Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

ELSA-2026-3887 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceELSA-2026-3887

ELSA-2026-3887

UNKNOWN

ELSA-2026-3887: postgresql16 security update (IMPORTANT)

Published Mar 5, 2026

Modified 1 months ago

Fix available

Details

[16.13-1.0.1]

Replace upstream reference [Orabug: 37044148]

[16.13-1]

Update to 16.13
Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
Resolves: RHEL-149364 RHEL-149398 RHEL-149332

Affected Packages(15 packages)

postgresql

OracleLinux 10

Fixed in:

0:16.13-1.0.1.el10_1

postgresql-contrib

OracleLinux 10

Fixed in:

0:16.13-1.0.1.el10_1

postgresql-docs

OracleLinux 10

Fixed in:

0:16.13-1.0.1.el10_1

postgresql-plperl

OracleLinux 10

Fixed in:

0:16.13-1.0.1.el10_1

postgresql-plpython3

OracleLinux 10

Fixed in:

0:16.13-1.0.1.el10_1

postgresql-pltcl

OracleLinux 10

Fixed in:

0:16.13-1.0.1.el10_1

postgresql-private-devel

OracleLinux 10

Fixed in:

0:16.13-1.0.1.el10_1

postgresql-private-libs

OracleLinux 10

Fixed in:

0:16.13-1.0.1.el10_1

postgresql-server

OracleLinux 10

Fixed in:

0:16.13-1.0.1.el10_1

postgresql-server-devel

OracleLinux 10

Fixed in:

0:16.13-1.0.1.el10_1

Related

CVE-2026-2004 CVE-2026-2005 CVE-2026-2006

Ecosystems

Timeline

PublishedMar 5, 2026

ModifiedMar 5, 2026