Linux · Security advisory · June 19, 2026

ELSA-2026-26181: Security update for 18 packages

ELSA-2026-26181, released June 19, 2026, fixes 2 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0101
63rd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
pg_repackol 80:1.4.8-1.module+el8.9.0+90110+d8a562d5
pgauditol 80:1.7.0-1.module+el8.9.0+90110+d8a562d5
postgres-decoderbufsol 80:1.9.7-1.Final.module+el8.9.0+90110+d8a562d5
postgresqlol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-contribol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-docsol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-plperlol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-plpython3ol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-pltclol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-private-develol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-private-libsol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-serverol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-server-develol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-staticol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-testol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-test-rpm-macrosol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-upgradeol 80:15.18-1.module+el8.10.0+90918+5e9abb9f
postgresql-upgrade-develol 80:15.18-1.module+el8.10.0+90918+5e9abb9f

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-6473 PostgreSQL server undersizes allocations, via integer wraparound 8.8 0.0101 None reported
High CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel 8.8 0.0056 None reported
Showing 1 to 2 of 2 1