[El-errata] ELSA-2026-69924 Important: Oracle Linux 8 postgresql:12 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-69924

http://linux.oracle.com/errata/ELSA-2026-69924.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
postgresql-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-contrib-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-docs-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-plperl-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-plpython3-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-pltcl-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-server-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-server-devel-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-static-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-test-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-test-rpm-macros-12.22-10.0.1.module+el8.10.0+91042+87bee92d.noarch.rpm
postgresql-upgrade-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm
postgresql-upgrade-devel-12.22-10.0.1.module+el8.10.0+91042+87bee92d.x86_64.rpm

aarch64:
postgresql-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-contrib-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-docs-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-plperl-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-plpython3-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-pltcl-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-server-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-server-devel-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-static-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-test-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-test-rpm-macros-12.22-10.0.1.module+el8.10.0+91042+87bee92d.noarch.rpm
postgresql-upgrade-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm
postgresql-upgrade-devel-12.22-10.0.1.module+el8.10.0+91042+87bee92d.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/postgresql-12.22-10.0.1.module+el8.10.0+91042+87bee92d.src.rpm

Related CVEs:

CVE-2026-6464
CVE-2026-6471
CVE-2026-14662
CVE-2026-14664
CVE-2026-14668
CVE-2026-14669
CVE-2026-14670
CVE-2026-14671
CVE-2026-14677
CVE-2026-14679
CVE-2026-14680
CVE-2026-15742
CVE-2026-16239
CVE-2026-19385




Description of changes:

[12.22-10.0.1]
- Add backport of CVE-2025-8714 [Orabug: 38667546]

[12.22-10]
- Backport fixes for multiple CVEs
- Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669
- Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679
- Resolves: CVE-2026-14680, CVE-2026-15742, CVE-2026-16239, CVE-2026-19385
- Resolves: CVE-2026-6464, CVE-2026-6471

[12.22-9]
- Apply patch for CVE-2026-6479 in prep section
- Resolves: CVE-2026-6479

[12.22-8]
- Backport fix for CVE-2026-6479 from PostgreSQL 14.23
  (SSL/GSS init causes denial of service via uncontrolled recursion)
- Resolves: CVE-2026-6479

[12.22-7]
- Backport fix for CVE-2026-6478 from PostgreSQL 14.23
- Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473
- Resolves: RHEL-179790

[12.22-6]
- Fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006

[12.22-5]
- Fix previous Backport

[12.22-4]
- Backport CVE-2025-8715

[12.22-3]
- Fix backport for CVE-2025-1094

[12.22-2]
- Backport fix for CVE-2025-1094