VDB
RHSA-2026:72881
RHSA-2026:72881
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:5930d0f7ca0cc09a52380cef2efb2924ce95ff5310e678b62a8f13fbc7cbf361_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/insights-client-rhel9@sha256:f1f771e90de962ce97fe9d140d71abdd8fc33c38aeb84a3104b1c6749459c80a_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:5358900487e74a07d12273ab68927b58d55ad71458c32e3e0e21c4b190086b4c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:cffb4ec9b857b93314cc47c750097a626442883629e277df2dac1c5d42da0708_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:fd00a227558172eba1b1fa31dd50acae70bdd165db08b66f4069043636c7b5b5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:f14f41b61b099806b6036b61ed9306ac9c9f95e33605acc64e8a64469eff0ccd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:bda534d5f955a14c8765dbf16ab5d5ed2df575dd1d365c0bb58135f58498b5d7_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:49d6d7e879bda7a6a891dd24c2444b5fd4e246fdfad0edc662f57cca336c84e2_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:af1573b59457dcaf6683f9610ab8cd3f686102fb77d3e9209e91f5f2255a6859_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:7fff547365a312b5d7a8429390e015347b67b57c7ae0ced7e0c5955bb107ef87_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:dd274e28bfb16bfb3cb7cab27186068bd65508d1a27a57660b769dc82e7ccf20_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:94fccec8f266a314d1c2d920675e4241d355eeda840facc52f46d40380bde0d9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:86937ea08fadee4bac7b352843fac87815bbe31e15632a35e02b1c2fe95a0353_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:dd2987c98202aaf6664a599ad9825888ac37cb9d3103131568ce01c2b4f1ea61_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/observatorium-rhel9@sha256:17ac01a3511a71348cfa30e02ced55df15b1b18a95a36d3f73217bead212461a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:6af44b9b59037012c8e6320135560bc58ca462adc3749840cb751ee7fed07f25_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:5bc7d4a620ae2676a6a2411ede36a30f2cfbfff19fd13620f7fcdd52a8474f1c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:173c3a62a0be3279c6d85c2bd697ebc80b94d2cfb1e57b12aaec6b0bd8bc8c6d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/thanos-rhel9@sha256:1d251ded18089e4470fce448a2b23eb2183d29af5fddee0b8d73ff38b845cf5a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/observatorium-rhel9@sha256:d7d40d9f5a50d1065d72057407df2f53ed003a773577609b7460c2369bfec8c6_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
…and 156 more
Timeline
- Sep 28, 2026 CVE Published
- Oct 12, 2026 CVE Updated
- Oct 12, 2026 Distribution Patch
- Oct 12, 2026 Distribution Patch
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:72881 advisory
- https://access.redhat.com/security/cve/CVE-2026-33816 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-42502 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72881.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2455972 issue
- https://www.cve.org/CVERecord?id=CVE-2026-33816 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-33816 advisory
- https://pkg.go.dev/vuln/GO-2026-4772 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2484830 issue
- https://www.cve.org/CVERecord?id=CVE-2026-41178 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-41178 advisory
- https://github.com/open-telemetry/opentelemetry-go/pull/7880 advisory
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2480762 issue
- https://www.cve.org/CVERecord?id=CVE-2026-42502 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-42502 advisory
…and 10 more