Back Linuxsecurity

Oracle Linux 8 PostgreSQL Important Security Advisory ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • June 24, 2026

pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pg_repack [1.5.1-1] - Update to 1.5.1 postgres-decoderbufs [2.4.0-1.Final] - Initial import for postgresql 16 stream - Related: RHEL-3636 postgresql [16.14-1] - Update to 16.14 - Fix CVE-2026-6478

pgaudit-16.0-1.module+el8.10.0+90275+c15b12cb.x86_64.rpm pg_repack-1.5.1-1.module+el8.10.0+90451+109c7b24.x86_64.rpm postgres-decoderbufs-2.4.0-1.Final.module+el8.10.0+90275+c15b12cb.x86_64.rpm postgresql-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-contrib-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-docs-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-plperl-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-plpython3-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-pltcl-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-private-devel-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-private-libs-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-server-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-server-devel-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-static-16.14-1.module+el8.10.0+90923+42a72dfe.x86_64.rpm postgresql-test-16.14-1.module+el8.10.0+90...

pgaudit-16.0-1.module+el8.10.0+90275+c15b12cb.aarch64.rpm pg_repack-1.5.1-1.module+el8.10.0+90451+109c7b24.aarch64.rpm postgres-decoderbufs-2.4.0-1.Final.module+el8.10.0+90275+c15b12cb.aarch64.rpm postgresql-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-contrib-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-docs-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-plperl-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-plpython3-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-pltcl-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-private-devel-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-private-libs-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-server-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-server-devel-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-static-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-test-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-test-rpm-macros-16.14-1.module+el8.10.0+90923+42a72dfe.noarch.rpm postgresql-upgrade-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm postgresql-upgrade-devel-16.14-1.module+el8.10.0+90923+42a72dfe.aarch64.rpm

Related CVEs: CVE-2026-6473 CVE-2026-6478

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical PostgreSQL Vulnerabilities in Oracle Linux 8 and 9 Oracle Linux has released important security advisories for PostgreSQL vulnerabilities affecting versions 15 and 16. CVE-2026-6478, a critical vulnerability, has been identified in PostgreSQL 15, prompting immediate updates. The vulnerabilities impact Oracle Linux 8 and 9, with specific advisories ELSA-2026-28037 and ELSA-2026-28143 detailing the necessary patches. PostgreSQL 16 is also affected, with updates available for pgaudit, pg_repack, and postgis modules. Administrators are urged to apply the patches promptly to mitigate risks. The vulnerabilities could lead to unauthorized access and data breaches if left unaddressed. The advisories emphasize the urgency of updating systems to the latest versions to protect against potential exploitation. 3 sources 72

Extracted Entities

CVEs (2)

CVE-2026-6473 CVE-2026-6478