HighFix available
Red Hat Security Advisory: postgresql:12 security update
Type: advisorySources: OSV
- Products
- pg_repack, pg_repack-debuginfo, pg_repack-debugsource, pgaudit, pgaudit-debuginfo, pgaudit-debugsource, postgres-decoderbufs, postgres-decoderbufs-debuginfo, postgres-decoderbufs-debugsource, postgresql, postgresql-contrib, postgresql-contrib-debuginfo, postgresql-debuginfo, postgresql-debugsource, postgresql-docs, postgresql-docs-debuginfo, postgresql-plperl, postgresql-plperl-debuginfo, postgresql-plpython3, postgresql-plpython3-debuginfo, postgresql-pltcl, postgresql-pltcl-debuginfo, postgresql-server, postgresql-server-debuginfo, postgresql-server-devel, postgresql-server-devel-debuginfo, postgresql-static, postgresql-test, postgresql-test-debuginfo, postgresql-test-rpm-macros, postgresql-upgrade, postgresql-upgrade-debuginfo, postgresql-upgrade-devel, postgresql-upgrade-devel-debuginfo
- Affected versions
- Not specified
- Fixed versions
- 0:0.10.0-2.module+el8.9.0+19330+c97ddbdf, 0:1.4.0-7.module+el8.10.0+22214+9beb89d6, 0:1.4.6-3.module+el8.9.0+19330+c97ddbdf, 0:12.22-7.module+el8.10.0+24362+fcf88eed
- CVEs
- CVE-2026-6473, CVE-2026-6475, CVE-2026-6477, CVE-2026-6478, CVE-2026-6637
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 03:43 UTC · Revision 1
Source evidence
Red Hat Security Advisory: postgresql:12 security update
core-osv · Original sourcePublished 25 Jun 2026, 10:43 UTC
Red Hat Security Advisory: postgresql:12 security update
osv:RHSA-2026:28999
pg_repack
Fixed versions: 0:1.4.6-3.module+el8.9.0+19330+c97ddbdf
pg_repack-debuginfo
Fixed versions: 0:1.4.6-3.module+el8.9.0+19330+c97ddbdf
pg_repack-debugsource
Fixed versions: 0:1.4.6-3.module+el8.9.0+19330+c97ddbdf
pgaudit
Fixed versions: 0:1.4.0-7.module+el8.10.0+22214+9beb89d6
pgaudit-debuginfo
Fixed versions: 0:1.4.0-7.module+el8.10.0+22214+9beb89d6
pgaudit-debugsource
Fixed versions: 0:1.4.0-7.module+el8.10.0+22214+9beb89d6
postgres-decoderbufs
Fixed versions: 0:0.10.0-2.module+el8.9.0+19330+c97ddbdf
postgres-decoderbufs-debuginfo
Fixed versions: 0:0.10.0-2.module+el8.9.0+19330+c97ddbdf
postgres-decoderbufs-debugsource
Fixed versions: 0:0.10.0-2.module+el8.9.0+19330+c97ddbdf
postgresql
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-contrib
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-contrib-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-debugsource
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-docs
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-docs-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-plperl
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-plperl-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-plpython3
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-plpython3-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-pltcl
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-pltcl-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-server
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-server-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-server-devel
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-server-devel-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-static
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-test
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-test-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-test-rpm-macros
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-upgrade
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-upgrade-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-upgrade-devel
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
postgresql-upgrade-devel-debuginfo
Fixed versions: 0:12.22-7.module+el8.10.0+24362+fcf88eed
Complete source record
{
"id": "11e0cae0638aa9c06bc25de87c3aa3b2a1317712b0529d01d981934464d86841",
"url": "https://osv.dev/vulnerability/RHSA-2026%3A28999",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: postgresql:12 security update",
"summary": "Red Hat Security Advisory: postgresql:12 security update",
"evidence": "osv:RHSA-2026:28999",
"products": [
{
"name": {
"value": "pg_repack",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.4.6-3.module+el8.9.0+19330+c97ddbdf",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pg_repack-debuginfo",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.4.6-3.module+el8.9.0+19330+c97ddbdf",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pg_repack-debugsource",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.4.6-3.module+el8.9.0+19330+c97ddbdf",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pgaudit",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.4.0-7.module+el8.10.0+22214+9beb89d6",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pgaudit-debuginfo",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.4.0-7.module+el8.10.0+22214+9beb89d6",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pgaudit-debugsource",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.4.0-7.module+el8.10.0+22214+9beb89d6",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgres-decoderbufs",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.10.0-2.module+el8.9.0+19330+c97ddbdf",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgres-decoderbufs-debuginfo",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.10.0-2.module+el8.9.0+19330+c97ddbdf",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgres-decoderbufs-debugsource",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.10.0-2.module+el8.9.0+19330+c97ddbdf",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-contrib",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-contrib-debuginfo",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-debuginfo",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-debugsource",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-docs",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-docs-debuginfo",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-plperl",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-plperl-debuginfo",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-plpython3",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-plpython3-debuginfo",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-pltcl",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-pltcl-debuginfo",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-server",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-server-debuginfo",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/23/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-server-devel",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/24/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-server-devel-debuginfo",
"evidence": "/affected/25/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/25/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-static",
"evidence": "/affected/26/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/26/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-test",
"evidence": "/affected/27/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/27/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-test-debuginfo",
"evidence": "/affected/28/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/28/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-test-rpm-macros",
"evidence": "/affected/29/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/29/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-upgrade",
"evidence": "/affected/30/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/30/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-upgrade-debuginfo",
"evidence": "/affected/31/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/31/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-upgrade-devel",
"evidence": "/affected/32/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/32/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "postgresql-upgrade-devel-debuginfo",
"evidence": "/affected/33/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:12.22-7.module+el8.10.0+24362+fcf88eed",
"evidence": "/affected/33/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "RHSA-2026:28999",
"aliases": [
"RHSA-2026:28999"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.4.6-3.module+el8.9.0+19330+c97ddbdf"
}
]
}
],
"package": {
"name": "pg_repack",
"purl": "pkg:rpm/redhat/pg_repack",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.4.6-3.module+el8.9.0+19330+c97ddbdf"
}
]
}
],
"package": {
"name": "pg_repack-debuginfo",
"purl": "pkg:rpm/redhat/pg_repack-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.4.6-3.module+el8.9.0+19330+c97ddbdf"
}
]
}
],
"package": {
"name": "pg_repack-debugsource",
"purl": "pkg:rpm/redhat/pg_repack-debugsource",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.4.0-7.module+el8.10.0+22214+9beb89d6"
}
]
}
],
"package": {
"name": "pgaudit",
"purl": "pkg:rpm/redhat/pgaudit",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.4.0-7.module+el8.10.0+22214+9beb89d6"
}
]
}
],
"package": {
"name": "pgaudit-debuginfo",
"purl": "pkg:rpm/redhat/pgaudit-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.4.0-7.module+el8.10.0+22214+9beb89d6"
}
]
}
],
"package": {
"name": "pgaudit-debugsource",
"purl": "pkg:rpm/redhat/pgaudit-debugsource",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.10.0-2.module+el8.9.0+19330+c97ddbdf"
}
]
}
],
"package": {
"name": "postgres-decoderbufs",
"purl": "pkg:rpm/redhat/postgres-decoderbufs",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.10.0-2.module+el8.9.0+19330+c97ddbdf"
}
]
}
],
"package": {
"name": "postgres-decoderbufs-debuginfo",
"purl": "pkg:rpm/redhat/postgres-decoderbufs-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.10.0-2.module+el8.9.0+19330+c97ddbdf"
}
]
}
],
"package": {
"name": "postgres-decoderbufs-debugsource",
"purl": "pkg:rpm/redhat/postgres-decoderbufs-debugsource",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql",
"purl": "pkg:rpm/redhat/postgresql",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-contrib",
"purl": "pkg:rpm/redhat/postgresql-contrib",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-contrib-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-contrib-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-debugsource",
"purl": "pkg:rpm/redhat/postgresql-debugsource",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-docs",
"purl": "pkg:rpm/redhat/postgresql-docs",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-docs-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-docs-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-plperl",
"purl": "pkg:rpm/redhat/postgresql-plperl",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-plperl-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-plperl-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-plpython3",
"purl": "pkg:rpm/redhat/postgresql-plpython3",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-plpython3-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-plpython3-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-pltcl",
"purl": "pkg:rpm/redhat/postgresql-pltcl",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-pltcl-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-pltcl-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-server",
"purl": "pkg:rpm/redhat/postgresql-server",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-server-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-server-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-server-devel",
"purl": "pkg:rpm/redhat/postgresql-server-devel",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-server-devel-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-server-devel-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-static",
"purl": "pkg:rpm/redhat/postgresql-static",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-test",
"purl": "pkg:rpm/redhat/postgresql-test",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-test-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-test-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-test-rpm-macros",
"purl": "pkg:rpm/redhat/postgresql-test-rpm-macros",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-upgrade",
"purl": "pkg:rpm/redhat/postgresql-upgrade",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-upgrade-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-upgrade-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-upgrade-devel",
"purl": "pkg:rpm/redhat/postgresql-upgrade-devel",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:12.22-7.module+el8.10.0+24362+fcf88eed"
}
]
}
],
"package": {
"name": "postgresql-upgrade-devel-debuginfo",
"purl": "pkg:rpm/redhat/postgresql-upgrade-devel-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:28999.json"
}
}
],
"modified": "2026-10-07T10:09:18Z",
"provider": "osv",
"upstream": [
"CVE-2026-6473",
"CVE-2026-6475",
"CVE-2026-6477",
"CVE-2026-6478",
"CVE-2026-6637"
],
"references": [
"https://access.redhat.com/errata/RHSA-2026:28999",
"https://access.redhat.com/security/updates/classification/#important",
"https://bugzilla.redhat.com/show_bug.cgi?id=2477447",
"https://bugzilla.redhat.com/show_bug.cgi?id=2477448",
"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28999.json",
"https://access.redhat.com/security/cve/CVE-2026-6473",
"https://www.cve.org/CVERecord?id=CVE-2026-6473",
"https://nvd.nist.gov/vuln/detail/CVE-2026-6473",
"https://www.postgresql.org/support/security/CVE-2026-6473/",
"https://access.redhat.com/security/cve/CVE-2026-6475",
"https://bugzilla.redhat.com/show_bug.cgi?id=2477439",
"https://www.cve.org/CVERecord?id=CVE-2026-6475",
"https://nvd.nist.gov/vuln/detail/CVE-2026-6475",
"https://www.postgresql.org/support/security/CVE-2026-6475/",
"https://access.redhat.com/security/cve/CVE-2026-6477",
"https://bugzilla.redhat.com/show_bug.cgi?id=2477442",
"https://www.cve.org/CVERecord?id=CVE-2026-6477",
"https://nvd.nist.gov/vuln/detail/CVE-2026-6477",
"https://www.postgresql.org/support/security/CVE-2026-6477/",
"https://access.redhat.com/security/cve/CVE-2026-6478",
"https://www.cve.org/CVERecord?id=CVE-2026-6478",
"https://nvd.nist.gov/vuln/detail/CVE-2026-6478",
"https://www.postgresql.org/support/security/CVE-2026-6478/",
"https://access.redhat.com/security/cve/CVE-2026-6637",
"https://bugzilla.redhat.com/show_bug.cgi?id=2477443",
"https://www.cve.org/CVERecord?id=CVE-2026-6637",
"https://nvd.nist.gov/vuln/detail/CVE-2026-6637",
"https://www.postgresql.org/support/security/CVE-2026-6637/"
]
},
"related_cves": [
{
"value": "CVE-2026-6473",
"evidence": "/upstream"
},
{
"value": "CVE-2026-6475",
"evidence": "/upstream"
},
{
"value": "CVE-2026-6477",
"evidence": "/upstream"
},
{
"value": "CVE-2026-6478",
"evidence": "/upstream"
},
{
"value": "CVE-2026-6637",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 94741,
"published_at": "2026-06-25T10:43:04+00:00"
}