RHSA-2026:34043HighCVSS 8.8

Red Hat Security Advisory: postgresql:12 security update

Published
July 1, 2026
Last Modified
August 5, 2026

🔗 CVE IDs covered (5)

CVE-2026-6473 →CVE-2026-6475 →CVE-2026-6477 →CVE-2026-6478 →CVE-2026-6637 →

📋 Description

CVE-2026-6473 — postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write CVE-2026-6475 — postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind CVE-2026-6477 — postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6478 — postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison CVE-2026-6637 — postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module

🎯 Affected products111

  • Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • pg_repack-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pg_repack-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.src (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pg_repack-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.src (postgresql:12) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • pg_repack-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pg_repack-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • pg_repack-debuginfo-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pg_repack-debuginfo-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pg_repack-debuginfo-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • pg_repack-debugsource-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pg_repack-debugsource-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pg_repack-debugsource-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • pgaudit-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.ppc64le (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pgaudit-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.src (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pgaudit-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.src (postgresql:12) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • pgaudit-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pgaudit-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • pgaudit-debuginfo-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.ppc64le (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pgaudit-debuginfo-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pgaudit-debuginfo-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • pgaudit-debugsource-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.ppc64le (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pgaudit-debugsource-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • pgaudit-debugsource-0:1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.5.0+11354+78b3c9c5.ppc64le (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.5.0+11354+78b3c9c5.src (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.5.0+11354+78b3c9c5.src (postgresql:12) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64 (postgresql:12) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • postgres-decoderbufs-debuginfo-0:0.10.0-2.module+el8.5.0+11354+78b3c9c5.ppc64le (postgresql:12) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • +81 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this vulnerability, validate the length of data and the size of objects on all client APIs and web interfaces. Also, block, drop, or truncate oversized string, array, or binary objects before they are passed into backend SQL queries. Workaround: Only connect to trusted PostgreSQL servers. Avoid using psql or pg_dump against untrusted or potentially compromised database servers. Workaround: To mitigate this vulnerability, ensure that all PostgreSQL user passwords are not hashed using MD5. Users should migrate to stronger hashing algorithms such as `scram-sha-256`. This can be achieved by altering user passwords, which will automatically update their hash to the currently configured default. For example, to change a user's password: `ALTER USER username WITH PASSWORD 'new_password';` This action will require users to re-authenticate. If a service relies on these credentials, it may require a restart to pick up the new authentication details.

🔗 References (7)