Summary
PostgreSQL is an advanced object-relational database management system (DBMS).
Security Fix(es):
* postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
* postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | pg_repack | 0:1.5.1-1.module+el8.10.0+1900+d7340343 |
| Rocky Linux · 8 | pg_repack | 0:1.5.1-1.module+el8.10.0+40057+c37a0e3d |
| Rocky Linux · 8 | pgaudit | 0:16.0-1.module+el8.10.0+1622+bd25b19c |
| Rocky Linux · 8 | pgaudit | 0:16.0-1.module+el8.10.0+1858+fcc46a79 |
| Rocky Linux · 8 | pgaudit | 0:16.0-1.module+el8.10.0+40057+c37a0e3d |
| Rocky Linux · 8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+1622+bd25b19c |
| Rocky Linux · 8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+1858+fcc46a79 |
| Rocky Linux · 8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+40057+c37a0e3d |
Vulnerabilities 2
-
High 8.8
PostgreSQL server undersizes allocations, via integer wraparound
Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applic…
-
Medium 6.5
PostgreSQL discloses MD5-hashed passwords via covert timing channel
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, cu…