RHSA-2026:52930: Important: postgresql

Synopsis Important: postgresql-jdbc security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. Security Fix(es): - jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication (CVE-2026-42198) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Affected Products - Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 - Red Hat Enterprise Linux Server - AUS 9.6 x86_64 - Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x - Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le - Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 - Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le - Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 - Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 - Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x - Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 - Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 - Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le - Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes - BZ - 2463857 - CVE-2026-42198 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | x86_64 | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux Server - AUS 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | x86_64 | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | s390x | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | ppc64le | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | aarch64 | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | ppc64le | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | x86_64 | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | aarch64 | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | s390x | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | x86_64 | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | aarch64 | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | ppc64le | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f | Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 | SRPM | | postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm | SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 | | s390x | | postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm | SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |