Red Hat Security AdvisoryRHSA-2026:29815
postgresql:12 security update
Released 2026-06-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.src::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64::postgresql:12, pgaudit-1.4.0-5.module+el8.5.0+11354+78b3c9c5.src::postgresql:12 +17
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.src::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64::postgresql:12, pgaudit-1.4.0-5.module+el8.5.0+11354+78b3c9c5.src::postgresql:12 +17
Fixes 5 records
Priority MEDIUM 42
Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01006 · Published 2026-05-14 · Partial fix · 18.4, 17.10 +3 CWE-190
Priority MEDIUM 40
Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0037 · Published 2026-05-14 · Partial fix · 18.4, 17.10 +3 CWE-121
Priority MEDIUM 40
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00454 · Published 2026-05-14 · Partial fix · 18.4, 17.10 +3 CWE-242
Priority MEDIUM 40
Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0041 · Published 2026-05-14 · Partial fix · 18.4, 17.10 +3 CWE-61
Priority LOW 36
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00558 · Published 2026-05-14 · Partial fix · 18.4, 17.10 +3 CWE-385
THREATIST.IORead the docs