This Red Hat security advisory (RHSA-2026:57198) addresses vulnerabilities in Red Hat Hardened Images RPMs, specifically PostgreSQL 17 packages. The update includes new versions of postgresql17 and related packages (e.g., postgresql17-contrib, postgresql17-plperl, postgresql17-server) for aarch64 and x86_64 architectures. The advisory references CVE-2026-14663 among others and provides updated RPMs to fix these issues. The advisory does not detail the specific nature of the vulnerabilities but lists relevant CWEs such as CWE-313, CWE-345, CWE-312, CWE-426, and CWE-122, indicating issues related to information exposure, improper validation, and memory management. The vendor confirms a patch is available and recommends applying the update.

The vulnerabilities addressed in this advisory are rated high severity, indicating a significant security risk if left unpatched. The issues involve multiple CWEs related to information exposure and memory handling, which could potentially lead to unauthorized information disclosure or other security breaches. However, there are no known exploits in the wild at the time of this advisory. Systems running affected versions of PostgreSQL 17 packages in Red Hat Hardened Images are vulnerable until updated.

A patch is available for the affected PostgreSQL 17 RPM packages as part of the Red Hat Hardened Images update. Users should apply the updated packages (version 17.11-1.hum1) for all relevant PostgreSQL 17 components on supported architectures (aarch64, x86_64) as soon as possible. Refer to the official Red Hat advisory RHSA-2026:57198 and the Red Hat images portal (https://images.redhat.com/) for detailed update instructions. No additional mitigation steps are indicated by the vendor.