Message-ID: <3cfc7da6-5c30-442d-8083-f171c8e5ef25@darrenduncan.net>
Date: Wed, 3 Jun 2026 03:48:01 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Help with remediation for vulnerabilities for pgadmin4 version
 9.x in RH8
To: pgadmin-support@lists.postgresql.org
References: 
 <CAFLwmF_-=UOpmquSCYG1_L4EffmNKE7FCw8FGRrTF0PHfy=xbA@mail.gmail.com>
Content-Language: en-CA
From: Darren Duncan <darren@darrenduncan.net>
In-Reply-To: 
 <CAFLwmF_-=UOpmquSCYG1_L4EffmNKE7FCw8FGRrTF0PHfy=xbA@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Archived-At: 
 <https://www.postgresql.org/message-id/3cfc7da6-5c30-442d-8083-f171c8e5ef25%40darrenduncan.net>
Precedence: bulk

On 2026-06-01 1:00 p.m., Kristen Delack wrote:
> I am the Operations & Maintenance software development team lead on the National 
> Weather Service's (NWS) Advanced Weather Interactive Processing System (AWIPS) 
> program. We use pgadmin4 on RHEL8. We just recently upgraded to version 9.12 
> before a new vulnerability <https://www.cve.org/CVERecord?id=CVE-2026-7820> in 
> versions up through 9.14 was announced. We see that version 9.15 mitigates this 
> vulnerability, but according to your page <https://www.pgadmin.org/download/ 
> pgadmin-4-rpm/>, 9.14 is the last supported release for RH8. Does this mean that 
> no further versions of 9.x for RH8 will be released when vulnerabilities are found?
That is usually what this means, yes.

But this should not be too big of a challenge for you to overcome.

Since PgAdmin4 is a database client program and not a server, it should be 
fairly low risk for you to just use a machine with a newer operating system than 
RH8 and run the latest most secure PgAdmin4 on it instead.

Being a client, nothing else has to talk to or be compatible with the new machine.

So you can upgrade to the latest PgAdmin4 without having to update anything else 
really at the same time.

The new machine can be just for running PgAdmin4 initially.

Darren Duncan