Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
PostgreSQL JDBC driver could let attackers read data
published 2 months ago
Summary
The PostgreSQL driver that your applications use to connect to PostgreSQL databases has a flaw that could allow a remote attacker to view data they should not see. This could expose confidential business information. Install the Red Hat security update to replace the driver with the corrected version as soon as possible.
What to do
- Update redhat postgresql-jdbc to version 0:42.2.28-1.el9_4.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_e4s:9.4::appstream | redhat | postgresql-jdbc |
< 0:42.2.28-1.el9_4.1 Fix: upgrade to 0:42.2.28-1.el9_4.1
|
Original advisory text
Red Hat Security Advisory: postgresql-jdbc security update
References
- https://access.redhat.com/errata/RHSA-2026:52929 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2463857 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52929.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-42198 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-42198 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-42198 Vendor Advisory
- https://github.com/pgjdbc/pgjdbc/releases/tag/REL42.7.11 Third Party Advisory
- https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published11 Aug 2026
Updated10 Sep 2026
First seen10 Sep 2026
Sources
RHSA-2026:52929 · OSV
Track software like this
Free during beta