Linux · Security advisory · March 9, 2026

ELSA-2026-4110: Security update for 24 packages

ELSA-2026-4110, released March 9, 2026, fixes 4 CVEs across 24 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0137
72nd percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
pg_repackol 90:1.5.1-1.module+el9.6.0+90592+523cb846
pgauditol 90:16.0-1.module+el9.4.0+90394+9e4f3cba
pgvectorol 90:0.6.2-2.module+el9.6.0+90592+523cb846
postgisol 90:3.5.3-3.module+el9.7.0+90669+cd4abef7
postgis-clientol 90:3.5.3-3.module+el9.7.0+90669+cd4abef7
postgis-docsol 90:3.5.3-3.module+el9.7.0+90669+cd4abef7
postgis-upgradeol 90:3.5.3-3.module+el9.7.0+90669+cd4abef7
postgis-utilsol 90:3.5.3-3.module+el9.7.0+90669+cd4abef7
postgres-decoderbufsol 90:2.4.0-1.Final.module+el9.4.0+90394+9e4f3cba
postgresqlol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-contribol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-docsol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-plperlol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-plpython3ol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-pltclol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-private-develol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-private-libsol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-serverol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-server-develol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-staticol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-testol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-test-rpm-macrosol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-upgradeol 90:16.13-1.module+el9.7.0+90831+7907f012
postgresql-upgrade-develol 90:16.13-1.module+el9.7.0+90831+7907f012

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-2005 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0137 None reported
High CVE-2026-2004 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0134 None reported
High CVE-2026-2006 postgresql-private-devel: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0116 None reported
High CVE-2026-2003 libecpg6: Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory 8.8 0.0032 None reported
Showing 1 to 4 of 4 1