Linux · Security advisory · September 16, 2026
ALSA-2026:67848: Security update for 24 packages
ALSA-2026:67848, released September 16, 2026, fixes 20 CVEs across 24 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
20
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0068
52nd percentile
Priority of the 20 CVEs
Patch now 0
Urgent 0
High 20
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| pg_repack | almalinux 9 | 1.5.3-1.module_el9.8.0+234+5456f35d |
| pgaudit | almalinux 9 | 18.0-1.module_el9.8.0+234+5456f35d |
| pgvector | almalinux 9 | 0.8.1-1.module_el9.8.0+234+5456f35d |
| postgis | almalinux 9 | 3.6.1-4.module_el9.8.0+310+22372bcc |
| postgis-client | almalinux 9 | 3.6.1-4.module_el9.8.0+310+22372bcc |
| postgis-docs | almalinux 9 | 3.6.1-4.module_el9.8.0+310+22372bcc |
| postgis-upgrade | almalinux 9 | 3.6.1-4.module_el9.8.0+310+22372bcc |
| postgis-utils | almalinux 9 | 3.6.1-4.module_el9.8.0+310+22372bcc |
| postgres-decoderbufs | almalinux 9 | 3.3.1-1.Final.module_el9.8.0+234+5456f35d |
| postgresql | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-contrib | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-docs | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-plperl | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-plpython3 | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-pltcl | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-private-devel | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-private-libs | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-server | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-server-devel | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-static | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-test | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-test-rpm-macros | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-upgrade | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
| postgresql-upgrade-devel | almalinux 9 | 18.6-1.module_el9.8.0+310+22372bcc |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-16239 | PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code | 8.8 | 0.0068 | None reported | |
| High | CVE-2026-14669 | postgresql-15: Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary c... | 8.8 | 0.0066 | None reported | |
| High | CVE-2026-15742 | PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound | 8.8 | 0.0060 | None reported | |
| High | CVE-2026-73515 | postgresql16-postgis: PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosu... | 8.8 | 0.0057 | None reported | |
| High | CVE-2026-6471 | PostgreSQL logical decoding can dlopen arbitrary file | 8.8 | 0.0053 | None reported | |
| High | CVE-2026-14662 | PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound | 8.8 | 0.0046 | None reported | |
| High | CVE-2026-14664 | PostgreSQL regexp heap buffer overflow executes arbitrary code | 8.8 | 0.0044 | None reported | |
| High | CVE-2026-14670 | PostgreSQL plperl tied object heap buffer overflow executes arbitrary code | 8.8 | 0.0044 | None reported | |
| High | CVE-2026-14676 | postgresql-18: Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operat... | 8.8 | 0.0044 | None reported | |
| High | CVE-2026-15741 | PostgreSQL expression deparse allows SQL injection via EXTRACT argument | 8.8 | 0.0044 | None reported | |
| High | CVE-2026-19385 | PostgreSQL pg_dump heap buffer overflow executes arbitrary code | 8.8 | 0.0043 | None reported | |
| High | CVE-2026-14671 | PostgreSQL refint plan cache type confusion executes arbitrary code | 8.8 | 0.0042 | None reported | |
| High | CVE-2026-14680 | PostgreSQL type confusion via "internal" arguments | 8.8 | 0.0042 | None reported | |
| High | CVE-2026-14677 | PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound | 8.8 | 0.0041 | None reported | |
| High | CVE-2026-16238 | PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code | 8.8 | 0.0041 | None reported | |
| High | CVE-2026-6464 | PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands | 8.8 | 0.0036 | None reported | |
| High | CVE-2026-18408 | PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client | 8.8 | 0.0036 | None reported | |
| High | CVE-2026-14668 | PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read | 8.8 | 0.0033 | None reported | |
| High | CVE-2026-14679 | postgresql-plperl-14: Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OU... | 8.8 | 0.0029 | None reported | |
| High | CVE-2026-6476 | pgaudit: PostgreSQL is an advanced object-relational database management system (DBMS) | 8.8 | 0.0029 | None reported |
Showing 1 to 20 of 20
1