This vulnerability (CVE-2026-6479, CVSS 7.5 HIGH) is a denial-of-service flaw in PostgreSQL caused by uncontrolled recursion during SSL/GSS negotiation. Affected versions are PostgreSQL < 14.23, >=15.0 <15.18, >=16.0 <16.14, >=17.0 <17.10, and >=18.0 <18.4. The fix requires upgrading to PostgreSQL version 14.23, 15.18, 16.14, 17.10, or 18.4, respectively.
Red Hat Product Errata RHSA-2026:52395 - Security Advisory Issued: 2026-08-10 Updated: 2026-08-10 RHSA-2026:52395 - Security Advisory Overview Updated Packages Synopsis Important: postgresql security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for postgresql is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation (CVE-2026-6479) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2477445 - CVE-2026-6479 postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation CVEs CVE-2026-6479 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM postgresql-13.23-5.el9_8.src.rpm SHA-256: 388d0d22ab8d9a5562b9e972f3cac685ea423e6b5638106cb9d92aa3e603ae9b x86_64 postgresql-13.23-5.el9_8.x86_64.rpm SHA-256: 5ed5539eea5097987da787e141f233b5d4ce126be516ae74b28c64a190a6ed96 postgresql-contrib-13.23-5.el9_8.x86_64.rpm SHA-256: 79010c742f65adaea68b88c0c8bf51ee030fd270b74105a918016fd586274e84 postgresql-contrib-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 10aadb31d7fd4e304af976bb202e822e6dcad7b4fefefe5940aba1774aea0d5f postgresql-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: c7d5385880fef6ec367d2fb7665e2331cdf97b96d1839a33c80a819cda7c509f postgresql-debugsource-13.23-5.el9_8.x86_64.rpm SHA-256: 2e7a5442e7df5c11b76ee2589db32861752188c9ffdea47d1872dfacd4ce2e72 postgresql-docs-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 09262d2e9c40076544e0c1ff616c29d633f3bb9cea5e6ae233ea9c95f0d8d18a postgresql-plperl-13.23-5.el9_8.x86_64.rpm SHA-256: e8708a5f94c74d84f2afaa76b7d0031f02a0e4eb3e88b1b27aab2177c6f123c4 postgresql-plperl-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: a0baae8da9fc46a6bc170289a44516930d56bb3b3b5067e8b62bb209be9737e8 postgresql-plpython3-13.23-5.el9_8.x86_64.rpm SHA-256: 8b5734e3a1140c1a6d3ef3e5ab2c7bfdf5d0d9b0ce041c6f78adc8791b63860a postgresql-plpython3-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 7a2e0205174b394850165caab2d9badd2157240605e6a6c1fb56b08e3337926a postgresql-pltcl-13.23-5.el9_8.x86_64.rpm SHA-256: 3d77ba1b1e8b7592e19ef8ddd9243657423fb8741bbcbbf89e94829675a253e8 postgresql-pltcl-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 176369f431956db677585cf3fd93822993b56903fb84ad06011ba257da8ae273 postgresql-private-libs-13.23-5.el9_8.x86_64.rpm SHA-256: 6e90def333513c2acc0ae35696e7a34ca872294879914b3fff2884eda6e26285 postgresql-private-libs-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 1aeb62d9ab671a26c94cdb0938a8bbe7231b78e1398e4be34546ee56b89add4f postgresql-server-13.23-5.el9_8.x86_64.rpm SHA-256: c8b1a84799320af8f7eb2b710112c2565fea919c887f614730669ed23306d7ec postgresql-server-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: fc137cde1591b90f56ab166b502364bcb09596624579d4902d14c29f72e7bc80 postgresql-server-devel-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: f7b126e772f93a60ffff49ee330a53ab4528fb7304abfd0ec1141403127ef2d6 postgresql-test-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 81e77e353254655523b57119b3e5587a719ceadc1de6232df7f107947f548333 postgresql-upgrade-13.23-5.el9_8.x86_64.rpm SHA-256: 4b8e83bae4a73dcfafdd6023d46c6460bd8e9ff78665eaca900c641f5bad8eb7 postgresql-upgrade-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: c834c6367d1ff30b80854282eed5e2c1b51c8f67329ae35e4a934a33d6602510 postgresql-upgrade-devel-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: d1cdf039f7be98fcfc727bf71093cc8963099bd85097f9d169fef8b5e14798a1 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM postgresql-13.23-5.el9_8.src.rpm SHA-256: 388d0d22ab8d9a5562b9e972f3cac685ea423e6b5638106cb9d92aa3e603ae9b x86_64 postgresql-13.23-5.el9_8.x86_64.rpm SHA-256: 5ed5539eea5097987da787e141f233b5d4ce126be516ae74b28c64a190a6ed96 postgresql-contrib-13.23-5.el9_8.x86_64.rpm SHA-256: 79010c742f65adaea68b88c0c8bf51ee030fd270b74105a918016fd586274e84 postgresql-contrib-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 10aadb31d7fd4e304af976bb202e822e6dcad7b4fefefe5940aba1774aea0d5f postgresql-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: c7d5385880fef6ec367d2fb7665e2331cdf97b96d1839a33c80a819cda7c509f postgresql-debugsource-13.23-5.el9_8.x86_64.rpm SHA-256: 2e7a5442e7df5c11b76ee2589db32861752188c9ffdea47d1872dfacd4ce2e72 postgresql-docs-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 09262d2e9c40076544e0c1ff616c29d633f3bb9cea5e6ae233ea9c95f0d8d18a postgresql-plperl-13.23-5.el9_8.x86_64.rpm SHA-256: e8708a5f94c74d84f2afaa76b7d0031f02a0e4eb3e88b1b27aab2177c6f123c4 postgresql-plperl-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: a0baae8da9fc46a6bc170289a44516930d56bb3b3b5067e8b62bb209be9737e8 postgresql-plpython3-13.23-5.el9_8.x86_64.rpm SHA-256: 8b5734e3a1140c1a6d3ef3e5ab2c7bfdf5d0d9b0ce041c6f78adc8791b63860a postgresql-plpython3-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 7a2e0205174b394850165caab2d9badd2157240605e6a6c1fb56b08e3337926a postgresql-pltcl-13.23-5.el9_8.x86_64.rpm SHA-256: 3d77ba1b1e8b7592e19ef8ddd9243657423fb8741bbcbbf89e94829675a253e8 postgresql-pltcl-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 176369f431956db677585cf3fd93822993b56903fb84ad06011ba257da8ae273 postgresql-private-libs-13.23-5.el9_8.x86_64.rpm SHA-256: 6e90def333513c2acc0ae35696e7a34ca872294879914b3fff2884eda6e26285 postgresql-private-libs-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 1aeb62d9ab671a26c94cdb0938a8bbe7231b78e1398e4be34546ee56b89add4f postgresql-server-13.23-5.el9_8.x86_64.rpm SHA-256: c8b1a84799320af8f7eb2b710112c2565fea919c887f614730669ed23306d7ec postgresql-server-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: fc137cde1591b90f56ab166b502364bcb09596624579d4902d14c29f72e7bc80 postgresql-server-devel-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: f7b126e772f93a60ffff49ee330a53ab4528fb7304abfd0ec1141403127ef2d6 postgresql-test-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: 81e77e353254655523b57119b3e5587a719ceadc1de6232df7f107947f548333 postgresql-upgrade-13.23-5.el9_8.x86_64.rpm SHA-256: 4b8e83bae4a73dcfafdd6023d46c6460bd8e9ff78665eaca900c641f5bad8eb7 postgresql-upgrade-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: c834c6367d1ff30b80854282eed5e2c1b51c8f67329ae35e4a934a33d6602510 postgresql-upgrade-devel-debuginfo-13.23-5.el9_8.x86_64.rpm SHA-256: d1cdf039f7be98fcfc727bf71093cc8963099bd85097f9d169fef8b5e14798a1 Red Hat Enterprise Linux for IBM z Systems 9 SRPM postgresql-13.23-5.el9_8.src.rpm SHA-256: 388d0d22ab8d9a5562b9e972f3cac685ea423e6b5638106cb9d92aa3e603ae9b s390x postgresql-13.23-5.el9_8.s390x.rpm SHA-256: d794e7609c41b06d7ad7849087fced70390db003544f64a1b7b37970f1341189 postgresql-contrib-13.23-5.el9_8.s390x.rpm SHA-256: 692833a2a8e7c61fc66061d2b97a78d28124025d5b1be3fe1a694d4cf239bb52 postgresql-contrib-debuginfo-13.23-5.el9_8.s390x.rpm SHA-256: 87658803d23f68f68c7d68bf859b8117b628cb4bfb194bed5c2efadd0453132c postgresql-debuginfo-13.23-5.el9_8.s390x.rpm SHA-256: 3ac9e3b750a2149e5335eac1e90fa759903d502e69b80eb49b23b10de8c85ada postgresql-debugsource-13.23-5.el9_8.s390x.rpm SHA-256: 789382d222e468308aaeeb9cc3feaf0254fb61259da33452e037ed34206a3ecb postgresql-docs-debuginfo-13.23-5.el9_8.s390x.rpm SHA-256: 09d9e7ad4ae66b1b53f47d18886d16f26ba5c93c7ac8d84070abbcfb94361a12 postgresql-plperl-13.23-5.el9_8.s390x.rpm SHA-256: 7639324e3c2d9d19e1c60c07688035ea89e24bde1adeb05a7cdb0b34a61dc863 postgresql-plperl-debuginfo-13.23-5.el9_8.s390x.rpm SHA-256: 9a94931d0f9d6bdf1cb0d92155cd34b4cda263a8cd6a93a92e8bde8a5a727d9e postgresql-plpy