RHSA-2026:49521HighCVSS 8.8

Red Hat Security Advisory: postgresql security update

Published
August 3, 2026
Last Modified
August 5, 2026

🔗 CVE IDs covered (4)

CVE-2026-6477 →CVE-2026-6478 →CVE-2026-6637 →CVE-2026-6473 →

📋 Description

CVE-2026-6473 — postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write CVE-2026-6477 — postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6478 — postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison CVE-2026-6637 — postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module

🎯 Affected products77

  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • postgresql-0:9.2.24-9.el7_9.6.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-0:9.2.24-9.el7_9.6.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-0:9.2.24-9.el7_9.6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-0:9.2.24-9.el7_9.6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-0:9.2.24-9.el7_9.6.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-0:9.2.24-9.el7_9.6.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-0:9.2.24-9.el7_9.6.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-0:9.2.24-9.el7_9.6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-contrib-0:9.2.24-9.el7_9.6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-contrib-0:9.2.24-9.el7_9.6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-contrib-0:9.2.24-9.el7_9.6.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-contrib-0:9.2.24-9.el7_9.6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-debuginfo-0:9.2.24-9.el7_9.6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • postgresql-devel-0:9.2.24-9.el7_9.6.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • postgresql-devel-0:9.2.24-9.el7_9.6.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • +47 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this vulnerability, validate the length of data and the size of objects on all client APIs and web interfaces. Also, block, drop, or truncate oversized string, array, or binary objects before they are passed into backend SQL queries. Workaround: Only connect to trusted PostgreSQL servers. Avoid using psql or pg_dump against untrusted or potentially compromised database servers. Workaround: To mitigate this vulnerability, ensure that all PostgreSQL user passwords are not hashed using MD5. Users should migrate to stronger hashing algorithms such as `scram-sha-256`. This can be achieved by altering user passwords, which will automatically update their hash to the currently configured default. For example, to change a user's password: `ALTER USER username WITH PASSWORD 'new_password';` This action will require users to re-authenticate. If a service relies on these credentials, it may require a restart to pick up the new authentication details.

🔗 References (7)