This Red Hat security advisory (RHSA-2026:22878) addresses multiple vulnerabilities in Red Hat Hardened Images RPMs, specifically PostgreSQL 18 packages for aarch64 and x86_64 architectures. The update includes new RPM versions (postgresql-18.4-0.1.hum1 and related packages) that provide bug fixes and enhancements. The advisory covers multiple CVEs (including CVE-2026-6473 and others) with a CVSS vector indicating network attack vector, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The advisory does not explicitly state the nature of the vulnerabilities or detailed exploitation methods but references several CWEs related to access control, integer overflow, format string, path traversal, SQL injection, buffer overflow, privilege issues, and improper input validation. No known exploits in the wild are reported.

The vulnerabilities addressed have high severity with potential to compromise confidentiality, integrity, and availability of affected PostgreSQL components within Red Hat Hardened Images. The CVSS vector suggests these issues can be exploited remotely with low complexity and minimal privileges, potentially leading to full system compromise or data breaches. However, no known exploits in the wild have been reported at this time.

Red Hat has released updated RPM packages (version 18.4-0.1.hum1) for PostgreSQL 18 and related components as part of the Hardened Images update. Users should apply these updates promptly to remediate the vulnerabilities. Detailed update instructions are available at https://images.redhat.com/. No alternative mitigations or workarounds are specified in the advisory.