RHSA-2026:22878HighCVSS 8.8
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
🔗 CVE IDs covered (3)
📋 Description
CVE-2026-6473 — postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write CVE-2026-6474 — postgresql: PostgreSQL: Information disclosure via externally-controlled format string in timeofday() function CVE-2026-6478 — postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2026:22878
- externalhttps://images.redhat.com/
- externalhttps://access.redhat.com/security/cve/CVE-2026-6478
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://access.redhat.com/security/cve/CVE-2026-6474
- externalhttps://access.redhat.com/security/cve/CVE-2026-6473
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22878.json