RHSA-2026:4515 | Mondoo Vulnerability Intelligence

RHSA-2026:4515

HIGH8.8

Red Hat Security Advisory: postgresql:15 security update

Published Mar 13, 2026

Modified 2 days ago

Fix available

Affected Packages(37 packages)

pg_repack

Red Hat rhel_e4s 8.8 appstream

Fixed in:

0:1.4.8-1.module+el8.8.0+17071+aaaceaa4

pg_repack-debuginfo

Red Hat rhel_e4s 8.8 appstream

Fixed in:

0:1.4.8-1.module+el8.8.0+17071+aaaceaa4

pg_repack-debugsource

Red Hat rhel_e4s 8.8 appstream

Fixed in:

0:1.4.8-1.module+el8.8.0+17071+aaaceaa4

pgaudit

Red Hat rhel_e4s 8.8 appstream

Fixed in:

0:1.7.0-1.module+el8.8.0+17071+aaaceaa4

pgaudit-debuginfo

Red Hat rhel_e4s 8.8 appstream

Fixed in:

0:1.7.0-1.module+el8.8.0+17071+aaaceaa4

pgaudit-debugsource

Red Hat rhel_e4s 8.8 appstream

Fixed in:

0:1.7.0-1.module+el8.8.0+17071+aaaceaa4

postgres-decoderbufs

Red Hat rhel_e4s 8.8 appstream

Fixed in:

0:1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4

postgres-decoderbufs-debuginfo

Red Hat rhel_e4s 8.8 appstream

Fixed in:

0:1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4

postgres-decoderbufs-debugsource

Red Hat rhel_e4s 8.8 appstream

Fixed in:

0:1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4

postgresql

Red Hat rhel_e4s 8.8 appstream

Fixed in:

0:15.17-1.module+el8.8.0+24064+070714b8

References

https://access.redhat.com/errata/RHSA-2026:4515

https://access.redhat.com/security/cve/CVE-2026-2003

https://access.redhat.com/security/cve/CVE-2026-2004

https://access.redhat.com/security/cve/CVE-2026-2005

https://access.redhat.com/security/cve/CVE-2026-2006

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=2439322

https://bugzilla.redhat.com/show_bug.cgi?id=2439324

https://bugzilla.redhat.com/show_bug.cgi?id=2439325

https://bugzilla.redhat.com/show_bug.cgi?id=2439326

https://nvd.nist.gov/vuln/detail/CVE-2026-2003

https://nvd.nist.gov/vuln/detail/CVE-2026-2004

https://nvd.nist.gov/vuln/detail/CVE-2026-2005

https://nvd.nist.gov/vuln/detail/CVE-2026-2006

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4515.json

https://www.cve.org/CVERecord?id=CVE-2026-2003

https://www.cve.org/CVERecord?id=CVE-2026-2004

https://www.cve.org/CVERecord?id=CVE-2026-2005

https://www.cve.org/CVERecord?id=CVE-2026-2006

https://www.postgresql.org/support/security/CVE-2026-2003/

https://www.postgresql.org/support/security/CVE-2026-2004/

https://www.postgresql.org/support/security/CVE-2026-2005/

https://www.postgresql.org/support/security/CVE-2026-2006/

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Upstream

CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006

Ecosystems

Red Hat rhel_e4s 8.8 appstream

Timeline

PublishedMar 13, 2026

ModifiedMar 13, 2026