Mageia alert MGASA-2026-0347 (postgresql15, postgresql18)

From:
             
 
Mageia Updates <updates-announce@ml.mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2026-0347: Updated postgresql18 & postgresql15 packages fix security vulnerabilities
Date:
             
 
Mon, 31 Aug 2026 18:22:58 +0200
Message-ID:
             
 
<20260831162258.D531F9FEB0@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2026-0347 - Updated postgresql18 & postgresql15 packages fix security vulnerabilities

Publication date: 31 Aug 2026
URL: https://advisories.mageia.org/MGASA-2026-0347.html
Type: security
Affected Mageia releases: 10, 9
CVE: CVE-2026-6464,
     CVE-2026-6469,
     CVE-2026-6470,
     CVE-2026-6471,
     CVE-2026-14662,
     CVE-2026-14663,
     CVE-2026-14664,
     CVE-2026-14666,
     CVE-2026-14668,
     CVE-2026-14669,
     CVE-2026-14670,
     CVE-2026-14671,
     CVE-2026-14672,
     CVE-2026-14673,
     CVE-2026-14676,
     CVE-2026-14677,
     CVE-2026-14678,
     CVE-2026-14679,
     CVE-2026-14680,
     CVE-2026-14681,
     CVE-2026-15741,
     CVE-2026-15742,
     CVE-2026-16238,
     CVE-2026-16239,
     CVE-2026-16241,
     CVE-2026-18024,
     CVE-2026-18408,
     CVE-2026-19385

Description:
psql COPY FROM STDIN early failure processes data lines as psql
commands. (CVE-2026-6464)
ALTER TABLE ALTER TYPE resets extended statistics ownership.
(CVE-2026-6469)
Fails to check type USAGE privilege. (CVE-2026-6470)
Logical decoding can dlopen arbitrary file. (CVE-2026-6471)
tsvector and tsquery undersize allocations, via integer wraparound.
(CVE-2026-14662)
pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and
decrypts from cleartext. (CVE-2026-14663)
Regexp heap buffer overflow executes arbitrary code. (CVE-2026-14664)
Row security caching disregards role modifications. (CVE-2026-14666)
ctid type confusion in selectivity estimator discloses derivative of
arbitrary read. (CVE-2026-14668)
to_char heap buffer overflow executes arbitrary code. (CVE-2026-14669)
plperl tied object heap buffer overflow executes arbitrary code.
(CVE-2026-14670)
refint plan cache type confusion executes arbitrary code.
(CVE-2026-14671)
Observable response discrepancy with non-default scram_iterations
provides user existence oracle. (CVE-2026-14672)
amcheck does not clear untrusted search path. (CVE-2026-14673)
pg_stat_statements heap buffer overflow executes arbitrary code.
(CVE-2026-14676)
32-bit pltcl and plperl undersize allocations, via integer wraparound.
(CVE-2026-14677)
pg_trgm picksplit reads past end of buffer. (CVE-2026-14678)
Stack buffer overflow in argument match writes 0x0 and 0x1 to server
memory. (CVE-2026-14679)
Type confusion via "internal" arguments. (CVE-2026-14680)
Improper enforcement of GSSAPI encryption when coupled with SSL.
(CVE-2026-14681)
Expression deparse allows SQL injection via EXTRACT argument.
(CVE-2026-15741)
fuzzystrmatch writes effectively-arbitrary addresses, via integer
wraparound. (CVE-2026-15742)
Type confusion in pg_restore_attribute_stats() executes arbitrary code.
(CVE-2026-16238)
Type confusion in cursor CLOSE + DECLARE executes arbitrary code.
(CVE-2026-16239)
ECPG integer underflow can crash the client. (CVE-2026-16241)
ascii() function reads past end of buffer. (CVE-2026-18024)
psql \unrestrict lets superuser of pg_dump origin server execute
arbitrary code in psql client. (CVE-2026-18408)
pg_dump heap buffer overflow executes arbitrary code. (CVE-2026-19385)

References:
- https://bugs.mageia.org/show_bug.cgi?id=36165
-
https://www.postgresql.org/about/news/postgresql-186-1711...
- https://www.cve.org/CVERecord?id=CVE-2026-6464
- https://www.cve.org/CVERecord?id=CVE-2026-6469
- https://www.cve.org/CVERecord?id=CVE-2026-6470
- https://www.cve.org/CVERecord?id=CVE-2026-6471
- https://www.cve.org/CVERecord?id=CVE-2026-14662
- https://www.cve.org/CVERecord?id=CVE-2026-14663
- https://www.cve.org/CVERecord?id=CVE-2026-14664
- https://www.cve.org/CVERecord?id=CVE-2026-14666
- https://www.cve.org/CVERecord?id=CVE-2026-14668
- https://www.cve.org/CVERecord?id=CVE-2026-14669
- https://www.cve.org/CVERecord?id=CVE-2026-14670
- https://www.cve.org/CVERecord?id=CVE-2026-14671
- https://www.cve.org/CVERecord?id=CVE-2026-14672
- https://www.cve.org/CVERecord?id=CVE-2026-14673
- https://www.cve.org/CVERecord?id=CVE-2026-14676
- https://www.cve.org/CVERecord?id=CVE-2026-14677
- https://www.cve.org/CVERecord?id=CVE-2026-14678
- https://www.cve.org/CVERecord?id=CVE-2026-14679
- https://www.cve.org/CVERecord?id=CVE-2026-14680
- https://www.cve.org/CVERecord?id=CVE-2026-14681
- https://www.cve.org/CVERecord?id=CVE-2026-15741
- https://www.cve.org/CVERecord?id=CVE-2026-15742
- https://www.cve.org/CVERecord?id=CVE-2026-16238
- https://www.cve.org/CVERecord?id=CVE-2026-16239
- https://www.cve.org/CVERecord?id=CVE-2026-16241
- https://www.cve.org/CVERecord?id=CVE-2026-18024
- https://www.cve.org/CVERecord?id=CVE-2026-18408
- https://www.cve.org/CVERecord?id=CVE-2026-19385

SRPMS:
- 10/core/postgresql18-18.6-1.mga10
- 10/core/postgresql15-15.19-1.mga10
- 9/core/postgresql15-15.19-1.mga9