Multiple security vulnerabilities have been identified in PostgreSQL, an advanced object-relational database management system, affecting Red Hat Enterprise Linux 7 Extended Lifecycle Support. These vulnerabilities include arbitrary code execution via integer wraparound, untrusted data inclusion, type confusion, stack buffer overflow, and other memory corruption issues across various PostgreSQL components and extensions. The Red Hat advisory rates the security impact as Important and provides updates to address these issues.

Red Hat Security Advisory: postgresql security update

Multiple security vulnerabilities affecting PostgreSQL 12 have been addressed in a Red Hat security advisory. These include arbitrary code execution, privilege escalation, information disclosure, and buffer overflow issues across various PostgreSQL components and extensions. The advisory covers a broad range of CVEs, each describing different attack vectors such as integer wraparound, type confusion, heap buffer overflow, and SQL injection. The update is rated as having an important security impact and is intended for Red Hat Enterprise Linux 8.4 variants.

Red Hat Security Advisory: postgresql:12 security update

Multiple security vulnerabilities have been identified in PostgreSQL, an advanced object-relational database management system. These include arbitrary code execution, stack buffer overflows, information disclosure, and command execution via various vectors such as integer wraparound, type confusion, heap buffer overflow, and untrusted data handling in components like pg_dump, psql, logical decoding plugin, and plperl. Red Hat has issued a security advisory with updates for affected PostgreSQL packages in Red Hat Enterprise Linux 9.2 and related distributions.

Multiple security vulnerabilities have been identified in PostgreSQL 12 as used in Red Hat Enterprise Linux 8.6. These include arbitrary code execution, privilege escalation, information disclosure, and buffer overflow issues across various PostgreSQL components such as tsvector/tsquery functions, psql COPY FROM STDIN, logical decoding plugin, regexp processing, plperl, fuzzystrmatch, and others. Red Hat has issued a security advisory with updates addressing these issues.

Multiple security vulnerabilities affecting PostgreSQL 12 have been addressed in a Red Hat security advisory. These include arbitrary code execution, privilege escalation, stack buffer overflows, and information disclosure issues across various PostgreSQL components and extensions. The vulnerabilities arise from integer wraparound, type confusion, heap buffer overflows, SQL injection, and other flaws. The advisory rates the update as important and provides fixes for these issues in Red Hat Enterprise Linux 8.8. Users are advised to apply the security update to mitigate these risks.

Multiple security vulnerabilities affecting PostgreSQL have been addressed in a Red Hat Enterprise Linux 9.6 update. These include several arbitrary code execution flaws, stack buffer overflows, and information disclosure issues across various PostgreSQL components such as tsvector/tsquery functions, pg_dump, psql COPY FROM STDIN, logical decoding plugins, and procedural languages like plperl and pltcl. The update is rated as important by Red Hat and fixes numerous CVEs related to these issues.

Multiple security vulnerabilities affecting PostgreSQL have been addressed in a Red Hat Enterprise Linux 10.0 Extended Update Support security advisory. These include arbitrary code execution, stack buffer overflows, information disclosure, and privilege escalation issues across various PostgreSQL components such as psql, pg_dump, logical decoding plugins, and procedural languages. The advisory covers numerous CVEs with impacts ranging from code execution to SQL injection-based privilege escalation. The update is rated as important by Red Hat and applies to PostgreSQL 16 packages on Red Hat Enterprise Linux 10.0.

Red Hat Security Advisory: postgresql16 security update

Multiple security vulnerabilities have been identified in PostgreSQL, an advanced object-relational database management system. These vulnerabilities include various forms of arbitrary code execution, stack buffer overflows, and information disclosure caused by integer wraparound, type confusion, heap buffer overflows, and untrusted data handling in different PostgreSQL components and functions. Red Hat has issued a security advisory with updates to address these issues in their PostgreSQL packages for Red Hat Enterprise Linux 9.4. The vulnerabilities are rated as having an important security impact.

A security update for Red Hat Update Infrastructure 5.3 addresses multiple vulnerabilities including CVE-2026-14456, which affects the OpenSSL QUIC server implementation. This flaw allows a remote attacker to cause unbounded memory growth by sending numerous QUIC Initial packets, potentially leading to a denial of service. The vulnerability only affects systems explicitly enabling the QUIC server listener and not earlier OpenSSL versions or the FIPS module. Mitigations include rate-limiting or firewalling UDP port 443 to block or slow QUIC traffic, disabling QUIC if not needed, and upgrading OpenSSL when a fixed release is available.

Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update

Multiple security vulnerabilities affecting PostgreSQL 15 have been addressed in a Red Hat security update. These include several arbitrary code execution flaws, privilege escalation via SQL injection, and information disclosure issues. The vulnerabilities arise from integer wraparound, type confusion, heap buffer overflow, and other programming errors in various PostgreSQL components and extensions. The update is rated as important by Red Hat and applies to Red Hat Enterprise Linux 9.2 variants. Users are advised to apply the provided security update to mitigate these risks.

Red Hat Security Advisory: postgresql:15 security update

Multiple security vulnerabilities affecting PostgreSQL have been addressed in a Red Hat Enterprise Linux 9.4 update. These include arbitrary code execution, privilege escalation, stack and heap buffer overflows, and information disclosure issues across various PostgreSQL components and extensions. The update is rated as important by Red Hat Product Security and fixes numerous CVEs related to PostgreSQL 16 and associated modules.

Red Hat Security Advisory: postgresql:16 security update

Multiple security vulnerabilities affecting PostgreSQL 12 have been addressed in a Red Hat Enterprise Linux 8 update. These include arbitrary code execution, stack and heap buffer overflows, type confusion, and information disclosure issues across various PostgreSQL components and extensions. The update is rated as important by Red Hat and addresses numerous CVEs with high severity impacts.

Multiple security vulnerabilities affecting PostgreSQL 15 have been addressed in a Red Hat security advisory. These include several arbitrary code execution flaws, privilege escalation, stack buffer overflows, and information disclosure issues. The vulnerabilities arise from integer wraparound, type confusion, heap buffer overflows, SQL injection, and untrusted data handling in various PostgreSQL components such as tsvector, tsquery, pg_dump, psql, logical decoding plugins, and plperl. The advisory rates the impact as important and provides fixes for Red Hat Enterprise Linux 9.4 variants.

Multiple security vulnerabilities affecting PostgreSQL 15 have been addressed in a Red Hat security update. These include arbitrary code execution, privilege escalation, stack buffer overflows, and information disclosure issues across various PostgreSQL components such as tsvector/tsquery functions, pg_dump, psql COPY FROM STDIN, logical decoding plugins, and others. The update is rated as important by Red Hat Product Security and addresses a wide range of critical flaws.

Multiple security vulnerabilities affecting PostgreSQL have been addressed in a Red Hat Enterprise Linux 9.6 update. These include arbitrary code execution, privilege escalation, stack buffer overflows, and information disclosure issues across various PostgreSQL components and extensions. The update fixes numerous CVEs related to integer wraparound, type confusion, heap buffer overflows, SQL injection, and untrusted data handling.

A security update for PostgreSQL 16 addresses multiple vulnerabilities that could allow arbitrary code execution, privilege escalation, and information disclosure. These issues affect various PostgreSQL components including tsvector and tsquery functions, pg_dump, psql COPY FROM STDIN, logical decoding plugins, and several internal modules. The update is rated as important by Red Hat and fixes numerous critical security flaws.

Multiple security vulnerabilities affecting PostgreSQL 15 have been addressed in a Red Hat Enterprise Linux 9 update. These include arbitrary code execution, privilege escalation, information disclosure, and buffer overflow issues across various PostgreSQL components such as tsvector, tsquery, pg_dump, psql, logical decoding plugins, and procedural languages like plperl and pltcl. The update is rated as important by Red Hat and fixes numerous CVEs related to these issues.

Multiple security vulnerabilities affecting PostgreSQL have been addressed in a Red Hat Enterprise Linux 8 update for the postgresql:15 module. These include arbitrary code execution, privilege escalation, stack buffer overflows, and information disclosure issues across various PostgreSQL components such as tsvector, tsquery, pg_dump, psql, logical decoding plugins, and extensions like plperl and fuzzystrmatch. The update is rated as Important by Red Hat Product Security and addresses numerous CVEs with high severity impacts.

A security update for PostgreSQL 16 addresses multiple vulnerabilities that could lead to arbitrary code execution, privilege escalation, and information disclosure. These issues affect various PostgreSQL components including tsvector and tsquery functions, pg_dump, psql COPY FROM STDIN, logical decoding plugins, and others. The update is rated as important by Red Hat and fixes numerous CVEs related to buffer overflows, type confusion, integer wraparounds, and SQL injection.

Multiple security vulnerabilities have been identified in PostgreSQL, an advanced object-relational database management system. These include arbitrary code execution via various vectors such as integer wraparound, untrusted data inclusion, type confusion, heap buffer overflows, and stack buffer overflows. The vulnerabilities affect components including tsvector and tsquery functions, pg_dump, psql COPY FROM STDIN, logical decoding plugins, plperl, fuzzystrmatch, and others. Red Hat has issued a security advisory with updates for Red Hat Enterprise Linux 9 to address these issues.

Search: CVE-2026-6464