RHSA-2026:4516

HIGH8.8

Red Hat Security Advisory: postgresql:13 security update

Published Mar 13, 2026

Modified 2 days ago

Fix available

Affected Packages(34 packages)

pg_repack

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:1.4.6-3.module+el8.5.0+11357+bcc62552

pg_repack-debuginfo

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:1.4.6-3.module+el8.5.0+11357+bcc62552

pg_repack-debugsource

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:1.4.6-3.module+el8.5.0+11357+bcc62552

pgaudit

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:1.5.0-1.module+el8.4.0+8873+b821c30a

pgaudit-debuginfo

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:1.5.0-1.module+el8.4.0+8873+b821c30a

pgaudit-debugsource

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:1.5.0-1.module+el8.4.0+8873+b821c30a

postgres-decoderbufs

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:0.10.0-2.module+el8.4.0+8873+b821c30a

postgres-decoderbufs-debuginfo

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:0.10.0-2.module+el8.4.0+8873+b821c30a

postgres-decoderbufs-debugsource

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:0.10.0-2.module+el8.4.0+8873+b821c30a

postgresql

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:13.23-1.module+el8.6.0+24072+5a7aa9c7.2

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:4516

REPORT

https://access.redhat.com/security/cve/CVE-2026-2004

REPORT

https://access.redhat.com/security/cve/CVE-2026-2005

REPORT

https://access.redhat.com/security/cve/CVE-2026-2006

ARTICLE

https://access.redhat.com/security/updates/classification/#important

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2439324

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2439325

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2439326

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2026-2004

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2026-2005

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2026-2006

ADVISORY

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4516.json

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-2004

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-2005

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-2006

ARTICLE

https://www.postgresql.org/support/security/CVE-2026-2004/

ARTICLE

https://www.postgresql.org/support/security/CVE-2026-2005/

ARTICLE

https://www.postgresql.org/support/security/CVE-2026-2006/

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Upstream

CVE-2026-2004 CVE-2026-2005 CVE-2026-2006

Ecosystems

Red Hat rhel_aus 8.6 appstream Red Hat rhel_e4s 8.6 appstream Red Hat rhel_tus 8.6 appstream

Timeline

PublishedMar 13, 2026

ModifiedMar 13, 2026