Linux · Security advisory · March 12, 2026

RHSA-2026:4110: Security update for 24 packages

RHSA-2026:4110, released March 12, 2026, fixes 4 CVEs across 24 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0137
72nd percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
pg_repackRHEL 90:1.5.1-1.module+el9.6.0+22880+6b241eec
pgauditRHEL 90:16.0-1.module+el9.4.0+20427+07482b8c
pgvectorRHEL 90:0.6.2-2.module+el9.6.0+22979+c3d78d52
postgisRHEL 90:3.5.3-3.module+el9.7.0+23421+025f8139
postgis-clientRHEL 90:3.5.3-3.module+el9.7.0+23421+025f8139
postgis-docsRHEL 90:3.5.3-3.module+el9.7.0+23421+025f8139
postgis-upgradeRHEL 90:3.5.3-3.module+el9.7.0+23421+025f8139
postgis-utilsRHEL 90:3.5.3-3.module+el9.7.0+23421+025f8139
postgres-decoderbufsRHEL 90:2.4.0-1.Final.module+el9.4.0+20427+07482b8c
postgresqlRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-contribRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-docsRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-plperlRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-plpython3RHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-pltclRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-private-develRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-private-libsRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-serverRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-server-develRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-staticRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-testRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-test-rpm-macrosRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-upgradeRHEL 90:16.13-1.module+el9.7.0+24031+188c384c
postgresql-upgrade-develRHEL 90:16.13-1.module+el9.7.0+24031+188c384c

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-2005 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0137 None reported
High CVE-2026-2004 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0134 None reported
High CVE-2026-2006 postgresql-private-devel: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0116 None reported
High CVE-2026-2003 libecpg6: Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory 8.8 0.0032 None reported
Showing 1 to 4 of 4 1