Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
Red Hat PostgreSQL packages may let attackers read data
published 3 months ago
Summary
The PostgreSQL server and related add‑on packages provided by Red Hat contain a flaw that could let an unauthenticated user retrieve database information. This could expose sensitive business data if the database is reachable from an untrusted network. Apply the latest Red Hat security update for the PostgreSQL packages as soon as possible to close the gap.
What to do
- Update redhat postgresql to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-contrib to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-contrib-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-debugsource to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-docs-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-plperl to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-plperl-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-plpython3 to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-plpython3-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-pltcl to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-pltcl-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-private-libs to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-private-libs-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-server to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-server-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-server-devel-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-test-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-upgrade to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-upgrade-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-upgrade-devel-debuginfo to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-docs to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-private-devel to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-server-devel to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-static to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-test to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-test-rpm-macros to version 0:13.23-1.el9_6.3.
- Update redhat postgresql-upgrade-devel to version 0:13.23-1.el9_6.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-contrib |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-contrib-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-debugsource |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-docs-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-plperl |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-plperl-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-plpython3 |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-plpython3-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-pltcl |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-pltcl-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-private-libs |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-private-libs-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-server |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-server-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-server-devel-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-test-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-upgrade |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-upgrade-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::appstream | redhat | postgresql-upgrade-devel-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-contrib-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-debugsource |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-docs |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-docs-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-plperl-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-plpython3-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-pltcl-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-private-devel |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-private-libs-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-server-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-server-devel |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-server-devel-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-static |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-test |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-test-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-test-rpm-macros |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-upgrade-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-upgrade-devel |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
| Red Hat:rhel_eus:9.6::crb | redhat | postgresql-upgrade-devel-debuginfo |
< 0:13.23-1.el9_6.3 Fix: upgrade to 0:13.23-1.el9_6.3
|
Original advisory text
Red Hat Security Advisory: postgresql security update
References
- https://access.redhat.com/errata/RHSA-2026:50119 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2477443 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50119.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-6637 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-6637 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-6637 Vendor Advisory
- https://www.postgresql.org/support/security/CVE-2026-6637/ Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published5 Aug 2026
Updated9 Oct 2026
First seen9 Oct 2026
Sources
RHSA-2026:50119 · OSV
Track software like this
Free during beta