Linux · Security advisory · March 5, 2026

ELSA-2026-3887: Security update for 15 packages

ELSA-2026-3887, released March 5, 2026, fixes 3 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0137
72nd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
postgresqlol 100:16.13-1.0.1.el10_1
postgresql-contribol 100:16.13-1.0.1.el10_1
postgresql-docsol 100:16.13-1.0.1.el10_1
postgresql-plperlol 100:16.13-1.0.1.el10_1
postgresql-plpython3ol 100:16.13-1.0.1.el10_1
postgresql-pltclol 100:16.13-1.0.1.el10_1
postgresql-private-develol 100:16.13-1.0.1.el10_1
postgresql-private-libsol 100:16.13-1.0.1.el10_1
postgresql-serverol 100:16.13-1.0.1.el10_1
postgresql-server-develol 100:16.13-1.0.1.el10_1
postgresql-staticol 100:16.13-1.0.1.el10_1
postgresql-testol 100:16.13-1.0.1.el10_1
postgresql-test-rpm-macrosol 100:16.13-1.0.1.el10_1
postgresql-upgradeol 100:16.13-1.0.1.el10_1
postgresql-upgrade-develol 100:16.13-1.0.1.el10_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-2005 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0137 None reported
High CVE-2026-2004 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0134 None reported
High CVE-2026-2006 postgresql-private-devel: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0116 None reported
Showing 1 to 3 of 3 1