Important: postgresql:15 security update

🗓️ 22 Jun 2026 00:00:00Reported by AlmaLinuxType

almalinux🔗 errata.almalinux.org👁 22 Views

PostgreSQL 15 update fixes CVEs: symlink hijack, libpq buffer overflow, covert timing channel, integer overflow.

Reporter	Title	Published	Views	Family All 747
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities have been found in IBM Sovereign Core	28 Aug 202605:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	16 Jun 202615:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2026.	5 Aug 202607:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to credential exposure in PostgreSQL [CVE-2026-6478]	24 Aug 202622:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in PostgreSQL [CVE-2026-6473]	24 Aug 202622:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a privilege escalation in PostgreSQL [CVE-2026-6475]	24 Aug 202622:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps	1 Oct 202615:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM AIX and PowerVM VIOS	21 Aug 202616:38	–	ibm
FreeBSD	PostgreSQL -- Multiple vulnerabilities	14 May 202600:00	–	freebsd
Tenable Nessus	AIX : Multiple Vulnerabilities (IJ59563)	21 Aug 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	9	noarch	postgresql-test-rpm-macros	15.18-1.module_el9.8.0+267+7c71b4a4	postgresql-test-rpm-macros-15.18-1.module_el9.8.0+267+7c71b4a4.noarch.rpm
almalinux	9	ppc64le	postgresql	15.18-1.module_el9.8.0+267+7c71b4a4	postgresql-15.18-1.module_el9.8.0+267+7c71b4a4.ppc64le.rpm
almalinux	9	ppc64le	postgresql-pltcl	15.18-1.module_el9.8.0+267+7c71b4a4	postgresql-pltcl-15.18-1.module_el9.8.0+267+7c71b4a4.ppc64le.rpm
almalinux	9	ppc64le	postgresql-static	15.18-1.module_el9.8.0+267+7c71b4a4	postgresql-static-15.18-1.module_el9.8.0+267+7c71b4a4.ppc64le.rpm
almalinux	9	ppc64le	postgresql-server-devel	15.18-1.module_el9.8.0+267+7c71b4a4	postgresql-server-devel-15.18-1.module_el9.8.0+267+7c71b4a4.ppc64le.rpm
almalinux	9	ppc64le	postgresql-private-devel	15.18-1.module_el9.8.0+267+7c71b4a4	postgresql-private-devel-15.18-1.module_el9.8.0+267+7c71b4a4.ppc64le.rpm
almalinux	9	ppc64le	postgresql-plpython3	15.18-1.module_el9.8.0+267+7c71b4a4	postgresql-plpython3-15.18-1.module_el9.8.0+267+7c71b4a4.ppc64le.rpm
almalinux	9	ppc64le	postgresql-docs	15.18-1.module_el9.8.0+267+7c71b4a4	postgresql-docs-15.18-1.module_el9.8.0+267+7c71b4a4.ppc64le.rpm
almalinux	9	ppc64le	pg_repack	1.4.8-2.module_el9.5.0+119+18833d03	pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.ppc64le.rpm
almalinux	9	ppc64le	postgres-decoderbufs	1.9.7-1.Final.module_el9.3.0+52+21733919	postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.ppc64le.rpm

Source	Link
access	www.access.redhat.com/errata/RHSA-2026:28037
access	www.access.redhat.com/security/cve/CVE-2026-6473
access	www.access.redhat.com/security/cve/CVE-2026-6475
access	www.access.redhat.com/security/cve/CVE-2026-6477
access	www.access.redhat.com/security/cve/CVE-2026-6478
bugzilla	www.bugzilla.redhat.com/2477439
bugzilla	www.bugzilla.redhat.com/2477442
bugzilla	www.bugzilla.redhat.com/2477447
bugzilla	www.bugzilla.redhat.com/2477448
errata	www.errata.almalinux.org/9/ALSA-2026-28037.html

02 Jul 2026 09:30Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.8

EPSS0.01006

SSVC

base backup symlink hijack buffer overflow covert timing channel integer overflow