A critical denial-of-service vulnerability (CVE-2026-6479, CVSS 7.5 HIGH) in PostgreSQL stems from uncontrolled recursion during SSL/GSS negotiation. Affected versions are PostgreSQL 14.x before 14.23, 15.x before 15.18, 16.x before 16.14, 17.x before 17.10, and 18.x before 18.4. The fix requires upgrading to PostgreSQL 14.23, 15.18, 16.14, 17.10, or 18.4, respectively.
Red Hat Product Errata RHSA-2026:62117 - Security Advisory Issued: 2026-09-01 Updated: 2026-09-01 RHSA-2026:62117 - Security Advisory Overview Updated Packages Synopsis Important: postgresql security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for postgresql is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation (CVE-2026-6479) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2477445 - CVE-2026-6479 postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation CVEs CVE-2026-6479 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM postgresql-13.23-1.el9_4.3.src.rpm SHA-256: cf1cf79cb05860882c8ba199864454e7e41e7b64d5dec57cea09856ea09a9e20 x86_64 postgresql-13.23-1.el9_4.3.x86_64.rpm SHA-256: 822d0b1d9d3f6f3ba094fd2af44ce5e974a1a30369212d15f777cd218aa6e2d6 postgresql-contrib-13.23-1.el9_4.3.x86_64.rpm SHA-256: ba7266018e9a7ec4ae51b6f905c25096ee56394206b4e1f0e96dc40ab4a703aa postgresql-contrib-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 591c400a5f8dbeeba37f997bcd148c90baaeee78b0b8b6b87c9aceb308c81b82 postgresql-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 0d5c8d722fd3d40b22b1af086846e5c45ceefbddc654e3d7fe7c62abb20a7ce7 postgresql-debugsource-13.23-1.el9_4.3.x86_64.rpm SHA-256: b8489eced52f0692a1bc5a077ee1b70e74eb29337dad0355dbceb5cffa350f0c postgresql-docs-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: bc011133371bc526901485b275cbe368824a4741e601cf2a3b547e2180a9ef9f postgresql-plperl-13.23-1.el9_4.3.x86_64.rpm SHA-256: 59d2e012687db50ba04a9a20c3cdd6ec226ec4a986cb6de7375844c13bca6487 postgresql-plperl-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 2e3fce848ffba00a6e9d45c19095c2ca340208870c71e0f0a7a9bf0f766f0a1a postgresql-plpython3-13.23-1.el9_4.3.x86_64.rpm SHA-256: ccbabb7035658f30827b9e078f2c3097e33719e1031351b7ce286ea7ad2238ac postgresql-plpython3-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 6f1ff95afe117f4fdddd35212d190ae6d478f6c6d830015690c347ba6c08a607 postgresql-pltcl-13.23-1.el9_4.3.x86_64.rpm SHA-256: e1120ae746ef07e51646e9b119077973879bebac03548db3ee28cc03c929c0ee postgresql-pltcl-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 588c454f67248a09642c9f8e9b446f63af605e7adc5cceb184df0ce65e53c251 postgresql-private-libs-13.23-1.el9_4.3.x86_64.rpm SHA-256: 7fef190a1ad4f6ac82ea2e787c280c0da7a2f715fbd2938debaf9318dadaf85d postgresql-private-libs-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 2bba3f6546f7bf75061ced3b45d7021bffa45fcd400dd498bc09d0087d3efac7 postgresql-server-13.23-1.el9_4.3.x86_64.rpm SHA-256: c3db94aafca7f303a3d46c5c5d8bd24b7032c3383b76fd338ef5a46261da7ffb postgresql-server-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 20d1c3e0c58c82627c3d98c1ddeafd26cb932a21d6857235dfac84e9b6252d31 postgresql-server-devel-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 47feed9c8ea2d70e51ed062ec1702789a640ddcfb6882feb117842bdc7a85dfc postgresql-test-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 5cf5d7a479bf1a41a1a713601a8f3cd258490a795d027f4add97842f86acac28 postgresql-upgrade-13.23-1.el9_4.3.x86_64.rpm SHA-256: bf3bc575231086d2d8b5c8dae0cd795f87c9991c4ec84cf87e6e87e103383722 postgresql-upgrade-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 3730eba1aab9ff4114b0d1e12192edccb30f5e2798de315016821a531fbc1f98 postgresql-upgrade-devel-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: b5c405d12f9b108c56a98f1fec6a7ad5ee8f370294fdb9398459240499205844 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM postgresql-13.23-1.el9_4.3.src.rpm SHA-256: cf1cf79cb05860882c8ba199864454e7e41e7b64d5dec57cea09856ea09a9e20 ppc64le postgresql-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 0f730f4040ad0ff6fd851dce5a5cedae1c19eb128663cd05f751ea74446559ff postgresql-contrib-13.23-1.el9_4.3.ppc64le.rpm SHA-256: dbf92ac0e35819bff65f06d371567d41454b75c02c24a2dbef8ae09aa83dd36a postgresql-contrib-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 396dd63e64ad2e787cae5147139b4e14b7db5f12c9d8598ce1b085e67217b240 postgresql-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 262e105a50eeec5173326aa3ba37e7a72820d0ccbf795bafdeb38097b9ec13b1 postgresql-debugsource-13.23-1.el9_4.3.ppc64le.rpm SHA-256: d4a4bffd1cd39a25960ed92bb51791e864edd51ba8e2bc262940d4990244e0b7 postgresql-docs-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 14babe220bbf85a318a09bcca59eca57831f216a8668c67ac384d31eb01a6acb postgresql-plperl-13.23-1.el9_4.3.ppc64le.rpm SHA-256: b9dfc268a075468f27bd43409cc223dc248712db9a740a2ae0dc3b07d5e68f03 postgresql-plperl-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 3a9637663c120ddb74a25204d0f5a9dbadc11ab4a5bd6387ccf0d89989284487 postgresql-plpython3-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 05b6de45f6ecb946d7b4990717258adbbcd1a1539fd50a57ee4c67d511d8d43b postgresql-plpython3-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 20bbac504fa3f9cccdef5aeb99fa9a138befb186261ee7c1f3ea0254d9279ea7 postgresql-pltcl-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 5c1b5cf0da8d79b1c98e690006b15347445d61ae9076aca3443b7f06ed7f1f04 postgresql-pltcl-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 748c86a5a89ed1b37d432a4998a8e59fd060bd82f8dcaf2bfae9f591ff96edc0 postgresql-private-libs-13.23-1.el9_4.3.ppc64le.rpm SHA-256: cb5f2d802c7a7bbfcd2b80c1fbaa5329a86457182fc80a376e572d53e0d26a00 postgresql-private-libs-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 0a240e14e851d20141a2aaf0abaf4e0f3819645bf4bcf8c22c6c8eb401a51b60 postgresql-server-13.23-1.el9_4.3.ppc64le.rpm SHA-256: b02c908af366fa5f715e63fe464c9c1618b71531d43433a70ad3969535d6bb54 postgresql-server-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: b251c5702c6b921e1f44e229ae6d6c11bcaef121f9160b77a1a88f096d267144 postgresql-server-devel-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 45538cb4b959831c101fa20069aaf3cf5a1895506e89572fb4bb82c5d9c7ce91 postgresql-test-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 237c6fec98b352bc7f00d8732ecbc7dddc1bd32ef7a4969f0149edaa32b11ae5 postgresql-upgrade-13.23-1.el9_4.3.ppc64le.rpm SHA-256: f81ab778bd9f574a0d1affc646209f4f39033c4d982f6c13e755fad3fb9f7c59 postgresql-upgrade-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: fb6bf78c036cd12f50a7c697d8bf205418b5aadb00b5a406c3fac3f02c50d8f0 postgresql-upgrade-devel-debuginfo-13.23-1.el9_4.3.ppc64le.rpm SHA-256: 493f592b2e74c4967b8fe72b6044a4fdf5eef1b61c9d51360622bfa6bb3c7172 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM postgresql-13.23-1.el9_4.3.src.rpm SHA-256: cf1cf79cb05860882c8ba199864454e7e41e7b64d5dec57cea09856ea09a9e20 x86_64 postgresql-13.23-1.el9_4.3.x86_64.rpm SHA-256: 822d0b1d9d3f6f3ba094fd2af44ce5e974a1a30369212d15f777cd218aa6e2d6 postgresql-contrib-13.23-1.el9_4.3.x86_64.rpm SHA-256: ba7266018e9a7ec4ae51b6f905c25096ee56394206b4e1f0e96dc40ab4a703aa postgresql-contrib-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 591c400a5f8dbeeba37f997bcd148c90baaeee78b0b8b6b87c9aceb308c81b82 postgresql-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 0d5c8d722fd3d40b22b1af086846e5c45ceefbddc654e3d7fe7c62abb20a7ce7 postgresql-debugsource-13.23-1.el9_4.3.x86_64.rpm SHA-256: b8489eced52f0692a1bc5a077ee1b70e74eb29337dad0355dbceb5cffa350f0c postgresql-docs-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: bc011133371bc526901485b275cbe368824a4741e601cf2a3b547e2180a9ef9f postgresql-plperl-13.23-1.el9_4.3.x86_64.rpm SHA-256: 59d2e012687db50ba04a9a20c3cdd6ec226ec4a986cb6de7375844c13bca6487 postgresql-plperl-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 2e3fce848ffba00a6e9d45c19095c2ca340208870c71e0f0a7a9bf0f766f0a1a postgresql-plpython3-13.23-1.el9_4.3.x86_64.rpm SHA-256: ccbabb7035658f30827b9e078f2c3097e33719e1031351b7ce286ea7ad2238ac postgresql-plpython3-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 6f1ff95afe117f4fdddd35212d190ae6d478f6c6d830015690c347ba6c08a607 postgresql-pltcl-13.23-1.el9_4.3.x86_64.rpm SHA-256: e1120ae746ef07e51646e9b119077973879bebac03548db3ee28cc03c929c0ee postgresql-pltcl-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 588c454f67248a09642c9f8e9b446f63af605e7adc5cceb184df0ce65e53c251 postgresql-private-libs-13.23-1.el9_4.3.x86_64.rpm SHA-256: 7fef190a1ad4f6ac82ea2e787c280c0da7a2f715fbd2938debaf9318dadaf85d postgresql-private-libs-debuginfo-13.23-1.el9_4.3.x86_64.rpm SHA-256: 2bba3f6546f7bf75061ced3b45d7021bffa45fcd400dd498bc09d0087d3efac7 postgresql-server-13.23-1.el9_4.3.x86_64.rpm SHA-256: c3db94aafca7f