Threats Tagged 'cve-2026-14676'

Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version.

This security update for PostgreSQL 18 addresses multiple vulnerabilities affecting various components such as psql, logical decoding, pgcrypto, regexp, and others. The issues include heap buffer overflows that can lead to arbitrary code execution, type confusion, integer wraparound causing undersize allocations, privilege enforcement failures, and SQL injection risks. The update fixes these vulnerabilities to improve the security and stability of PostgreSQL 18 and related versions.

A heap buffer overflow vulnerability exists in PostgreSQL's pg_stat_statements module that allows a query author to execute arbitrary code as the operating system user running the database. This issue affects PostgreSQL major version 18, specifically versions from 18.0 up to but not including 18.5. Versions prior to 18.0 are not affected. A patch is available to address this vulnerability.

CVE-2026-14676 is a heap-based buffer overflow vulnerability in PostgreSQL's pg_stat_statements module. It allows a query author to execute arbitrary code with the privileges of the operating system user running the database by submitting crafted queries containing array constants. This affects PostgreSQL major version 18, specifically versions from 18.0 up to but not including 18.6. Versions prior to 18.0 are not affected.