Synopsis
Important: postgresql-jdbc security update
Type/Severity
Security Advisory: Important
Red Hat Lightspeed patch analysis
Identify and remediate systems affected by this advisory.
View affected systems
Topic
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.
Security Fix(es):
- jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication (CVE-2026-42198)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
-
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
-
Red Hat Enterprise Linux Server - AUS 9.6 x86_64
-
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
-
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
-
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
-
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
-
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
-
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
-
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
-
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
-
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
-
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
-
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x
Fixes
-
BZ - 2463857
- CVE-2026-42198 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication
Note:
More recent versions of these packages may be available.
Click a package name for more details.
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| x86_64 |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux Server - AUS 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| x86_64 |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| s390x |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| ppc64le |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| aarch64 |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| ppc64le |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| x86_64 |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| aarch64 |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| s390x |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| x86_64 |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| aarch64 |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| ppc64le |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6
| SRPM |
|
postgresql-jdbc-42.2.28-1.el9_6.1.src.rpm
|
SHA-256: f1ca7721305b5e465856c20775efc2ad268a421cb1654c084d2f98e4f154d696 |
| s390x |
|
postgresql-jdbc-42.2.28-1.el9_6.1.noarch.rpm
|
SHA-256: 59157987930bce7b9554804a6e22b4af7f1abdc6f2ec4977418d6b786bbc501f |