RLSA-2026:27741

Опубликовано: 29 июл. 2026

Источник: rocky

Оценка: Important

Описание

Important: postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)
postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)
postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 9

Наименование	Архитектура	Релиз	RPM
postgresql	aarch64	3.el9_8	postgresql-13.23-3.el9_8.aarch64.rpm
postgresql-contrib	aarch64	3.el9_8	postgresql-contrib-13.23-3.el9_8.aarch64.rpm
postgresql-plperl	aarch64	3.el9_8	postgresql-plperl-13.23-3.el9_8.aarch64.rpm
postgresql-plpython3	aarch64	3.el9_8	postgresql-plpython3-13.23-3.el9_8.aarch64.rpm
postgresql-pltcl	aarch64	3.el9_8	postgresql-pltcl-13.23-3.el9_8.aarch64.rpm
postgresql-private-libs	aarch64	3.el9_8	postgresql-private-libs-13.23-3.el9_8.aarch64.rpm
postgresql-server	aarch64	3.el9_8	postgresql-server-13.23-3.el9_8.aarch64.rpm
postgresql-upgrade	aarch64	3.el9_8	postgresql-upgrade-13.23-3.el9_8.aarch64.rpm
postgresql	x86_64	3.el9_8	postgresql-13.23-3.el9_8.x86_64.rpm
postgresql-contrib	x86_64	3.el9_8	postgresql-contrib-13.23-3.el9_8.x86_64.rpm