RHSA-2026:27742
Vulnerability from csaf_redhat - Published: 2026-06-22 06:10 - Updated: 2026-09-14 11:48Summary
Red Hat Security Advisory: postgresql18 security update
Severity
Important
Notes
Topic: An update for postgresql18 is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.
Security Fix(es):
* postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)
* postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)
* postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
* postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in PostgreSQL CREATE TYPE handling for multirange types. The database failed to properly verify schema CREATE privileges during multirange type creation. An authenticated database user could exploit this issue to hijack queries that rely on search_path resolution for user-defined or extension-defined types, potentially causing execution of arbitrary SQL functions within the affected database context.
5.4 (Medium)
Affected products
Fixed
106 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in PostgreSQL. An integer overflow in multiple server features allows an unprivileged database user to cause an undersized memory allocation that leads to an out-of-bounds write. This issue allows an attacker to execute arbitrary code as the operating system user running the database or, in applications that pass gigabyte-scale user inputs to the relevant database functions, to cause a segmentation fault, resulting in a denial of service.
8.8 (High)
Affected products
Fixed
106 products, the same list as for
CVE-2026-6472
Threats
Impact
Important
A flaw was found in PostgreSQL. This vulnerability, an externally-controlled format string in the `timeofday()` function, allows a remote attacker to craft specific timezone zones. Successful exploitation can lead to the retrieval of sensitive portions of server memory, potentially disclosing confidential information.
4.3 (Medium)
Affected products
Fixed
106 products, the same list as for
CVE-2026-6472
Threats
Impact
Moderate
A flaw was found in PostgreSQL. This vulnerability, related to symlink following in pg_basebackup (plain format) and pg_rewind, allows an origin superuser to overwrite local files. By exploiting this, an attacker could potentially hijack the operating system account. This attack has practical implications if specific actions are taken, such as moving files to a different virtual machine (VM) or snapshotting the VM, between the execution of these commands and the server's restart.
6.7 (Medium)
Affected products
Fixed
106 products, the same list as for
CVE-2026-6472
Threats
Impact
Moderate
A flaw was found in PostgreSQL. An attacker with `pg_create_subscription` rights can exploit a SQL injection vulnerability in the `pg_createsubscriber` utility. This allows the attacker to execute arbitrary SQL commands with superuser privileges when `pg_createsubscriber` is next run, leading to potential compromise of the database system.
7.2 (High)
Affected products
Fixed
106 products, the same list as for
CVE-2026-6472
Threats
Impact
Important
A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as lo_export(), lo_read(), lo_lseek64(), and lo_tell64(). This allows the superuser to send an arbitrarily large response, overwriting the client's stack memory, specifically in tools like psql and pg_dump. This could lead to arbitrary code execution on the client system.
8.4 (High)
Affected products
Fixed
106 products, the same list as for
CVE-2026-6472
Threats
Impact
Important
A flaw was found in PostgreSQL. This vulnerability, a covert timing channel, exists in the comparison of MD5-hashed passwords during authentication. A remote attacker could exploit this to recover user credentials, gaining unauthorized access to the database. This issue specifically impacts databases that retain MD5-hashed passwords from upgrades of PostgreSQL 13 or earlier.
8.2 (High)
Affected products
Fixed
106 products, the same list as for
CVE-2026-6472
Threats
Impact
Important
A flaw was found in PostgreSQL. Uncontrolled recursion during SSL (Secure Sockets Layer) and GSS (Generic Security Service) negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AF_UNIX socket. If SSL and GSS are both disabled, the same denial of service can be achieved via a PostgreSQL TCP socket.
7.5 (High)
Affected products
Fixed
106 products, the same list as for
CVE-2026-6472
Threats
Impact
Important
A flaw was found in PostgreSQL. This buffer over-read vulnerability in the `pg_restore_attribute_stats()` function allows a table maintainer to infer memory values. By providing array values of unmatched length, a malicious table maintainer can cause query planning to read past the end of an array, leading to information disclosure.
4.3 (Medium)
Affected products
Fixed
106 products, the same list as for
CVE-2026-6472
Threats
Impact
Moderate
A flaw was found in PostgreSQL. A stack buffer overflow in the 'refint' module allows an unprivileged database user to execute arbitrary code as the operating system user running the database. Additionally, a separate vulnerability exists where, if an application uses a user-controlled column as a 'refint' cascade primary key and allows user-controlled updates, a SQL injection can enable an attacker to execute arbitrary SQL commands as the database user performing the update.
8.8 (High)
Affected products
Fixed
106 products, the same list as for
CVE-2026-6472
Threats
Impact
Important
A flaw was found in PostgreSQL. This SQL injection vulnerability exists within the logical replication feature, specifically when using the ALTER SUBSCRIPTION ... REFRESH PUBLICATION command. A malicious subscriber table creator can exploit this flaw to execute arbitrary SQL commands with the elevated privileges of the subscription's publication-side credentials. The attack is triggered when the REFRESH PUBLICATION command is next executed.
CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Affected products
Fixed
106 products, the same list as for
CVE-2026-6472
Threats
Impact
Moderate
References
62 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for postgresql18 is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you\u0027ll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.\n\nSecurity Fix(es):\n\n* postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)\n\n* postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)\n\n* postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)\n\n* postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:27742",
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2477439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477439"
},
{
"category": "external",
"summary": "2477442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477442"
},
{
"category": "external",
"summary": "2477447",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477447"
},
{
"category": "external",
"summary": "2477448",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477448"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27742.json"
}
],
"title": "Red Hat Security Advisory: postgresql18 security update",
"tracking": {
"current_release_date": "2026-09-14T11:48:49+00:00",
"generator": {
"date": "2026-09-14T11:48:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.21"
}
},
"id": "RHSA-2026:27742",
"initial_release_date": "2026-06-22T06:10:47+00:00",
"revision_history": [
{
"date": "2026-06-22T06:10:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-22T06:10:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-14T11:48:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql18-0:18.4-1.el10_2.src",
"product": {
"name": "postgresql18-0:18.4-1.el10_2.src",
"product_id": "postgresql18-0:18.4-1.el10_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18@18.4-1.el10_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql18-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-contrib@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-docs-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-docs-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-docs-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-docs@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plperl@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plpython3@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-devel@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-libs@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-server-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-server-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-devel@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-static-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-static-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-static-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-static@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-test-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-test-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-test-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-test@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-devel@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-debugsource@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-contrib-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-docs-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plperl-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plpython3-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-pltcl-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-libs-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-devel-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-test-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"product": {
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"product_id": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-devel-debuginfo@18.4-1.el10_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql18-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-contrib@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-docs@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plperl@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plpython3@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-devel@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-libs@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-server-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-server-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-devel@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-static-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-static-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-static-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-static@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-test-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-test-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-test-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-test@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-devel@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-debugsource@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-contrib-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-docs-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plperl-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plpython3-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-pltcl-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-libs-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-devel-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-test-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"product": {
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_id": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-devel-debuginfo@18.4-1.el10_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql18-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-contrib-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-contrib-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-contrib-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-contrib@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-docs-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-docs-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-docs-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-docs@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plperl-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-plperl-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-plperl-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plperl@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plpython3@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-devel@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-libs@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-server-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-server-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-devel@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-static-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-static-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-static-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-static@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-test-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-test-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-test-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-test@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-devel@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-debugsource@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-contrib-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-docs-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plperl-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plpython3-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-pltcl-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-libs-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-devel-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-test-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"product": {
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"product_id": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-devel-debuginfo@18.4-1.el10_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql18-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-contrib@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-docs-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-docs-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-docs-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-docs@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plperl@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plpython3@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-devel@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-libs@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-server-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-server-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-devel@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-static-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-static-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-static-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-static@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-test-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-test-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-test-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-test@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-devel@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-debugsource@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-contrib-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-docs-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plperl-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-plpython3-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-pltcl-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-private-libs-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-server-devel-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-test-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"product": {
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"product_id": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-upgrade-devel-debuginfo@18.4-1.el10_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch",
"product": {
"name": "postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch",
"product_id": "postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/postgresql18-test-rpm-macros@18.4-1.el10_2?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-0:18.4-1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src"
},
"product_reference": "postgresql18-0:18.4-1.el10_2.src",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-contrib-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-contrib-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-contrib-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-contrib-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-contrib-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-debugsource-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-debugsource-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-debugsource-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-debugsource-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-docs-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-docs-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-docs-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-docs-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-docs-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-docs-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-docs-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plperl-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plperl-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plperl-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-plperl-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plperl-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plpython3-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plpython3-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plpython3-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plpython3-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-devel-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-devel-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-devel-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-devel-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-libs-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-libs-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-libs-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-libs-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-server-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-server-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-server-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-server-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-devel-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-devel-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-devel-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-devel-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-static-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-static-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-static-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-static-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-static-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-static-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-static-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-static-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-test-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-test-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-test-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-test-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-test-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-test-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-test-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-test-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64"
},
"product_reference": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le"
},
"product_reference": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x"
},
"product_reference": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64"
},
"product_reference": "postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
},
"product_reference": "postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch",
"relates_to_product_reference": "CRB-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6472",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2026-05-14T14:01:10.230544+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477436"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL CREATE TYPE handling for multirange types. The database failed to properly verify schema CREATE privileges during multirange type creation. An authenticated database user could exploit this issue to hijack queries that rely on search_path resolution for user-defined or extension-defined types, potentially causing execution of arbitrary SQL functions within the affected database context.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects PostgreSQL multirange type creation functionality. Red Hat Product Security has assessed this issue as a Moderate severity vulnerability.\n\nThe vulnerability does not directly provide operating system command execution or PostgreSQL superuser privileges. The impact is limited to the affected database context and depends on application query behavior and schema resolution patterns. Therefore, Red Hat assessed the Confidentiality and Integrity impacts as Low (C:L/I:L), with no demonstrated Availability impact (A:N).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6472"
},
{
"category": "external",
"summary": "RHBZ#2477436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477436"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6472",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6472"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6472",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6472"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6472/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6472/"
}
],
"release_date": "2026-05-14T13:00:02.086000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege"
},
{
"cve": "CVE-2026-6473",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-14T14:01:48.197406+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477448"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. An integer overflow in multiple server features allows an unprivileged database user to cause an undersized memory allocation that leads to an out-of-bounds write. This issue allows an attacker to execute arbitrary code as the operating system user running the database or, in applications that pass gigabyte-scale user inputs to the relevant database functions, to cause a segmentation fault, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker with minimal access to a database needs to pass extremely large inputs to vulnerable database functions, causing an integer overflow that leads to an out-of-bounds write. This flaw allows an attacker to potentially execute arbitrary code or, more likely, cause a denial of service.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6473"
},
{
"category": "external",
"summary": "RHBZ#2477448",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477448"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6473",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6473"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6473",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6473"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6473/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6473/"
}
],
"release_date": "2026-05-14T13:00:09.446000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, validate the length of data and the size of objects on all client APIs and web interfaces. Also, block, drop, or truncate oversized string, array, or binary objects before they are passed into backend SQL queries.",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write"
},
{
"cve": "CVE-2026-6474",
"cwe": {
"id": "CWE-134",
"name": "Use of Externally-Controlled Format String"
},
"discovery_date": "2026-05-14T14:01:28.018770+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477441"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. This vulnerability, an externally-controlled format string in the `timeofday()` function, allows a remote attacker to craft specific timezone zones. Successful exploitation can lead to the retrieval of sensitive portions of server memory, potentially disclosing confidential information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Information disclosure via externally-controlled format string in timeofday() function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6474"
},
{
"category": "external",
"summary": "RHBZ#2477441",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477441"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6474",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6474"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6474",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6474"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6474/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6474/"
}
],
"release_date": "2026-05-14T13:00:10.254000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: PostgreSQL: Information disclosure via externally-controlled format string in timeofday() function"
},
{
"cve": "CVE-2026-6475",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-05-14T14:01:20.040061+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477439"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. This vulnerability, related to symlink following in pg_basebackup (plain format) and pg_rewind, allows an origin superuser to overwrite local files. By exploiting this, an attacker could potentially hijack the operating system account. This attack has practical implications if specific actions are taken, such as moving files to a different virtual machine (VM) or snapshotting the VM, between the execution of these commands and the server\u0027s restart.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This MODERATE symlink following vulnerability in PostgreSQL\u0027s pg_basebackup and pg_rewind allows an origin superuser to overwrite local files. Exploitation requires local access, high privileges (superuser), and specific intermediate actions before server restart. Impact is high to confidentiality, integrity, and availability if exploited. Affects versions before 18.4, 17.10, 16.14, 15.18, and 14.23.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6475"
},
{
"category": "external",
"summary": "RHBZ#2477439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477439"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6475",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6475"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6475",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6475"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6475/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6475/"
}
],
"release_date": "2026-05-14T13:00:11.039000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind"
},
{
"cve": "CVE-2026-6476",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-05-14T14:01:14.017675+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. An attacker with `pg_create_subscription` rights can exploit a SQL injection vulnerability in the `pg_createsubscriber` utility. This allows the attacker to execute arbitrary SQL commands with superuser privileges when `pg_createsubscriber` is next run, leading to potential compromise of the database system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6476"
},
{
"category": "external",
"summary": "RHBZ#2477437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6476",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6476"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6476",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6476"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6476/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6476/"
}
],
"release_date": "2026-05-14T13:00:11.865000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser"
},
{
"cve": "CVE-2026-6477",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-05-14T14:01:31.087667+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477442"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as lo_export(), lo_read(), lo_lseek64(), and lo_tell64(). This allows the superuser to send an arbitrarily large response, overwriting the client\u0027s stack memory, specifically in tools like psql and pg_dump. This could lead to arbitrary code execution on the client system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This IMPORTANT buffer overflow in PostgreSQL libpq allows a malicious server superuser to overwrite client stack memory via lo_* functions. Exploitation requires the victim to connect to a compromised or malicious server (UI:R). The scope is changed as the server attack affects the client system. Impact is high to confidentiality, integrity, and availability through potential client-side code execution. Affects versions before 18.4, 17.10, 16.14, 15.18, and 14.23.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6477"
},
{
"category": "external",
"summary": "RHBZ#2477442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6477"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6477",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6477"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6477/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6477/"
}
],
"release_date": "2026-05-14T13:00:12.497000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
},
{
"category": "workaround",
"details": "Only connect to trusted PostgreSQL servers. Avoid using psql or pg_dump against untrusted or potentially compromised database servers.",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory"
},
{
"cve": "CVE-2026-6478",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2026-05-14T14:01:45.568001+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477447"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. This vulnerability, a covert timing channel, exists in the comparison of MD5-hashed passwords during authentication. A remote attacker could exploit this to recover user credentials, gaining unauthorized access to the database. This issue specifically impacts databases that retain MD5-hashed passwords from upgrades of PostgreSQL 13 or earlier.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6478"
},
{
"category": "external",
"summary": "RHBZ#2477447",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477447"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6478"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6478",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6478"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6478/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6478/"
}
],
"release_date": "2026-05-14T13:00:13.174000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, ensure that all PostgreSQL user passwords are not hashed using MD5. Users should migrate to stronger hashing algorithms such as `scram-sha-256`. This can be achieved by altering user passwords, which will automatically update their hash to the currently configured default. For example, to change a user\u0027s password: `ALTER USER username WITH PASSWORD \u0027new_password\u0027;` This action will require users to re-authenticate. If a service relies on these credentials, it may require a restart to pick up the new authentication details.",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison"
},
{
"cve": "CVE-2026-6479",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-14T14:01:40.164297+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477445"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. Uncontrolled recursion during SSL (Secure Sockets Layer) and GSS (Generic Security Service) negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AF_UNIX socket. If SSL and GSS are both disabled, the same denial of service can be achieved via a PostgreSQL TCP socket.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Uncontrolled recursion during PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL socket to trigger sustained CPU/stack exhaustion, resulting in denial of service. This affects the core connection-negotiation path, which runs unconditionally for every incoming connection attempt regardless of configuration \u2014 there is no optional feature or code path that must be enabled for exploitation, unlike some other recent flaws in this batch. Fix versions are 18.4, 17.10, 16.14, 15.18, and 14.23; PostgreSQL 12 and 13 branches are not listed as affected by upstream and do not contain the vulnerable recursion path. Affects were determined purely by comparing each shipped build\u0027s PostgreSQL version against these per-major-version fix thresholds.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6479"
},
{
"category": "external",
"summary": "RHBZ#2477445",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477445"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6479"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6479",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6479"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6479/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6479/"
}
],
"release_date": "2026-05-14T13:00:13.859000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
},
{
"category": "workaround",
"details": "Upgrade to PostgreSQL 18.4, 17.10, 16.14, 15.18, or 14.23 (matching your major version) or later. Restricting network/socket access to trusted clients reduces exposure but does not eliminate the vulnerability.",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation"
},
{
"cve": "CVE-2026-6575",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-05-14T14:01:22.648738+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477440"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. This buffer over-read vulnerability in the `pg_restore_attribute_stats()` function allows a table maintainer to infer memory values. By providing array values of unmatched length, a malicious table maintainer can cause query planning to read past the end of an array, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_restore_attribute_stats()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6575"
},
{
"category": "external",
"summary": "RHBZ#2477440",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477440"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6575",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6575"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6575/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6575/"
}
],
"release_date": "2026-05-14T13:00:14.542000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
},
{
"category": "workaround",
"details": "To mitigate this information disclosure vulnerability, restrict network access to the PostgreSQL server to only trusted clients. Configure firewall rules to limit inbound connections to the PostgreSQL port (default 5432) from authorized hosts only. For example, using `firewall-cmd` on Red Hat Enterprise Linux:\n\n`sudo firewall-cmd --permanent --add-source=\u003cTRUSTED_IP_ADDRESS\u003e/32 --zone=public`\n`sudo firewall-cmd --permanent --add-port=5432/tcp --zone=public`\n`sudo firewall-cmd --reload`\n\nAlternatively, configure PostgreSQL to listen only on the localhost interface by setting `listen_addresses = \u0027localhost\u0027` in `postgresql.conf` and restarting the PostgreSQL service.\n\n`sudo systemctl restart postgresql`\n\nThis reduces the attack surface by preventing unauthorized network access to the database. Note that restarting the PostgreSQL service will temporarily interrupt database operations.",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_restore_attribute_stats()"
},
{
"cve": "CVE-2026-6637",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-05-14T14:01:33.754271+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477443"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. A stack buffer overflow in the \u0027refint\u0027 module allows an unprivileged database user to execute arbitrary code as the operating system user running the database. Additionally, a separate vulnerability exists where, if an application uses a user-controlled column as a \u0027refint\u0027 cascade primary key and allows user-controlled updates, a SQL injection can enable an attacker to execute arbitrary SQL commands as the database user performing the update.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary code execution vulnerability in \u0027refint\u0027 module",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6637"
},
{
"category": "external",
"summary": "RHBZ#2477443",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477443"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6637"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6637",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6637"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6637/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6637/"
}
],
"release_date": "2026-05-14T13:00:15.223000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Arbitrary code execution vulnerability in \u0027refint\u0027 module"
},
{
"cve": "CVE-2026-6638",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-05-14T14:01:42.864382+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477446"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. This SQL injection vulnerability exists within the logical replication feature, specifically when using the ALTER SUBSCRIPTION ... REFRESH PUBLICATION command. A malicious subscriber table creator can exploit this flaw to execute arbitrary SQL commands with the elevated privileges of the subscription\u0027s publication-side credentials. The attack is triggered when the REFRESH PUBLICATION command is next executed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "SQL injection in PostgreSQL logical replication allows a subscriber-side table creator to execute arbitrary SQL on the publisher using the subscription\u0027s publication-side credentials. ALTER SUBSCRIPTION ... REFRESH PUBLICATION interpolates subscriber-side schema and relation names into SQL sent to the publisher without properly quoting them; a crafted relation name can therefore inject arbitrary SQL that runs with the privileges of the subscription\u0027s publication-side role the next time REFRESH PUBLICATION is executed. Exploitation requires the attacker to already hold table-creation privileges on the subscriber database, for logical replication to be configured with an untrusted subscriber-side user, and for a privileged user to subsequently run REFRESH PUBLICATION, which limits the practical attack surface for most default deployments. Only PostgreSQL major versions 16, 17, and 18 are affected; versions prior to 16 do not include the vulnerable code path (introduced by commit 875693019053b8897ec3983e292acbb439b088c3).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6638"
},
{
"category": "external",
"summary": "RHBZ#2477446",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477446"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6638",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6638"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6638",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6638"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6638/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6638/"
}
],
"release_date": "2026-05-14T13:00:15.848000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T06:10:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27742"
},
{
"category": "workaround",
"details": "Upgrade to PostgreSQL 18.4, 17.10, or 16.14 (matching your major version) or later, which corrects the identifier quoting used when the subscriber\u0027s apply worker sends the REFRESH PUBLICATION SQL to the publisher. Versions prior to PostgreSQL 16 are not affected. As a temporary mitigation, restrict CREATE TABLE / table-ownership privileges on subscriber databases to trusted roles only, avoid configuring logical replication subscriptions for untrusted subscriber-side users, and scope the subscription\u0027s publication-side credentials to the minimum privileges necessary.",
"product_ids": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.src",
"AppStream-10.2.Z:postgresql18-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-contrib-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-debugsource-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-docs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plperl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-plpython3-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-pltcl-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-private-libs-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-server-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-static-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-test-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-debuginfo-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-0:18.4-1.el10_2.x86_64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.aarch64",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.ppc64le",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.s390x",
"AppStream-10.2.Z:postgresql18-upgrade-devel-debuginfo-0:18.4-1.el10_2.x86_64",
"CRB-10.2.Z:postgresql18-test-rpm-macros-0:18.4-1.el10_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…