import UBI postgresql-13.23-2.el9_7

SPECS/postgresql.spec

@@ -63,7 +63,7 @@ Summary: PostgreSQL client programs
 Name: postgresql
 %global majorversion 13
 Version: %{majorversion}.23
-Release: 1%{?dist}
+Release: 2%{?dist}
 
 # The PostgreSQL license is very similar to other MIT licenses, but the OSI
 # recognizes it as an independent license, so we do as well.
@@ -111,6 +111,7 @@ Patch8: postgresql-external-libpq.patch
 Patch9: postgresql-server-pg_config.patch
 Patch12: postgresql-no-libecpg.patch
 Patch14: postgresql-pgcrypto-openssl3-tests.patch
+Patch15: CVE-2026-2004--CVE-2026-2005--CVE-2026-2006.patch
 
 BuildRequires: make
 BuildRequires: gcc
@@ -426,6 +427,7 @@ goal of accelerating analytics queries.
 %endif
 %patch -P 9 -p1
 %patch -P 14 -p1
+%patch -P 15 -p1
 
 # We used to run autoconf here, but there's no longer any real need to,
 # since Postgres ships with a reasonably modern configure script.
@@ -1230,6 +1232,9 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
+* Wed Feb 25 2026 Filip Janus <fjanus@redhat.com> - 13.23-2
+- fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006
+
 * Fri Dec 05 2025 Filip Janus <fjanus@redhat.com> - 13.23-1
 - Update to 13.23
 - Resolves: RHEL-128812 (CVE-2025-12818)