RHSA-2026:52930: Important: postgresql-jdbc security update
Important: postgresql-jdbc security update
Other sources
PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.Security Fix(es): jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication (CVE-2026-42198) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/postgresql-jdbcto a version that resolves this vulnerability.Fixed in 42.2.28-1.el9_6.1 - Compensating control
Apply the postgresql-jdbc security update described in the advisory to address the client-side Denial of Service via malicious SCRAM-SHA-256 authentication (CVE-2026-42198).
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:52930?
The severity of RHSA-2026:52930 is classified as high with a score of 7.
What security issue does RHSA-2026:52930 address?
RHSA-2026:52930 addresses a client-side Denial of Service vulnerability in the postgresql-jdbc package.
How can I fix the vulnerabilities identified in RHSA-2026:52930?
To fix the vulnerabilities in RHSA-2026:52930, update the postgresql-jdbc package to the latest version provided by Red Hat.
Which systems are affected by RHSA-2026:52930?
RHSA-2026:52930 affects various versions of Red Hat Enterprise Linux, including x86_64 and IBM z Systems, as well as their Extended Life Cycle and Update Support versions.
When was RHSA-2026:52930 published?
RHSA-2026:52930 was published on August 10, 2026.