Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-contrib | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-debuginfo | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-devel | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-docs | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-libs | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-plperl | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-plpython | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-pltcl | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-server | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-static | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-test | 0:9.2.24-9.el7_9.6 |
| Red Hat · RHEL 7 ELS rhel_els:7 | postgresql-upgrade | 0:9.2.24-9.el7_9.6 |
Vulnerabilities 4
-
High 8.8
PostgreSQL server undersizes allocations, via integer wraparound
Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applic…
-
High 8.8
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like ge…
-
High 8.8
PostgreSQL refint allows stack buffer overflow and SQL injection
Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database. A distinct attack is possible if the application declares a user-controlled column as a "refi…
-
Medium 6.5
PostgreSQL discloses MD5-hashed passwords via covert timing channel
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, cu…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2477442
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2477443
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2477447
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2477448
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49521.json
-
report
https://access.redhat.com/security/cve/CVE-2026-6473
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-6473
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6473
-
article
https://www.postgresql.org/support/security/CVE-2026-6473/
-
report
https://access.redhat.com/security/cve/CVE-2026-6477
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-6477
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6477
-
article
https://www.postgresql.org/support/security/CVE-2026-6477/
-
report
https://access.redhat.com/security/cve/CVE-2026-6478
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-6478
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6478
-
article
https://www.postgresql.org/support/security/CVE-2026-6478/
-
report
https://access.redhat.com/security/cve/CVE-2026-6637
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-6637
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6637
-
article
https://www.postgresql.org/support/security/CVE-2026-6637/