Linux · Security advisory · March 9, 2026

ALSA-2026:4110: Security update for 24 packages

ALSA-2026:4110, released March 9, 2026, fixes 4 CVEs across 24 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0137
72nd percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
pg_repackalmalinux 91.5.1-1.module_el9.6.0+146+c54fdeca
pgauditalmalinux 916.0-1.module_el9.4.0+66+eb9878bc
pgvectoralmalinux 90.6.2-2.module_el9.6.0+167+4e561146
postgisalmalinux 93.5.3-3.module_el9.7.0+187+2286ff0a
postgis-clientalmalinux 93.5.3-3.module_el9.7.0+187+2286ff0a
postgis-docsalmalinux 93.5.3-3.module_el9.7.0+187+2286ff0a
postgis-upgradealmalinux 93.5.3-3.module_el9.7.0+187+2286ff0a
postgis-utilsalmalinux 93.5.3-3.module_el9.7.0+187+2286ff0a
postgres-decoderbufsalmalinux 92.4.0-1.Final.module_el9.4.0+66+eb9878bc
postgresqlalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-contribalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-docsalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-plperlalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-plpython3almalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-pltclalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-private-develalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-private-libsalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-serveralmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-server-develalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-staticalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-testalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-test-rpm-macrosalmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-upgradealmalinux 916.13-1.module_el9.7.0+213+65e1da69
postgresql-upgrade-develalmalinux 916.13-1.module_el9.7.0+213+65e1da69

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-2005 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0137 None reported
High CVE-2026-2004 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0134 None reported
High CVE-2026-2006 postgresql-private-devel: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0116 None reported
High CVE-2026-2003 libecpg6: Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory 8.8 0.0032 None reported
Showing 1 to 4 of 4 1