Red Hat Security Advisory

RHSA-2026:62117

postgresql security update

Released 2026-09-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.4) postgresql-13.23-1.el9_4.3, postgresql-contrib-13.23-1.el9_4.3, postgresql-plperl-13.23-1.el9_4.3 +5

Fixes 1 record

TI-2026-05679 CVE-2026-6479 · GHSA-hwfh-mh4f-m67f

PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion

MEDIUM 40

Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00595 Published 2026-05-14 Partial fix · 18.4, 17.10 +3 CWE-674