postgresql:13 security update

エラータID: AXSA:2026-1171:01

Release date: 
Wednesday, July 1, 2026 - 21:38
Subject: 
postgresql:13 security update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

Modularity name: "postgresql"
Stream name: "13"

Solution: 

Update packages.

CVEs: 
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
Additional Info: 

N/A

Download: 

SRPMS
  1. pgaudit-1.5.0-1.module+el8+1994+e6111a40.src.rpm
    MD5: b05dc9e9f52a69a3a7fcd132398d289d
    SHA-256: 566ae52bfa2bc0b468096f5544f8074dde7bd21e48bb8629fae24dacdee06842
    Size: 42.60 kB
  2. pg_repack-1.4.6-3.module+el8+1994+e6111a40.src.rpm
    MD5: 29f54f0f31d5f1a96bd0699d723e517f
    SHA-256: 31cd61ff680f8018dec4a4f4f89ec73ba89a4ac24bdc6a95e20538a0d35e6646
    Size: 100.99 kB
  3. postgres-decoderbufs-0.10.0-2.module+el8+1994+e6111a40.src.rpm
    MD5: d59f91741297ddfd6444863e7094be2b
    SHA-256: 0425e8c5038790c3efd97ca9cb80b53a328b4bab922b26aba3915bc4e25a1a0b
    Size: 21.13 kB
  4. postgresql-13.23-3.module+el8+1994+e6111a40.src.rpm
    MD5: dff9aa541bebc59e65d692ccfb2ca8d9
    SHA-256: c4dd20d95f84e2fa13d63977787fae751d9d91c790f113e1d3d156fff7e63d3e
    Size: 49.01 MB

Asianux Server 8 for x86_64
  1. pgaudit-1.5.0-1.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 9413819ad0ce8965f48f7cef58bc6869
    SHA-256: 333242a0c3ed07554912a12a5980b3e7ab7dfba542d8f8b8074a654cff0f7c97
    Size: 27.03 kB
  2. pgaudit-debugsource-1.5.0-1.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 91fe7ccfc3be2e4bac59fc7a47948781
    SHA-256: d6b9e7be702b7e1ca137c3043a2a664cfa138928a3c5af5dde5869022c39a374
    Size: 22.80 kB
  3. pg_repack-1.4.6-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: d87f8c873f631bd304e5c50c6224df6a
    SHA-256: 30bf0c0e36d4f4ec9d217109a08e8126f62210cdb7d8c7312f302b77afdcacac
    Size: 90.28 kB
  4. pg_repack-debugsource-1.4.6-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 1559f787baf189614f0a78bc21bda0d3
    SHA-256: 594d8de1233224c6d53fddc32ef54b599e0be8711e9aff7dee4a3208cffc4946
    Size: 49.69 kB
  5. postgres-decoderbufs-0.10.0-2.module+el8+1994+e6111a40.x86_64.rpm
    MD5: ff80a0fbec229a5b19606846b967c3fe
    SHA-256: 2a886d73f07f4820d4d2de86518acc011acb29a45c5446be5a4c1fadb7be984d
    Size: 21.90 kB
  6. postgres-decoderbufs-debugsource-0.10.0-2.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 391529dc79f290a3f1de79ff998a072a
    SHA-256: 6533279773fb19b942e0f025d6368db956cf2ee8996e37225bcee20848061e13
    Size: 16.81 kB
  7. postgresql-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 4fe27d4ae3dec02a77d3bedf1bd6facd
    SHA-256: 0e33be421ad6d06f23d3901beaef50afb06d5726d7ee913bfb4a8eb44ebcc22c
    Size: 1.59 MB
  8. postgresql-contrib-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 1ba20d199b506cb4766e0c6e0748697e
    SHA-256: a51f86d5368e01fc295b7682fdf271f005b271c9fbaa18fa678735cf7bad3f49
    Size: 886.99 kB
  9. postgresql-debugsource-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 48016d1fb6221b73efc67734b122931b
    SHA-256: dbeb12b6fcfe51da40885a66abf44517de4dedbff9a70c2b7baa91f3dbc8c6ae
    Size: 17.90 MB
  10. postgresql-docs-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: a6edb1893fe8509db9c13e75a7a2ff6a
    SHA-256: 39d7642e802e905464b4db9f8ebe7119b7dc1531cad86a0d100368ed1cc581db
    Size: 9.96 MB
  11. postgresql-plperl-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 97d67f4d923698fa6d47fe418572baf7
    SHA-256: 34ce6e9d1f3ff023c78103674b4e1ac440794e314d542ce1ee7096d4f229e91c
    Size: 113.41 kB
  12. postgresql-plpython3-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: b95920697a478b67d5eb94bdace057c2
    SHA-256: a3f13933dcad529617048d7091ea983f9d82227f297aaa7effaf0f5cc705056a
    Size: 129.67 kB
  13. postgresql-pltcl-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: ec6b64511be19e41e75df67b3487060a
    SHA-256: ea0b8c4cc4b71632892696ae5a0a8148955bce905d662a30c87a64fa68046b64
    Size: 86.22 kB
  14. postgresql-server-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 117ac2070ebf5167a2e8309705fb9c2e
    SHA-256: 02c37b46bd8a8cc0c1488e4747ab3d0e5483b0f60119b77c8131c9d47f323c19
    Size: 5.61 MB
  15. postgresql-server-devel-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: e1171080d9fc17449119b5455f8182bc
    SHA-256: b092e764ac9f6312afb1309cb4b311acc6c7add83bdf1c33b9619d34c7e4a7b5
    Size: 1.27 MB
  16. postgresql-static-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: d036680eb7e094497e740ca3df53ae57
    SHA-256: 0e627e78426b8e6f39e38f6dfd0a49e19d4db8b8c4890308d58cab872ad9ed24
    Size: 192.62 kB
  17. postgresql-test-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 0056503917b1aea62768b11f3eb9e297
    SHA-256: 3a2ceae05753bdbef2ead5168c41d7a20b2645d14d95eb5ff17516f07e479930
    Size: 2.06 MB
  18. postgresql-test-rpm-macros-13.23-3.module+el8+1994+e6111a40.noarch.rpm
    MD5: 63f570e47cab3fdb7f510625a6b0d513
    SHA-256: 1798f68eb8d0bafdf8cdcebf65702b24dbbf537788db2169d5bfb99172771341
    Size: 53.53 kB
  19. postgresql-upgrade-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 65bbb29b21e18d462f9d3f656d4a48ff
    SHA-256: bf82c54678b2d6aafcc3aba7de0df390a7aae7faef97852691144c47960c6a6b
    Size: 4.39 MB
  20. postgresql-upgrade-devel-13.23-3.module+el8+1994+e6111a40.x86_64.rpm
    MD5: 1eb8a7e3a908febda08c24b9180d8b0b
    SHA-256: 4f920e5a627529c8a3d1e43c72d0771ebcb3210d39e91cbfbd744421993047f6
    Size: 1.18 MB