ALAS2-2026-3344

Amazon Linux 2 Security Advisory: ALAS2-2026-3344
Advisory Released Date: 2026-06-08
Advisory Updated Date: 2026-06-08
Severity: Important
Issue Overview:

Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like gets(), PQfn(..., result_is_int=0, ...) stores arbitrary-length, server-determined data into a buffer of unspecified size. Because both the \lo_export command in psql and pg_dump call lo_read(), the server superuser can overwrite pg_dump or psql stack memory. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. (CVE-2026-6477)

Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database. A distinct attack is possible if the application declares a user-controlled column as a "refint" cascade primary key and facilitates user-controlled updates to that column. In that case, a SQL injection allows a primary key update value provider to execute arbitrary SQL as the database user performing the primary key update. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. (CVE-2026-6637)


Affected Packages:

postgresql


Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update postgresql or yum update --advisory ALAS2-2026-3344 to update your system.

New Packages:
aarch64:
    postgresql-9.2.24-8.amzn2.0.10.aarch64
    postgresql-libs-9.2.24-8.amzn2.0.10.aarch64
    postgresql-server-9.2.24-8.amzn2.0.10.aarch64
    postgresql-docs-9.2.24-8.amzn2.0.10.aarch64
    postgresql-contrib-9.2.24-8.amzn2.0.10.aarch64
    postgresql-devel-9.2.24-8.amzn2.0.10.aarch64
    postgresql-static-9.2.24-8.amzn2.0.10.aarch64
    postgresql-upgrade-9.2.24-8.amzn2.0.10.aarch64
    postgresql-plperl-9.2.24-8.amzn2.0.10.aarch64
    postgresql-plpython-9.2.24-8.amzn2.0.10.aarch64
    postgresql-pltcl-9.2.24-8.amzn2.0.10.aarch64
    postgresql-test-9.2.24-8.amzn2.0.10.aarch64
    postgresql-debuginfo-9.2.24-8.amzn2.0.10.aarch64

i686:
    postgresql-9.2.24-8.amzn2.0.10.i686
    postgresql-libs-9.2.24-8.amzn2.0.10.i686
    postgresql-server-9.2.24-8.amzn2.0.10.i686
    postgresql-docs-9.2.24-8.amzn2.0.10.i686
    postgresql-contrib-9.2.24-8.amzn2.0.10.i686
    postgresql-devel-9.2.24-8.amzn2.0.10.i686
    postgresql-static-9.2.24-8.amzn2.0.10.i686
    postgresql-upgrade-9.2.24-8.amzn2.0.10.i686
    postgresql-plperl-9.2.24-8.amzn2.0.10.i686
    postgresql-plpython-9.2.24-8.amzn2.0.10.i686
    postgresql-pltcl-9.2.24-8.amzn2.0.10.i686
    postgresql-test-9.2.24-8.amzn2.0.10.i686
    postgresql-debuginfo-9.2.24-8.amzn2.0.10.i686

src:
    postgresql-9.2.24-8.amzn2.0.10.src

x86_64:
    postgresql-9.2.24-8.amzn2.0.10.x86_64
    postgresql-libs-9.2.24-8.amzn2.0.10.x86_64
    postgresql-server-9.2.24-8.amzn2.0.10.x86_64
    postgresql-docs-9.2.24-8.amzn2.0.10.x86_64
    postgresql-contrib-9.2.24-8.amzn2.0.10.x86_64
    postgresql-devel-9.2.24-8.amzn2.0.10.x86_64
    postgresql-static-9.2.24-8.amzn2.0.10.x86_64
    postgresql-upgrade-9.2.24-8.amzn2.0.10.x86_64
    postgresql-plperl-9.2.24-8.amzn2.0.10.x86_64
    postgresql-plpython-9.2.24-8.amzn2.0.10.x86_64
    postgresql-pltcl-9.2.24-8.amzn2.0.10.x86_64
    postgresql-test-9.2.24-8.amzn2.0.10.x86_64
    postgresql-debuginfo-9.2.24-8.amzn2.0.10.x86_64

Additional References

Release Notes:  Amazon Linux 2 Release Notes

Red Hat: CVE-2026-6477, CVE-2026-6637

Mitre: CVE-2026-6477, CVE-2026-6637