# CVE-2026-14681: postgresql-17: Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to... CVE-2026-14681 is fixed in 75 products on 1 platform, first by libecpg-compat3 18.6-0ubuntu0.26.04.1, released August 13, 2026. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2026-14681 - Priority: Routine - CVSS: 4.2 (medium) - EPSS: 0.0008 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Aug 13, 2026 ## Description Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS settings are more permissive than the GSS settings, the connection may continue with lesser protection. Within major versions 17-18, minor versions before PostgreSQL 18.6 and 17.11 are affected. Versions before PostgreSQL 17 are unaffected. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libecpg-compat3 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [libecpg-compat3 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libecpg-compat3-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | libecpg6 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [libecpg6 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libecpg6-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | libpgtypes3 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [libpgtypes3 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libpgtypes3-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | libpq-oauth Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [libpq-oauth 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libpq-oauth-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | libpq5 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [libpq5 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libpq5-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | postgresql-17 Debian 13.5 (trixie) | 17.11-0+deb13u1 | [DEBIAN-CVE-2026-14681](https://patchblox.com/security/data/fix/linux/debian-cve-2026-14681.md) | Aug 14, 2026 | | Linux | postgresql-18 Debian 14 | 18.6-1 | [DEBIAN-CVE-2026-14681](https://patchblox.com/security/data/fix/linux/debian-cve-2026-14681.md) | Aug 14, 2026 | | Linux | postgresql-18 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [postgresql-18 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-postgresql-18-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | postgresql-18-jit Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [postgresql-18-jit 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-postgresql-18-jit-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | postgresql-client-18 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [postgresql-client-18 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-postgresql-client-18-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | postgresql-doc-18 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [postgresql-doc-18 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-postgresql-doc-18-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | postgresql-plperl-18 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [postgresql-plperl-18 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-postgresql-plperl-18-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | postgresql-plpython3-18 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [postgresql-plpython3-18 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-postgresql-plpython3-18-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | postgresql-pltcl-18 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [postgresql-pltcl-18 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-postgresql-pltcl-18-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | postgresql-server-dev-18 Ubuntu 26.04.1 LTS (resolute) | 18.6-0ubuntu0.26.04.1 | [postgresql-server-dev-18 18.6-0ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-postgresql-server-dev-18-18.6-0ubuntu0.26.04.1.md) | Aug 13, 2026 | | Linux | postgresql17 amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17 opensuse-leap 16.0 | 17.11-160000.1.1 | [OPENSUSE-SU-2026:21702-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21702-1.md) | Aug 30, 2026 | | Linux | postgresql17 sles 15.6 | 17.11-150600.13.32.1 | [SUSE-SU-2026:4016-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4016-1.md) | Sep 7, 2026 | | Linux | postgresql17 sles 15.7 | 17.11-150600.13.32.1 | [SUSE-SU-2026:4016-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4016-1.md) | Sep 7, 2026 | | Linux | postgresql17 sles 16.0 | 17.11-160000.1.1 | [SUSE-SU-2026:23582-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23582-1.md) | Aug 30, 2026 | | Linux | postgresql17-contrib amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-contrib-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-debugsource amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-docs amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-docs-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-llvmjit amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-llvmjit-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-plperl amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-plperl-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-plpython3 amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-plpython3-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-pltcl amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-pltcl-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-private-devel amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-private-libs amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-private-libs-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-server amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-server-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-server-devel amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-server-devel-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-static amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-test amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-test-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-test-rpm-macros amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-upgrade amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-upgrade-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-upgrade-devel amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql17-upgrade-devel-debuginfo amzn 2023 | 17.11-1.amzn2023.0.1 | [ALAS2023-2026-2076](https://patchblox.com/security/data/fix/linux/alas2023-2026-2076.md) | Aug 31, 2026 | | Linux | postgresql18 amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18 opensuse-leap 16.0 | 18.6-160000.1.1 | [OPENSUSE-SU-2026:21703-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21703-1.md) | Aug 30, 2026 | | Linux | postgresql18 sles 15.6 | 18.6-150600.13.16.1 | [SUSE-SU-2026:4014-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4014-1.md) | Sep 7, 2026 | | Linux | postgresql18 sles 15.7 | 18.6-150600.13.16.1 | [SUSE-SU-2026:4014-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4014-1.md) | Sep 7, 2026 | | Linux | postgresql18 sles 16.0 | 18.6-160000.1.1 | [SUSE-SU-2026:23577-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23577-1.md) | Aug 30, 2026 | | Linux | postgresql18-contrib amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-contrib-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-debugsource amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-docs amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-docs-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-llvmjit amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-llvmjit-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-mini opensuse-leap 16.0 | 18.6-160000.1.1 | [OPENSUSE-SU-2026:21703-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21703-1.md) | Aug 30, 2026 | | Linux | postgresql18-plperl amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-plperl-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-plpython3 amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-plpython3-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-pltcl amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-pltcl-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-private-devel amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-private-libs amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-private-libs-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-server amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-server-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-server-devel amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-server-devel-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-static amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-test amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-test-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-test-rpm-macros amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-upgrade amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-upgrade-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-upgrade-devel amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | | Linux | postgresql18-upgrade-devel-debuginfo amzn 2023 | 18.6-1.amzn2023.0.1 | [ALAS2023-2026-2079](https://patchblox.com/security/data/fix/linux/alas2023-2026-2079.md) | Aug 31, 2026 | --- Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.