Critical Security Update for PostgreSQL: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:28037: Important: postgresql:15 security update. Affects pg_repack versions < 1.4.8-2.module_el9.5.0+119+18833d03. Fixed in 1.4.8-2.module_el9.5.0+119+18833d03. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PostgreSQL is a powerful, open-source object-relational database management system (DBMS) known for its robustness, extensibility, and compliance with SQL standards. It supports a wide range of data types and offers advanced features such as transactions, concurrency, and complex queries. However, recent vulnerabilities have been identified that could compromise the security of PostgreSQL installations, particularly affecting versions in the AlmaLinux:9 ecosystem.
Vulnerability Detail
The vulnerabilities in PostgreSQL include an operating system account hijack via symlink in pg_basebackup and pg_rewind (CVE-2026-6475), a buffer overflow that allows a server superuser to overwrite client stack memory (CVE-2026-6477), credential recovery via a covert timing channel in MD5 password comparison (CVE-2026-6478), and an integer overflow leading to an undersized allocation and out-of-bounds write (CVE-2026-6473). These vulnerabilities can lead to unauthorized access, data corruption, and potential system compromise.
How To Fix
Minimum fixed version
1.4.8-2.module_el9.5.0+119+18833d03
This is the first release that contains the fix.
sudo dnf update pg_repackTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, consider restricting access to the PostgreSQL server and implementing stricter authentication methods until the updates can be applied. Additionally, monitor logs for any suspicious activity that may indicate exploitation attempts.
Conclusion
The recent vulnerabilities in PostgreSQL pose significant security risks that must be addressed promptly. By updating to the latest patched versions of the affected packages, users can protect their systems from potential exploits. It is crucial to stay informed about such vulnerabilities and utilize tools like Vulert for ongoing monitoring.
See every vulnerability recorded for pg_repack →
FAQ
The vulnerabilities affect PostgreSQL versions prior to the patched version 15.18-1.module_el9.8.0+267+7c71b4a4.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without needing to sign up.
Exploitation of these vulnerabilities could lead to unauthorized access, data corruption, and potential system compromise, affecting the integrity and confidentiality of your data.
While updating is the best solution, you can temporarily restrict access to the PostgreSQL server and implement stricter authentication methods as a workaround.
For detailed information, refer to the CVE pages listed in the advisory or the PostgreSQL official documentation.
Related vulnerabilities
Recent vulnerabilities recorded for pg_repack.
