RHSA-2026:4524

HIGH8.8

Red Hat Security Advisory: postgresql security update

Published Mar 13, 2026

Modified 2 days ago

Fix available

Affected Packages(27 packages)

postgresql

Red Hat rhel_eus 9.4 appstreamRed Hat rhel_eus 9.4 crb

Fixed in:

0:13.23-1.el9_4.1

postgresql-contrib

Red Hat rhel_eus 9.4 appstreamRed Hat rhel_eus 9.4 crb

Fixed in:

0:13.23-1.el9_4.1

postgresql-contrib-debuginfo

Red Hat rhel_eus 9.4 appstreamRed Hat rhel_eus 9.4 crb

Fixed in:

0:13.23-1.el9_4.1

postgresql-debuginfo

Red Hat rhel_eus 9.4 appstreamRed Hat rhel_eus 9.4 crb

Fixed in:

0:13.23-1.el9_4.1

postgresql-debugsource

Red Hat rhel_eus 9.4 appstreamRed Hat rhel_eus 9.4 crb

Fixed in:

0:13.23-1.el9_4.1

postgresql-docs

Red Hat rhel_eus 9.4 appstreamRed Hat rhel_eus 9.4 crb

Fixed in:

0:13.23-1.el9_4.1

postgresql-docs-debuginfo

Red Hat rhel_eus 9.4 appstreamRed Hat rhel_eus 9.4 crb

Fixed in:

0:13.23-1.el9_4.1

postgresql-plperl

Red Hat rhel_eus 9.4 appstreamRed Hat rhel_eus 9.4 crb

Fixed in:

0:13.23-1.el9_4.1

postgresql-plperl-debuginfo

Red Hat rhel_eus 9.4 appstreamRed Hat rhel_eus 9.4 crb

Fixed in:

0:13.23-1.el9_4.1

postgresql-plpython3

Red Hat rhel_eus 9.4 appstreamRed Hat rhel_eus 9.4 crb

Fixed in:

0:13.23-1.el9_4.1

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:4524

REPORT

https://access.redhat.com/security/cve/CVE-2026-2004

REPORT

https://access.redhat.com/security/cve/CVE-2026-2005

REPORT

https://access.redhat.com/security/cve/CVE-2026-2006

ARTICLE

https://access.redhat.com/security/updates/classification/#important

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2439324

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2439325

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2439326

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2026-2004

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2026-2005

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2026-2006

ADVISORY

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4524.json

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-2004

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-2005

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-2006

ARTICLE

https://www.postgresql.org/support/security/CVE-2026-2004/

ARTICLE

https://www.postgresql.org/support/security/CVE-2026-2005/

ARTICLE

https://www.postgresql.org/support/security/CVE-2026-2006/

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Upstream

CVE-2026-2004 CVE-2026-2005 CVE-2026-2006

Ecosystems

Red Hat rhel_eus 9.4 appstream Red Hat rhel_eus 9.4 crb

Timeline

PublishedMar 13, 2026

ModifiedMar 13, 2026