Red Hat Product Errata RHSA-2026:26181 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26181 - Security Advisory Overview Updated Packages Synopsis Important: postgresql:15 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the postgresql:15 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2477447 - CVE-2026-6478 postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison BZ - 2477448 - CVE-2026-6473 postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write CVEs CVE-2026-6473 CVE-2026-6475 CVE-2026-6477 CVE-2026-6478 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.src.rpm SHA-256: 9dcceb8cce5be5ab3ffa2e0c8778d8997a488d29cb36ecbc137bc29635236220 pgaudit-1.7.0-1.module+el8.9.0+19797+c4ce5969.src.rpm SHA-256: d4ba1cc76f8cccab296134a404a457dc5c7763de7483baf3eb21924192487310 postgres-decoderbufs-1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.src.rpm SHA-256: c87199aea25c96a4bad858898aff0811a7fdc8d25801afc149e489ba3e4c9018 postgresql-15.18-1.module+el8.10.0+24361+29e043a0.src.rpm SHA-256: 74fd29938c4cecdc103d990b546488beccfee1990fb94f4a18fc442075d682ce x86_64 postgresql-test-rpm-macros-15.18-1.module+el8.10.0+24361+29e043a0.noarch.rpm SHA-256: cb50de97cdce7f0fa8077d49563dab426e68267efbcd966e23986932e4cd0102 postgresql-test-rpm-macros-15.18-1.module+el8.10.0+24361+29e043a0.noarch.rpm SHA-256: cb50de97cdce7f0fa8077d49563dab426e68267efbcd966e23986932e4cd0102 postgresql-test-rpm-macros-15.18-1.module+el8.10.0+24361+29e043a0.noarch.rpm SHA-256: cb50de97cdce7f0fa8077d49563dab426e68267efbcd966e23986932e4cd0102 pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.x86_64.rpm SHA-256: 73f31fe4e5acaac43eb190a9a970f72b27a44df21ec7ba1c44b4f1e9bfa7be7c pg_repack-debuginfo-1.4.8-1.module+el8.9.0+19797+c4ce5969.x86_64.rpm SHA-256: 3832f4e90cef5d00ce7e50818b03988e6b3363c0d6f267d2d755534ee6ead85d pg_repack-debugsource-1.4.8-1.module+el8.9.0+19797+c4ce5969.x86_64.rpm SHA-256: 536c27820be3d2b8b0ccca1ac1edd826e770ec26f7e95bcd4693d68fcac9c4db pgaudit-1.7.0-1.module+el8.9.0+19797+c4ce5969.x86_64.rpm SHA-256: a67ced15b03b63a2593469d8d2b92cb1db6a32c0e3e95353d6d252861d8e74d8 pgaudit-debuginfo-1.7.0-1.module+el8.9.0+19797+c4ce5969.x86_64.rpm SHA-256: 554b492cdbd458c65271179351caf7f1a78b35f7c9233fd41ad973a3f03e3880 pgaudit-debugsource-1.7.0-1.module+el8.9.0+19797+c4ce5969.x86_64.rpm SHA-256: 679d5596e29c6f0f9e3b923417bceb2b64b81a3ebc3c8a6404129308206244fe postgres-decoderbufs-1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.x86_64.rpm SHA-256: f1013c950582e223c5cc0299a972b8c224e105f246dfd0d30da25552d9d6c99e postgres-decoderbufs-debuginfo-1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.x86_64.rpm SHA-256: 83763aef0021451d12a8c0fbde7658822a737c18eff919f22fb45bf4cd31e70c postgres-decoderbufs-debugsource-1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.x86_64.rpm SHA-256: 2c5c99680da4fe04e13c78674d3f47d2a1ad5948a420796b9f7c77e5b21de850 postgresql-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: a76f12226f7f92651a72b839fbc0ad0703130490b3e6293f1ad187f900e57cef postgresql-contrib-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: 716dd9ae76ef95b4e84c0cbb419198954fb3fdb3d20d3bc5ba415071f1b5a024 postgresql-contrib-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: a9834e7dcaa885e4e88fd311a8f73770b15107266de39a08dd0486b56da76b47 postgresql-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: cfa339818310ea721bc462b490b2ca730590e3c0f4e722cad02b615f448ff479 postgresql-debugsource-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: ad60de4428afef6fe448ee861cedfe168683bfcf949ff10ed94632f01d544c0e postgresql-docs-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: a48f1e1e4e8f6e922f60b4fb8328384dd8f0744b6d28cf298fb8e8f17bd776e9 postgresql-docs-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: ef475f9328e930f7bec623adcba4f54f49fe7cac411117bd6afdd9bba2603ead postgresql-plperl-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: a195d0399edb6a8ad50d2a86adcd78a8c9aae701d463b2d253e09a0ffebb107f postgresql-plperl-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: 758fb85ac858445afd17fe241e474add925aa0ee93d2dc1bec0281bbc90bdc87 postgresql-plpython3-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: 396a7bbbcb4bce7aa9cc4259e94aecd6dae729376dff34e56dbe1cb9ce704e9e postgresql-plpython3-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: fb1760840476af12110e008cc645e264bc762299fb16aa0e45889231833a2522 postgresql-pltcl-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: ef4035d48ca2e314a65010ff2a9a0b00afd9454230631456a12c224597fea373 postgresql-pltcl-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: f6689b0afd30c6589126de891867b58ac25a437925fe45382b03d4a8989ce539 postgresql-private-devel-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: bd7324be2f23296e5ca644514e834672ea9f697e0eddc389ecc22144fab9ed8f postgresql-private-libs-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: 0a9afdeb4568c4b86a2861e2180354a7284106c4b6f9dfe2225e4e8830a96805 postgresql-private-libs-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: f32d88c8b8b697f35edd23a252feb92908be6d3c8a91c5f9e552f2fbfc000497 postgresql-server-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: 6248ae5dabd8efa024431f0e374084e0f10698fb2e52aceb2a715f4d18486af7 postgresql-server-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: 05ae3142da034ff1d6e36fdeadca3ea567ddcc061535aa81319254fdd39c20b0 postgresql-server-devel-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: 4da8ca9f3ff5310ff6fcc60ce37d1a39f5e3c0cb253ef361228f78fa6528b5bb postgresql-server-devel-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: af3af4bed4b82620baf9ae60bd2a748f0416c6063b51dddd5d48fe26641a4d46 postgresql-static-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: 14154b0b37281f9b634e2ed5beff5045e54d2910a4aa88b7df9bc10576205cb5 postgresql-test-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: ff181a30c065223d31b4b166a99349bb8688def7e91558dea76a2e285814ee70 postgresql-test-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: 596a082235f70ad8fd13396c67925dc41392df4c226af8a0b02b95b8923c603f postgresql-test-rpm-macros-15.18-1.module+el8.10.0+24361+29e043a0.noarch.rpm SHA-256: cb50de97cdce7f0fa8077d49563dab426e68267efbcd966e23986932e4cd0102 postgresql-upgrade-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: f5803c278601ee837925411b50de3ed4d79c13902ac9c3ed6cf6b7f9369af1d9 postgresql-upgrade-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: c1c3a1d119bedefe9f122726a64cdb1539e2d634637cf1976ac34b14ef9d9c46 postgresql-upgrade-devel-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: ad308ed1cabfca437fce0358d1646ff81010df124c31436f46caf20c97d1433e postgresql-upgrade-devel-debuginfo-15.18-1.module+el8.10.0+24361+29e043a0.x86_64.rpm SHA-256: 635d1317aab7634b5e654b73a57bb86c7e3e42227b8a0a4a4b9616b129c56390 Red Hat Enterprise Linux for IBM z Systems 8 SRPM pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.src.rpm SHA-256: 9dcceb8cce5be5ab3ffa2e0c8778d8997a488d29cb36ecbc137bc29635236220 pgaudit-1.7.0-1.module+el8.9.0+19797+c4ce5969.src.rpm SHA-256: d4ba1cc76f8cccab296134a404a457dc5c7763de7483baf3eb21924192487310 postgres-decoderbufs-1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.src.rpm SHA-256: c87199aea25c96a4bad858898aff0811a7fdc8d25801afc149e489ba3e4c9018 postgresql-15.18-1.module+el8.10.0+24361+29e043a0.src.rpm SHA-256: 74fd29938c4cecdc103d990b546488beccfee1990fb94f4a18fc442075d682ce s390x postgresql-test-rpm-macros-15.18-1.module+el8.10.0+24361+29e043a0.noarch.rpm SHA-256: cb50de97cdce7f0fa8077d49563dab426e68267efbcd966e23986932e4cd0102 pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.s390x.rpm SHA-256: 75ea7e595ce74e34885d4c0d4457ce0ce5e08a7880680c36d0728ff55fab87cc pg_repack-debuginfo-1.4.8-1.module+el8.9.0+19797+c4ce5969.s390x.rpm SHA-256: f58284f4dbe906906422d0259811cf125e6c6371b6f2b768cdf4d27cdc8c9952 pg_repack-debugsource-1.4.8-1.module+el8.9.0+19797+c4ce5969.s390x.rpm S