{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\npostgresql17:\n  * postgresql17-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-contrib-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-docs-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-plperl-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-plpython3-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-pltcl-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-private-devel-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-private-libs-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-server-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-server-devel-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-static-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-test-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-test-rpm-macros-17.11-1.hum1 (noarch)\n  * postgresql17-upgrade-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-upgrade-devel-17.11-1.hum1 (aarch64, x86_64)\n  * postgresql17-17.11-1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:57198",
        "url": "https://access.redhat.com/errata/RHSA-2026:57198"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-19385",
        "url": "https://access.redhat.com/security/cve/CVE-2026-19385"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-14663",
        "url": "https://access.redhat.com/security/cve/CVE-2026-14663"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-14673",
        "url": "https://access.redhat.com/security/cve/CVE-2026-14673"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57198.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-09-06T09:44:34+00:00",
      "generator": {
        "date": "2026-09-06T09:44:34+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:57198",
      "initial_release_date": "2026-08-20T00:00:18+00:00",
      "revision_history": [
        {
          "date": "2026-08-20T00:00:18+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-06T09:44:34+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "postgresql17-main@aarch64",
                "product": {
                  "name": "postgresql17-main@aarch64",
                  "product_id": "postgresql17-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql17@17.11-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "postgresql17-main@src",
                "product": {
                  "name": "postgresql17-main@src",
                  "product_id": "postgresql17-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql17@17.11-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "postgresql17-main@x86_64",
                "product": {
                  "name": "postgresql17-main@x86_64",
                  "product_id": "postgresql17-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql17@17.11-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "postgresql17-main@noarch",
                "product": {
                  "name": "postgresql17-main@noarch",
                  "product_id": "postgresql17-main@noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql17-test-rpm-macros@17.11-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql17-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:postgresql17-main@aarch64"
        },
        "product_reference": "postgresql17-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql17-main@noarch as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:postgresql17-main@noarch"
        },
        "product_reference": "postgresql17-main@noarch",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql17-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:postgresql17-main@src"
        },
        "product_reference": "postgresql17-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql17-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:postgresql17-main@x86_64"
        },
        "product_reference": "postgresql17-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-14663",
      "cwe": {
        "id": "CWE-312",
        "name": "Cleartext Storage of Sensitive Information"
      },
      "discovery_date": "2026-08-13T13:22:11.912100+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515312"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PostgreSQL pgcrypto. When using disabled ciphers, a user can recover cleartext data by observing faulty ciphertext. This issue arises because the application may accept encrypted data as input, leading to successful decryption even with an incorrect key. Consequently, the protection offered by the Modification Detection Code (MDC) is lost, resulting in information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a Moderate impact flaw in PostgreSQL\u0027s pgcrypto module where disabled ciphers can lead to information disclosure. An attacker could recover cleartext data by observing faulty ciphertext, as the application may accept encrypted input and decrypt it even with an incorrect key, bypassing the Modification Detection Code. This vulnerability primarily affects instances utilizing the pgcrypto module for encryption, potentially exposing sensitive data if specific OpenSSL configurations disable certain ciphers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:postgresql17-main@aarch64",
          "Red Hat Hardened Images:postgresql17-main@noarch",
          "Red Hat Hardened Images:postgresql17-main@src",
          "Red Hat Hardened Images:postgresql17-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-14663"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515312",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515312"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-14663",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-14663"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14663",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14663"
        },
        {
          "category": "external",
          "summary": "https://www.postgresql.org/support/security/CVE-2026-14663/",
          "url": "https://www.postgresql.org/support/security/CVE-2026-14663/"
        }
      ],
      "release_date": "2026-08-13T13:00:02.383000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T00:00:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:postgresql17-main@aarch64",
            "Red Hat Hardened Images:postgresql17-main@noarch",
            "Red Hat Hardened Images:postgresql17-main@src",
            "Red Hat Hardened Images:postgresql17-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57198"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, administrators should avoid using pgcrypto encryption and decryption operations with ciphers that are disabled by the system\u0027s OpenSSL configuration or local security policies. Organizations should proactively review their OpenSSL cipher policies to ensure required cryptographic algorithms are fully supported, or transition to robust, enabled algorithms within pgcrypto. Additionally, applications should treat all encrypted input as untrusted and independently validate data",
          "product_ids": [
            "Red Hat Hardened Images:postgresql17-main@aarch64",
            "Red Hat Hardened Images:postgresql17-main@noarch",
            "Red Hat Hardened Images:postgresql17-main@src",
            "Red Hat Hardened Images:postgresql17-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:postgresql17-main@aarch64",
            "Red Hat Hardened Images:postgresql17-main@noarch",
            "Red Hat Hardened Images:postgresql17-main@src",
            "Red Hat Hardened Images:postgresql17-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers"
    },
    {
      "cve": "CVE-2026-14673",
      "cwe": {
        "id": "CWE-426",
        "name": "Untrusted Search Path"
      },
      "discovery_date": "2026-08-13T13:21:21.277930+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515305"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An untrusted search path vulnerability in PostgreSQL\u0027s amcheck module allows a user with EXECUTE privileges to escalate privileges or execute arbitrary code. By setting a malicious search path before invoking an amcheck function, an attacker can hijack execution to run arbitrary SQL functions with the elevated permissions of the expression index owner.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: PostgreSQL amcheck: Privilege escalation via untrusted search path",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low impact because exploitation requires an attacker to already possess EXECUTE privileges on amcheck functions. The necessity of having this pre-existing, elevated database access to manipulate the search path significantly limits the likelihood of successful privilege escalation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:postgresql17-main@aarch64",
          "Red Hat Hardened Images:postgresql17-main@noarch",
          "Red Hat Hardened Images:postgresql17-main@src",
          "Red Hat Hardened Images:postgresql17-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-14673"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515305",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515305"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-14673",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-14673"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14673",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14673"
        },
        {
          "category": "external",
          "summary": "https://www.postgresql.org/support/security/CVE-2026-14673/",
          "url": "https://www.postgresql.org/support/security/CVE-2026-14673/"
        }
      ],
      "release_date": "2026-08-13T13:00:06.799000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T00:00:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:postgresql17-main@aarch64",
            "Red Hat Hardened Images:postgresql17-main@noarch",
            "Red Hat Hardened Images:postgresql17-main@src",
            "Red Hat Hardened Images:postgresql17-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57198"
        },
        {
          "category": "workaround",
          "details": "Do not GRANT EXECUTE on amcheck functions (bt_index_check, bt_index_parent_check, verify_heapam, and related) to non-superuser roles. If index verification is unused, drop the extension (DROP EXTENSION amcheck). Restrict PostgreSQL to trusted clients.",
          "product_ids": [
            "Red Hat Hardened Images:postgresql17-main@aarch64",
            "Red Hat Hardened Images:postgresql17-main@noarch",
            "Red Hat Hardened Images:postgresql17-main@src",
            "Red Hat Hardened Images:postgresql17-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:postgresql17-main@aarch64",
            "Red Hat Hardened Images:postgresql17-main@noarch",
            "Red Hat Hardened Images:postgresql17-main@src",
            "Red Hat Hardened Images:postgresql17-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "postgresql: PostgreSQL amcheck: Privilege escalation via untrusted search path"
    },
    {
      "cve": "CVE-2026-19385",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2026-08-13T13:24:39.300405+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515328"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PostgreSQL pg_dump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating system user running pg_dump.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A heap buffer overflow in PostgreSQL pg_dump allows authenticated database users to execute arbitrary code. Attackers with object-creation privileges can use crafted function transform lists to run OS commands as the backup user.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:postgresql17-main@aarch64",
          "Red Hat Hardened Images:postgresql17-main@noarch",
          "Red Hat Hardened Images:postgresql17-main@src",
          "Red Hat Hardened Images:postgresql17-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19385"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515328",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515328"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19385",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19385"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19385",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19385"
        },
        {
          "category": "external",
          "summary": "https://www.postgresql.org/support/security/CVE-2026-19385/",
          "url": "https://www.postgresql.org/support/security/CVE-2026-19385/"
        }
      ],
      "release_date": "2026-08-13T13:00:15.490000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T00:00:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:postgresql17-main@aarch64",
            "Red Hat Hardened Images:postgresql17-main@noarch",
            "Red Hat Hardened Images:postgresql17-main@src",
            "Red Hat Hardened Images:postgresql17-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57198"
        },
        {
          "category": "workaround",
          "details": "Restrict database user privileges, particularly object creation, to trusted administrators only. Ensure that `pg_dump` operations are performed by users with the least necessary operating system privileges to limit the impact of potential code execution.",
          "product_ids": [
            "Red Hat Hardened Images:postgresql17-main@aarch64",
            "Red Hat Hardened Images:postgresql17-main@noarch",
            "Red Hat Hardened Images:postgresql17-main@src",
            "Red Hat Hardened Images:postgresql17-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:postgresql17-main@aarch64",
            "Red Hat Hardened Images:postgresql17-main@noarch",
            "Red Hat Hardened Images:postgresql17-main@src",
            "Red Hat Hardened Images:postgresql17-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists"
    }
  ]
}