upgrade-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm
postgresql-upgrade-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.x86_64.rpm

aarch64:
pgaudit-1.7.0-1.module+el8.9.0+90110+d8a562d5.aarch64.rpm
pg_repack-1.4.8-1.module+el8.9.0+90110+d8a562d5.aarch64.rpm
postgres-decoderbufs-1.9.7-1.Final.module+el8.9.0+90110+d8a562d5.aarch64.rpm
postgresql-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-contrib-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-docs-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-plperl-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-plpython3-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-pltcl-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-private-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-private-libs-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-server-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-server-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-static-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-test-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-test-rpm-macros-15.17-1.module+el8.10.0+90834+1f1fb20a.noarch.rpm
postgresql-upgrade-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm
postgresql-upgrade-devel-15.17-1.module+el8.10.0+90834+1f1fb20a.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/pgaudit-1.7.0-1.module+el8.9.0+90110+d8a562d5.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/pg_repack-1.4.8-1.module+el8.9.0+90110+d8a562d5.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/postgres-decoderbufs-1.9.7-1.Final.module+el8.9.0+90110+d8a562d5.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/postgresql-15.17-1.module+el8.10.0+90834+1f1fb20a.src.rpm

Related CVEs:

CVE-2026-2004
CVE-2026-2005
CVE-2026-2006




Description of changes:

pgaudit
[1.7.0-1]
- Update to 1.7.0
- Support postgresql 15
- Related: #2128241

[1.5.0-1]
- Update to version 1.5.0
  Related: #1855776

[1.4.0-4]
- Bump release for rebuild against libpq-12.1-3

[1.4.0-3]
- BuildRequires libpq-devel

[1.4.0-2]
- BuildRequires postgresql-server-devel

[1.4.0-1]
- Update to 1.4.0

[1.3.1-1]
- Update to 1.3.1 and apply patch for pgsql v12 compatibility

[1.2.0-4]
- SCLize the SPEC

[1.2.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

pg_repack
[1.4.8-1]
- Update to version 1.4.8
- Postgresql 15 is supported
- Related: #2128241

[1.4.6-4]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688

[1.4.6-3]
- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065

[1.4.6-2]
- Build jit based on what postgresql server does
  Related: #1933048

[1.4.6-1]
- Rebase to upstream release 1.4.6

[1.4.5-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.4.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.4.5-1]
- Initial packaging

postgres-decoderbufs
[1.9.7-1.Final]
- Iitial import for postgresql 15 stream
- Related: #2128241

[1.4.0-4.Final]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688

[1.4.0-3.Final]
- Build jit based on what postgresql server does
  Related: #1933048

[1.4.0-2.Final]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[1.4.0-1.Final]
- Update to new release 1.4.0

[1.1.0-0.6.Final]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.1.0-0.5.Final]
- Rebuilt for protobuf 3.14

[1.1.0-0.4.Final]
- Rebuilt for protobuf 3.13

[1.1.0-0.3.Final]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.1.0-0.2.Final]
- Rebuilt for protobuf 3.12

postgresql
[15.17-1]
- Update to 15.17
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149369 RHEL-149403 RHEL-149337