Linux · Security advisory · February 3, 2026

RLSA-2023:7884: Security update for 3 packages

RLSA-2023:7884, released February 3, 2026, fixes 5 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0432
91st percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
pg_repackrocky 80:1.4.8-1.module+el8.9.0+1525+fc91df60
pgauditrocky 80:1.7.0-1.module+el8.10.0+40056+df351139
postgres-decoderbufsrocky 80:1.9.7-1.Final.module+el8.10.0+40056+df351139

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-5869 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buff... 8.8 0.0432 None reported
High CVE-2023-5868 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buff... 8.8 0.0278 None reported
High CVE-2023-5870 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buff... 8.8 0.0256 None reported
High CVE-2023-39417 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buff... 8.8 0.0168 None reported
High CVE-2023-39418 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buff... 8.8 0.0109 None reported
Showing 1 to 5 of 5 1