Release pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf ALSA-2026:28999
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 35/100
Research direction
Start with the PostgreSQL 12 security-update description, then review CVE-2026-6478 and CVE-2026-6473 using the CVE references mentioned in the issue. Inspect the listed pg_repack, pgaudit, and postgres-decoderbufs packages across all affected architectures. Done means the required security update is represented for every package and architecture listed.
Written by the indexing model from the issue text.
Description
postgresql:12 security update
Severity: Important
Description
PostgreSQL is an advanced object-relational database management system (DBMS).
Security Fix(es):
- postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
- postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.x86_64
pgaudit-1.4.0-7.module+el8.10.0+22214+9beb89d6.x86_64
postgres-decoderbufs-0.10.0-2.module+el8.9.0+19330+c97ddbdf.x86_64
pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.s390x
pgaudit-1.4.0-7.module+el8.10.0+22214+9beb89d6.s390x
postgres-decoderbufs-0.10.0-2.module+el8.9.0+19330+c97ddbdf.s390x
pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.ppc64le
pgaudit-1.4.0-7.module+el8.10.0+22214+9beb89d6.ppc64le
postgres-decoderbufs-0.10.0-2.module+el8.9.0+19330+c97ddbdf.ppc64le
pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.aarch64
pgaudit-1.4.0-7.module+el8.10.0+22214+9beb89d6.aarch64
postgres-decoderbufs-0.10.0-2.module+el8.9.0+19330+c97ddbdf.aarch64
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from AlmaLinux/updates
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 1/5 Under an hour Newbie friendliness 60/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
Difficulty 5/5 Over a week Newbie friendliness 15/100
All issues in AlmaLinux/updates
Similar issues
-
Add: Atlas TVOpenchannels:add check:passed
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
Maintainers usually reply within 4 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
benbjohnson/litestream#1545 ·
Maintainers usually reply within 3 days
-
area:cpan-port area:database bug
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
fglock/PerlOnJava#1605 ·
Maintainers usually reply within 1 day
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
astrodbtoolkit/astrodb-bot#104 ·