Critical Security Update for PostgreSQL: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:29953: Red Hat Security Advisory: postgresql security update. Affects postgresql versions < 0:13.23-1.el9_2.2. Fixed in 0:13.23-1.el9_2.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PostgreSQL is a powerful, open-source object-relational database system that uses and extends the SQL language. It is known for its reliability, feature robustness, and performance. The affected version in this advisory is 13.23-1.el9_2.2, which has been identified to have multiple security vulnerabilities that could potentially compromise the integrity and confidentiality of the database.
Vulnerability Detail
The vulnerabilities identified in PostgreSQL (CVE-2026-6473, CVE-2026-6475, CVE-2026-6477, CVE-2026-6478) stem from flaws in the database's handling of certain operations, which could allow an attacker to execute arbitrary code, escalate privileges, or cause denial of service. The CVSS score of 8.8 indicates a high severity level, emphasizing the urgency of addressing these issues to prevent potential data breaches or system failures.
How To Fix
Minimum fixed version
0:13.23-1.el9_2.2
This is the first release that contains the fix.
sudo dnf update postgresqlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not possible, consider restricting access to the PostgreSQL server to trusted IP addresses only. Additionally, review and tighten database permissions to limit the potential impact of any exploitation.
Conclusion
In summary, the identified vulnerabilities in PostgreSQL pose significant risks to database security. It is crucial to apply the necessary updates to mitigate these risks and ensure the integrity of your data. Regular monitoring and prompt updates are essential for maintaining a secure database environment.
See every vulnerability recorded for postgresql →
FAQ
The advisory addresses multiple vulnerabilities, including CVE-2026-6473, CVE-2026-6475, CVE-2026-6477, and CVE-2026-6478, which could lead to arbitrary code execution and privilege escalation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of the vulnerabilities is 8.8, indicating a high severity level that requires immediate attention.
If you cannot update immediately, restrict access to the PostgreSQL server and review permissions to minimize exposure to potential attacks.
You can find more information on the Red Hat Security Advisory page or the official PostgreSQL documentation.
Related vulnerabilities
Recent vulnerabilities recorded for postgresql.
