Back Linuxsecurity

Oracle Linux 9 PostgreSQL 15 Important Patch Vulnerability ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • June 26, 2026

pgaudit [1.7.0-1] - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 pg_repack [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 [1.4.8-1] - Update to version 1.4.8 - Postgresql 15 is supported - Related: #2128410 postgres-decoderbufs [1.9.7-1.Final] - Iitial import for postgresql 15 stream - Related: #2128410 postgresql [15.18-1] - Update to 15.18 - Fix CVE-2026-6478

pgaudit-1.7.0-1.module+el9.8.0+90926+92e334e4.x86_64.rpm pg_repack-1.4.8-2.module+el9.8.0+90926+92e334e4.x86_64.rpm postgres-decoderbufs-1.9.7-1.Final.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-contrib-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-docs-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-plperl-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-plpython3-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-pltcl-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-private-devel-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-private-libs-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-server-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-server-devel-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-static-15.18-1.module+el9.8.0+90926+92e334e4.x86_64.rpm postgresql-test-15.18-1.module+el9.8.0+90926+92e334e4.x...

pgaudit-1.7.0-1.module+el9.8.0+90926+92e334e4.aarch64.rpm pg_repack-1.4.8-2.module+el9.8.0+90926+92e334e4.aarch64.rpm postgres-decoderbufs-1.9.7-1.Final.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-contrib-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-docs-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-plperl-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-plpython3-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-pltcl-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-private-devel-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-private-libs-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-server-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-server-devel-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-static-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-test-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-test-rpm-macros-15.18-1.module+el9.8.0+90926+92e334e4.noarch.rpm postgresql-upgrade-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm postgresql-upgrade-devel-15.18-1.module+el9.8.0+90926+92e334e4.aarch64.rpm

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical PostgreSQL Vulnerabilities in Oracle Linux 8 and 9 Oracle Linux has released important security advisories for PostgreSQL vulnerabilities affecting versions 15 and 16. CVE-2026-6478, a critical vulnerability, has been identified in PostgreSQL 15, prompting immediate updates. The vulnerabilities impact Oracle Linux 8 and 9, with specific advisories ELSA-2026-28037 and ELSA-2026-28143 detailing the necessary patches. PostgreSQL 16 is also affected, with updates available for pgaudit, pg_repack, and postgis modules. Administrators are urged to apply the patches promptly to mitigate risks. The vulnerabilities could lead to unauthorized access and data breaches if left unaddressed. The advisories emphasize the urgency of updating systems to the latest versions to protect against potential exploitation. 3 sources 72

Extracted Entities

CVEs (4)

CVE-2026-6473 CVE-2026-6475 CVE-2026-6477 CVE-2026-6478

Platforms (3)

Oracle Linux 9 PostgreSQL 15 RHEL