RHSA-2026:54751MediumCVSS 6.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
August 13, 2026
Last Modified
September 5, 2026

🔗 CVE IDs covered (2)

CVE-2026-14663 →CVE-2026-14673 →

📋 Description

CVE-2026-14663 — postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers CVE-2026-14673 — postgresql: PostgreSQL amcheck: Privilege escalation via untrusted search path

🎯 Affected products5

  • Red Hat Hardened Images
  • postgresql18-main@aarch64 as a component of Red Hat Hardened Images
  • postgresql18-main@noarch as a component of Red Hat Hardened Images
  • postgresql18-main@src as a component of Red Hat Hardened Images
  • postgresql18-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this vulnerability, administrators should avoid using pgcrypto encryption and decryption operations with ciphers that are disabled by the system's OpenSSL configuration or local security policies. Organizations should proactively review their OpenSSL cipher policies to ensure required cryptographic algorithms are fully supported, or transition to robust, enabled algorithms within pgcrypto. Additionally, applications should treat all encrypted input as untrusted and independently validate data Workaround: Do not GRANT EXECUTE on amcheck functions (bt_index_check, bt_index_parent_check, verify_heapam, and related) to non-superuser roles. If index verification is unused, drop the extension (DROP EXTENSION amcheck). Restrict PostgreSQL to trusted clients.

🔗 References (6)