Every CVE Search/ Get API key

CVE-2025-12818

PostgreSQL libpq undersizes allocations, via integer wraparound

5.9 MediumFix available

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.36%Up 0.3 points since Nov 14, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.9

PostgreSQL libpq undersizes allocations, via integer wraparound

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

Record
CVE-2025-12818
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2025-169291 5.9

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

Record
EUVD-2025-169291
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-pr6x-gg24-6wfp 5.9

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application...

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

Record
GHSA-pr6x-gg24-6wfp
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-190
Updated
2026-11-02
NVD 5.9

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

Record
CVE-2025-12818
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-190
Updated
2026-11-02
OSVALPINE-CVE-2025-12818 5.9

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

Record
ALPINE-CVE-2025-12818
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVBELL-CVE-2025-12818 5.9
Record
BELL-CVE-2025-12818
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2025-12818 5.9

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

Record
DEBIAN-CVE-2025-12818
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2715 5.9

postgresql-13 security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2715
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2721 5.9

postgresql security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2721
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2722 5.9

postgresql security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2722
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2723 5.9

postgresql security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2723
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2724 5.9

postgresql security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2724
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2725 5.9

postgresql security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2725
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2726 5.9

libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or interface.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2726
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2727 5.9

libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or interface.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2727
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2728 5.9

libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or interface.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2728
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2729 5.9

libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or interface.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2729
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2730 5.9

libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or interface.

Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12818)

Record
OESA-2025-2730
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:22728 7.5

Red Hat Security Advisory: postgresql:15 security update

Record
RHSA-2025:22728
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:23022 7.5

Red Hat Security Advisory: postgresql:15 security update

Record
RHSA-2025:23022
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:23023 7.5

Red Hat Security Advisory: postgresql:15 security update

Record
RHSA-2025:23023
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:23123 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2025:23123
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:23124 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2025:23124
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:23157 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2025:23157
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:23158 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2025:23158
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0262 7.5

Red Hat Security Advisory: postgresql security update

Record
RHSA-2026:0262
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0263 7.5

Red Hat Security Advisory: postgresql security update

Record
RHSA-2026:0263
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0264 7.5

Red Hat Security Advisory: postgresql:16 security update

Record
RHSA-2026:0264
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0265 7.5

Red Hat Security Advisory: postgresql:13 security update

Record
RHSA-2026:0265
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0266 7.5

Red Hat Security Advisory: postgresql:15 security update

Record
RHSA-2026:0266
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0267 7.5

Red Hat Security Advisory: postgresql:13 security update

Record
RHSA-2026:0267
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0268 7.5

Red Hat Security Advisory: postgresql security update

Record
RHSA-2026:0268
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0269 7.5

Red Hat Security Advisory: postgresql:16 security update

Record
RHSA-2026:0269
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0270 7.5

Red Hat Security Advisory: postgresql:13 security update

Record
RHSA-2026:0270
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0455 7.5

Red Hat Security Advisory: postgresql security update

Record
RHSA-2026:0455
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0456 7.5

Red Hat Security Advisory: postgresql16 security update

Record
RHSA-2026:0456
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0458 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2026:0458
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0491 7.5

Red Hat Security Advisory: postgresql security update

Record
RHSA-2026:0491
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0492 7.5

Red Hat Security Advisory: postgresql:15 security update

Record
RHSA-2026:0492
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0493 7.5

Red Hat Security Advisory: postgresql:16 security update

Record
RHSA-2026:0493
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0519 7.5

Red Hat Security Advisory: postgresql:16 security update

Record
RHSA-2026:0519
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0523 7.5

Red Hat Security Advisory: postgresql:13 security update

Record
RHSA-2026:0523
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0524 7.5

Red Hat Security Advisory: postgresql:15 security update

Record
RHSA-2026:0524
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0525 7.5

Red Hat Security Advisory: postgresql16 security update

Record
RHSA-2026:0525
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0594 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2026:0594
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0695 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2026:0695
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0744 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2026:0744
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0745 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2026:0745
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0746 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2026:0746
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0835 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2026:0835
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0865 7.5

Red Hat Security Advisory: libpq security update

Record
RHSA-2026:0865
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8756 8.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:8756
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:0458 7.5

Moderate: libpq security update

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.

Security Fix(es):

  • postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:0458
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:0491 7.5

Moderate: postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)

  • postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:0491
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
postgresql15
Alpine:v3.19
 before 15.15-r0
15.15-r0
postgresql15
Alpine:v3.20
 before 15.15-r0
15.15-r0
postgresql15
Alpine:v3.22
 before 15.15-r0
15.15-r0
postgresql16
Alpine:v3.19
 before 16.11-r0
16.11-r0
postgresql16
Alpine:v3.20
 before 16.11-r0
16.11-r0
postgresql16
Alpine:v3.21
 before 16.11-r0
16.11-r0
postgresql16
Alpine:v3.22
 before 16.11-r0
16.11-r0
postgresql16
Alpine:v3.23
 before 16.11-r0
16.11-r0
postgresql16
Alpine:v3.24
 before 16.11-r0
16.11-r0
postgresql17
Alpine:v3.21
 before 17.7-r0
17.7-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
postgresql17
Alpine:v3.22
 before 17.7-r0
17.7-r0
postgresql17
Alpine:v3.23
 before 17.7-r0
17.7-r0
postgresql17
Alpine:v3.24
 before 17.7-r0
17.7-r0
postgresql18
Alpine:v3.23
 before 18.1-r0
18.1-r0
postgresql18
Alpine:v3.24
 before 18.1-r0
18.1-r0
libpq
AlmaLinux:9
 before 13.23-1.el9_7
13.23-1.el9_7
libpq-devel
AlmaLinux:9
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-contrib
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-docs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-plperl
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-plpython3
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-pltcl
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-private-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-private-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-server
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-server-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-static
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-test
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-test-rpm-macros
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-upgrade
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
postgresql-upgrade-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.23-1.el9_7
13.23-1.el9_7
pg_repack
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.4.8-2.module_el9.5.0+119+18833d03
1.4.8-2.module_el9.5.0+119+18833d03
pgaudit
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.7.0-1.module_el9.3.0+52+21733919
1.7.0-1.module_el9.3.0+52+21733919
postgres-decoderbufs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.9.7-1.Final.module_el9.3.0+52+21733919
1.9.7-1.Final.module_el9.3.0+52+21733919
postgresql
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-contrib
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-docs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-plperl
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-plpython3
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-pltcl
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-private-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-private-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-server
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-server-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-static
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-test
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-test-rpm-macros
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-upgrade
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
postgresql-upgrade-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 15.15-2.module_el9.7.0+203+960b74c0
15.15-2.module_el9.7.0+203+960b74c0
pg_repack
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.5.1-1.module_el9.6.0+146+c54fdeca
1.5.1-1.module_el9.6.0+146+c54fdeca
pgaudit
AlmaLinux:9
From an advisory covering 2 CVEs
 before 16.0-1.module_el9.4.0+66+eb9878bc
16.0-1.module_el9.4.0+66+eb9878bc
pgvector
AlmaLinux:9
From an advisory covering 2 CVEs
 before 0.6.2-2.module_el9.6.0+167+4e561146
0.6.2-2.module_el9.6.0+167+4e561146
postgis
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.5.3-3.module_el9.7.0+187+2286ff0a
3.5.3-3.module_el9.7.0+187+2286ff0a
postgis-client
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.5.3-3.module_el9.7.0+187+2286ff0a
3.5.3-3.module_el9.7.0+187+2286ff0a
postgis-docs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.5.3-3.module_el9.7.0+187+2286ff0a
3.5.3-3.module_el9.7.0+187+2286ff0a
postgis-upgrade
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.5.3-3.module_el9.7.0+187+2286ff0a
3.5.3-3.module_el9.7.0+187+2286ff0a
postgis-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.5.3-3.module_el9.7.0+187+2286ff0a
3.5.3-3.module_el9.7.0+187+2286ff0a
postgres-decoderbufs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.4.0-1.Final.module_el9.4.0+66+eb9878bc
2.4.0-1.Final.module_el9.4.0+66+eb9878bc
postgresql
AlmaLinux:9
From an advisory covering 2 CVEs
 before 16.11-1.module_el9.7.0+202+21427d8a
16.11-1.module_el9.7.0+202+21427d8a
postgresql-contrib
AlmaLinux:9
From an advisory covering 2 CVEs
 before 16.11-1.module_el9.7.0+202+21427d8a
16.11-1.module_el9.7.0+202+21427d8a
postgresql-docs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 16.11-1.module_el9.7.0+202+21427d8a
16.11-1.module_el9.7.0+202+21427d8a
postgresql-plperl
AlmaLinux:9
From an advisory covering 2 CVEs
 before 16.11-1.module_el9.7.0+202+21427d8a
16.11-1.module_el9.7.0+202+21427d8a
postgresql-plpython3
AlmaLinux:9
From an advisory covering 2 CVEs
 before 16.11-1.module_el9.7.0+202+21427d8a
16.11-1.module_el9.7.0+202+21427d8a
postgresql-pltcl
AlmaLinux:9
From an advisory covering 2 CVEs
 before 16.11-1.module_el9.7.0+202+21427d8a
16.11-1.module_el9.7.0+202+21427d8a
postgresql
Azure Linux:3
 before 16.11-1
16.11-1
postgresql
Azure Linux:2
 before 14.20-1
14.20-1
rust
Azure Linux:3
 1.85.0 up to 1.90.0-4
1.90.0-4
postgresql15
Alpaquita:23
 15.2-r0 up to 15.15-r0
15.15-r0
postgresql17
Alpaquita:25
 17.5-r0 up to 17.7-r0
17.7-r0
postgresql18
Alpaquita:stream
 18.0-r0 up to 18.1-r0
18.1-r0
postgresql
Bitnami
 before 13.23.0, 14.0.0 up to 14.20.0, 15.0.0 up to 15.15.0, 16.0.0 up to 16.11.0, 17.0.0 up to 17.7.0, 18.0.0 up to 18.1.0
13.23.014.20.015.15.016.11.017.7.018.1.0
libpq
TuxCare:AlmaLinux:9.2
 before 13.5-1.el9.tuxcare.els2
13.5-1.el9.tuxcare.els2
libpq-devel
TuxCare:AlmaLinux:9.2
 before 13.5-1.el9.tuxcare.els2
13.5-1.el9.tuxcare.els2
libpq
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
libpq-devel
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-contrib
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-docs
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-plperl
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-plpython3
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-pltcl
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-private-devel
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-private-libs
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-server
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-server-devel
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-static
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-test
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-test-rpm-macros
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-upgrade
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-upgrade-devel
TuxCare:AlmaLinux:9.6
 before 13.23-1.el9.tuxcare.els1
13.23-1.el9.tuxcare.els1
postgresql-15
Debian:12
 before 15.15-0+deb12u1, plus listed versions
15.10-0+deb12u115.11-0+deb12u115.12-0+deb12u115.12-0+deb12u215.13-0+deb12u1
Show 12 moreShow less
15.14-0+deb12u115.3-0+deb12u115.3-115.4-0+deb12u115.4-115.4-215.4-315.5-0+deb12u115.6-0+deb12u115.7-0+deb12u115.8-0+deb12u115.9-0+deb12u1
15.15-0+deb12u1
postgresql-17
Debian:13
 before 17.7-0+deb13u1, plus listed versions
17.5-117.6-0+deb13u117.6-1
17.7-0+deb13u1
postgresql-18
Debian:14
 before 18.1-1, plus listed versions
18.0-118~beta1+20250612-118~beta1+20250624-118~beta1+20250701-118~beta1-1
Show 10 moreShow less
18~beta2-118~beta3-118~rc1-118~rc1-218~rc1-318~~devel.20250318+g4078da6c478-118~~devel.20250331-118~~devel.20250405-118~~devel.20250421-118~~devel.20250502-1
18.1-1
postgresql-13
Debian:11
From an advisory covering 2 CVEs
 before 13.23-0+deb11u1, plus listed versions
13.10-0+deb11u113.11-0+deb11u113.12-0+deb11u113.13-0+deb11u113.14-0+deb11u1
Show 17 moreShow less
13.15-0+deb11u113.16-0+deb11u113.17-0+deb11u113.18-0+deb11u113.19-0+deb11u113.20-0+deb11u113.21-0+deb11u113.22-0+deb11u113.3-113.4-0+deb11u113.4-113.4-213.4-313.5-0+deb11u113.7-0+deb11u113.8-0+deb11u113.9-0+deb11u1
13.23-0+deb11u1
postgresql15
Mageia:9
From an advisory covering 2 CVEs
 before 15.15-1.mga9
15.15-1.mga9
postgresql13
Mageia:9
From an advisory covering 2 CVEs
 before 13.23-1.mga9
13.23-1.mga9
postgresql-13
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 13.23-1.oe2003sp4
13.23-1.oe2003sp4
postgresql
openEuler:24.03-LTS-SP2
From an advisory covering 2 CVEs
 before 15.15-1.oe2403sp2
15.15-1.oe2403sp2
postgresql
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 13.23-1.oe2203sp3
13.23-1.oe2203sp3
postgresql
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 13.23-1.oe2203sp4
13.23-1.oe2203sp4
postgresql
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 15.15-1.oe2403
15.15-1.oe2403
postgresql
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 15.15-1.oe2403sp1
15.15-1.oe2403sp1
libpq
openEuler:24.03-LTS-SP2
From an advisory covering 2 CVEs
 before 15.15-1.oe2403sp2
15.15-1.oe2403sp2
libpq
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 13.23-1.oe2203sp3
13.23-1.oe2203sp3
libpq
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 13.23-1.oe2203sp4
13.23-1.oe2203sp4
libpq
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 15.15-1.oe2403
15.15-1.oe2403
libpq
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 15.15-1.oe2403sp1
15.15-1.oe2403sp1
pg_repack
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
pg_repack-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
pg_repack-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
pgaudit
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
pgaudit-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
pgaudit-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
postgres-decoderbufs
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
postgres-decoderbufs-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
postgres-decoderbufs-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
postgresql
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-contrib
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-contrib-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-docs
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-docs-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-plperl
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-plperl-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-plpython3
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-plpython3-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-pltcl
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-pltcl-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-private-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-private-libs
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-private-libs-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-server
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-server-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-server-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-server-devel-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-static
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-test
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-test-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-test-rpm-macros
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-upgrade
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-upgrade-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-upgrade-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
postgresql-upgrade-devel-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.4.0+23722+74f6623d
0:15.15-1.module+el9.4.0+23722+74f6623d
pg_repack
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
pg_repack-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
pg_repack-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
0:1.4.8-1.module+el9.2.0+17405+aeb9ec60
pgaudit
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
pgaudit-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
pgaudit-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
postgres-decoderbufs
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
postgres-decoderbufs-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
postgres-decoderbufs-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
postgresql
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.2.0+23674+8f7fcce9
0:15.15-1.module+el9.2.0+23674+8f7fcce9
postgresql-contrib
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.2.0+23674+8f7fcce9
0:15.15-1.module+el9.2.0+23674+8f7fcce9
postgresql-contrib-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.2.0+23674+8f7fcce9
0:15.15-1.module+el9.2.0+23674+8f7fcce9
postgresql-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el9.2.0+23674+8f7fcce9
0:15.15-1.module+el9.2.0+23674+8f7fcce9
libpq
Rocky Linux:9
 before 0:13.23-1.el9_7
0:13.23-1.el9_7
postgresql
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:13.23-1.el9_7
0:13.23-1.el9_7
pgaudit
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:1.7.0-1.module+el9.7.0+40011+28af63c9
0:1.7.0-1.module+el9.7.0+40011+28af63c9
pg_repack
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:1.4.8-2.module+el9.7.0+40011+28af63c9
0:1.4.8-2.module+el9.7.0+40011+28af63c9
postgres-decoderbufs
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:1.9.7-1.Final.module+el9.7.0+40011+28af63c9
0:1.9.7-1.Final.module+el9.7.0+40011+28af63c9
postgresql
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:15.15-2.module+el9.7.0+40058+d9f04599
0:15.15-2.module+el9.7.0+40058+d9f04599
pgaudit
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:16.0-1.module+el9.7.0+40060+39463e08
0:16.0-1.module+el9.7.0+40060+39463e08
pgaudit
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:16.0-1.module+el9.7.0+40012+a654bbaa
0:16.0-1.module+el9.7.0+40012+a654bbaa
pg_repack
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:1.5.1-1.module+el9.7.0+40012+a654bbaa
0:1.5.1-1.module+el9.7.0+40012+a654bbaa
pg_repack
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:1.5.1-1.module+el9.7.0+40060+39463e08
0:1.5.1-1.module+el9.7.0+40060+39463e08
pgvector
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:0.6.2-2.module+el9.7.0+40060+39463e08
0:0.6.2-2.module+el9.7.0+40060+39463e08
pgvector
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:0.6.2-2.module+el9.7.0+40012+a654bbaa
0:0.6.2-2.module+el9.7.0+40012+a654bbaa
postgis
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:3.5.3-3.module+el9.7.0+40012+a654bbaa
0:3.5.3-3.module+el9.7.0+40012+a654bbaa
postgres-decoderbufs
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:2.4.0-1.Final.module+el9.7.0+40012+a654bbaa
0:2.4.0-1.Final.module+el9.7.0+40012+a654bbaa
postgres-decoderbufs
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:2.4.0-1.Final.module+el9.7.0+40060+39463e08
0:2.4.0-1.Final.module+el9.7.0+40060+39463e08
postgresql
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:16.11-1.module+el9.7.0+40060+39463e08
0:16.11-1.module+el9.7.0+40060+39463e08
pgaudit
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:16.0-1.module+el8.10.0+40057+c37a0e3d
0:16.0-1.module+el8.10.0+40057+c37a0e3d
pgaudit
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:16.0-1.module+el8.10.0+1858+fcc46a79
0:16.0-1.module+el8.10.0+1858+fcc46a79
pgaudit
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:16.0-1.module+el8.10.0+1622+bd25b19c
0:16.0-1.module+el8.10.0+1622+bd25b19c
pg_repack
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.5.1-1.module+el8.10.0+40057+c37a0e3d
0:1.5.1-1.module+el8.10.0+40057+c37a0e3d
pg_repack
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.5.1-1.module+el8.10.0+1900+d7340343
0:1.5.1-1.module+el8.10.0+1900+d7340343
postgres-decoderbufs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.4.0-1.Final.module+el8.10.0+40057+c37a0e3d
0:2.4.0-1.Final.module+el8.10.0+40057+c37a0e3d
postgres-decoderbufs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.4.0-1.Final.module+el8.10.0+1622+bd25b19c
0:2.4.0-1.Final.module+el8.10.0+1622+bd25b19c
postgres-decoderbufs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.4.0-1.Final.module+el8.10.0+1858+fcc46a79
0:2.4.0-1.Final.module+el8.10.0+1858+fcc46a79
postgresql
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:16.11-1.module+el8.10.0+40057+c37a0e3d
0:16.11-1.module+el8.10.0+40057+c37a0e3d
pgaudit
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.5.0-1.module+el8.9.0+1594+4a6adae9
0:1.5.0-1.module+el8.9.0+1594+4a6adae9
pgaudit
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.5.0-1.module+el8.10.0+40055+b85d5ce2
0:1.5.0-1.module+el8.10.0+40055+b85d5ce2
pg_repack
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.6-3.module+el8.10.0+40055+b85d5ce2
0:1.4.6-3.module+el8.10.0+40055+b85d5ce2
pg_repack
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.6-3.module+el8.9.0+1594+4a6adae9
0:1.4.6-3.module+el8.9.0+1594+4a6adae9
pg_repack
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.6-3.module+el8.10.0+1862+29bef648
0:1.4.6-3.module+el8.10.0+1862+29bef648
pg_repack
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.6-3.module+el8.9.0+1603+444d1b54
0:1.4.6-3.module+el8.9.0+1603+444d1b54
postgres-decoderbufs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.10.0-2.module+el8.9.0+1594+4a6adae9
0:0.10.0-2.module+el8.9.0+1594+4a6adae9
postgres-decoderbufs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.10.0-2.module+el8.10.0+40055+b85d5ce2
0:0.10.0-2.module+el8.10.0+40055+b85d5ce2
postgres-decoderbufs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.10.0-2.module+el8.10.0+1862+29bef648
0:0.10.0-2.module+el8.10.0+1862+29bef648
postgres-decoderbufs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.10.0-2.module+el8.9.0+1603+444d1b54
0:0.10.0-2.module+el8.9.0+1603+444d1b54
postgresql
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:13.23-1.module+el8.10.0+40055+b85d5ce2
0:13.23-1.module+el8.10.0+40055+b85d5ce2
pgaudit
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.7.0-1.module+el8.10.0+40056+df351139
0:1.7.0-1.module+el8.10.0+40056+df351139
pgaudit
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.7.0-1.module+el8.9.0+1525+fc91df60
0:1.7.0-1.module+el8.9.0+1525+fc91df60
pg_repack
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.8-1.module+el8.10.0+1622+bd25b19c
0:1.4.8-1.module+el8.10.0+1622+bd25b19c
pg_repack
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.8-1.module+el8.9.0+1525+fc91df60
0:1.4.8-1.module+el8.9.0+1525+fc91df60
pg_repack
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.8-1.module+el8.10.0+1858+fcc46a79
0:1.4.8-1.module+el8.10.0+1858+fcc46a79
pg_repack
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.8-1.module+el8.10.0+40056+df351139
0:1.4.8-1.module+el8.10.0+40056+df351139
postgres-decoderbufs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.9.7-1.Final.module+el8.9.0+1525+fc91df60
0:1.9.7-1.Final.module+el8.9.0+1525+fc91df60
postgres-decoderbufs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.9.7-1.Final.module+el8.10.0+40056+df351139
0:1.9.7-1.Final.module+el8.10.0+40056+df351139
postgresql
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:15.15-1.module+el8.10.0+40056+df351139
0:15.15-1.module+el8.10.0+40056+df351139
postgresql16
Rocky Linux:10
 before 0:16.11-1.el10_1
0:16.11-1.el10_1
libpq
Rocky Linux:10
 before 0:16.11-3.el10_1
0:16.11-3.el10_1
libpq
Rocky Linux:8
 before 0:13.23-1.el8_10
0:13.23-1.el8_10
postgresql13
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 13.23-150600.14.14.1
13.23-150600.14.14.1
postgresql13
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 2 CVEs
 before 13.23-3.69.1
13.23-3.69.1
postgresql13
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 2 CVEs
 before 13.23-3.69.1
13.23-3.69.1
postgresql
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 18-150600.17.9.1
18-150600.17.9.1
postgresql17
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 17.7-150600.13.19.1
17.7-150600.13.19.1
postgresql18
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 18.1-150600.13.3.1
18.1-150600.13.3.1
postgresql
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 18-150700.23.3.1
18-150700.23.3.1
postgresql17
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 17.7-150600.13.19.1
17.7-150600.13.19.1
postgresql18
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 18.1-150600.13.3.1
18.1-150600.13.3.1
postgresql
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 2 CVEs
 before 18-150600.17.9.1
18-150600.17.9.1
postgresql17
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 2 CVEs
 before 17.7-150600.13.19.1
17.7-150600.13.19.1
postgresql18
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 2 CVEs
 before 18.1-150600.13.3.1
18.1-150600.13.3.1
postgresql
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 2 CVEs
 before 18-150700.23.3.1
18-150700.23.3.1
postgresql17
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 2 CVEs
 before 17.7-150600.13.19.1
17.7-150600.13.19.1
postgresql18
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 2 CVEs
 before 18.1-150600.13.3.1
18.1-150600.13.3.1
postgresql
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 2 CVEs
 before 18-150600.17.9.1
18-150600.17.9.1
postgresql17
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 2 CVEs
 before 17.7-150600.13.19.1
17.7-150600.13.19.1
postgresql18
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 2 CVEs
 before 18.1-150600.13.3.1
18.1-150600.13.3.1
postgresql
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 2 CVEs
 before 18-150700.23.3.1
18-150700.23.3.1
postgresql17
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 2 CVEs
 before 17.7-150600.13.19.1
17.7-150600.13.19.1
postgresql18
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 2 CVEs
 before 18.1-150600.13.3.1
18.1-150600.13.3.1
postgresql
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 18-150600.17.9.1
18-150600.17.9.1
postgresql17
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 17.7-150600.13.19.1
17.7-150600.13.19.1
postgresql18
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 18.1-150600.13.3.1
18.1-150600.13.3.1
postgresql
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 18-150300.10.30.2
18-150300.10.30.2
postgresql17
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 17.7-150200.5.19.1
17.7-150200.5.19.1
postgresql18
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 18.1-150200.5.3.1
18.1-150200.5.3.1
postgresql
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 18-150400.4.21.2
18-150400.4.21.2
postgresql17
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 17.7-150200.5.19.1
17.7-150200.5.19.1
postgresql18
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 18.1-150200.5.3.1
18.1-150200.5.3.1
postgresql
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 18-150400.4.21.2
18-150400.4.21.2
postgresql17
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 17.7-150200.5.19.1
17.7-150200.5.19.1
postgresql18
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 18.1-150200.5.3.1
18.1-150200.5.3.1
postgresql
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 18-150500.10.12.2
18-150500.10.12.2
postgresql17
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 17.7-150200.5.19.1
17.7-150200.5.19.1
postgresql18
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 18.1-150200.5.3.1
18.1-150200.5.3.1
postgresql
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 18-150500.10.12.2
18-150500.10.12.2
postgresql17
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 17.7-150200.5.19.1
17.7-150200.5.19.1
postgresql18
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 18.1-150200.5.3.1
18.1-150200.5.3.1
postgresql
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 18-150300.10.30.2
18-150300.10.30.2
postgresql17
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 17.7-150200.5.19.1
17.7-150200.5.19.1
postgresql18
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 18.1-150200.5.3.1
18.1-150200.5.3.1
postgresql
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 18-150400.4.21.2
18-150400.4.21.2
postgresql17
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 17.7-150200.5.19.1
17.7-150200.5.19.1
postgresql18
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 18.1-150200.5.3.1
18.1-150200.5.3.1
postgresql
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 18-150500.10.12.2
18-150500.10.12.2
postgresql17
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 17.7-150200.5.19.1
17.7-150200.5.19.1
postgresql18
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 18.1-150200.5.3.1
18.1-150200.5.3.1
postgresql
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 18-150300.10.30.2
18-150300.10.30.2
postgresql17
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 17.7-150200.5.19.1
17.7-150200.5.19.1
postgresql18
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 18.1-150200.5.3.1
18.1-150200.5.3.1
postgresql
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 18-150400.4.21.2
18-150400.4.21.2
postgresql17
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 17.7-150200.5.19.1
17.7-150200.5.19.1
postgresql18
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 18.1-150200.5.3.1
18.1-150200.5.3.1
postgresql14
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 14.20-150600.16.23.1
14.20-150600.16.23.1
postgresql16
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 16.11-150600.16.25.1
16.11-150600.16.25.1
postgresql15
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 15.15-150600.16.23.1
15.15-150600.16.23.1
postgresql-9.3
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
9.3.1-19.3.2-19.3.2-1ubuntu19.3.2-1ubuntu29.3.3-1
Show 24 moreShow less
9.3.3-1bzr19.3.3-1bzr29.3.4-19.3.5-0ubuntu0.14.04.19.3.6-0ubuntu0.14.049.3.7-0ubuntu0.14.049.3.8-0ubuntu0.4.049.3.9-0ubuntu0.14.049.3.10-0ubuntu0.14.049.3.11-0ubuntu0.14.049.3.12-0ubuntu0.14.049.3.13-0ubuntu0.14.049.3.14-0ubuntu0.14.049.3.15-0ubuntu0.14.049.3.16-0ubuntu0.14.049.3.17-0ubuntu0.14.049.3.18-0ubuntu0.14.04.19.3.19-0ubuntu0.14.049.3.20-0ubuntu0.14.049.3.21-0ubuntu0.14.049.3.22-0ubuntu0.14.049.3.23-0ubuntu0.14.049.3.24-0ubuntu0.14.049.3.24-0ubuntu0.14.04+esm1
 None known
postgresql-9.5
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
9.5.0-19.5.0-29.5.0-39.5.1-19.5.2-1
Show 29 moreShow less
9.5.3-0ubuntu0.16.049.5.4-0ubuntu0.16.049.5.5-0ubuntu0.16.049.5.6-0ubuntu0.16.049.5.7-0ubuntu0.16.049.5.8-0ubuntu0.16.04.19.5.9-0ubuntu0.16.049.5.10-0ubuntu0.16.049.5.11-0ubuntu0.16.049.5.12-0ubuntu0.16.049.5.13-0ubuntu0.16.049.5.14-0ubuntu0.16.049.5.16-0ubuntu0.16.04.19.5.17-0ubuntu0.16.04.19.5.18-0ubuntu0.16.04.19.5.19-0ubuntu0.16.04.19.5.21-0ubuntu0.16.04.19.5.23-0ubuntu0.16.04.19.5.24-0ubuntu0.16.04.19.5.25-0ubuntu0.16.04.19.5.25-0ubuntu0.16.04.1+esm19.5.25-0ubuntu0.16.04.1+esm29.5.25-0ubuntu0.16.04.1+esm39.5.25-0ubuntu0.16.04.1+esm49.5.25-0ubuntu0.16.04.1+esm59.5.25-0ubuntu0.16.04.1+esm69.5.25-0ubuntu0.16.04.1+esm79.5.25-0ubuntu0.16.04.1+esm89.5.25-0ubuntu0.16.04.1+esm10
 None known
postgresql-10
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
10.1-110.1-210.2-110.3-110.4-0ubuntu0.18.04
Show 21 moreShow less
10.5-0ubuntu0.18.0410.6-0ubuntu0.18.04.110.7-0ubuntu0.18.04.110.8-0ubuntu0.18.04.110.9-0ubuntu0.18.04.110.10-0ubuntu0.18.04.110.12-0ubuntu0.18.04.110.14-0ubuntu0.18.04.110.15-0ubuntu0.18.04.110.16-0ubuntu0.18.04.110.17-0ubuntu0.18.04.110.18-0ubuntu0.18.04.110.19-0ubuntu0.18.04.110.20-0ubuntu0.18.04.110.21-0ubuntu0.18.04.110.22-0ubuntu0.18.04.110.23-0ubuntu0.18.04.110.23-0ubuntu0.18.04.210.23-0ubuntu0.18.04.2+esm110.23-0ubuntu0.18.04.2+esm210.23-0ubuntu0.18.04.2+esm3
 None known
postgresql-12
Ubuntu:20.04:LTS
 All versions, plus listed versions
12.0-112.1-112.1-2build112.2-112.2-1ubuntu2
Show 21 moreShow less
12.2-412.4-0ubuntu0.20.04.112.5-0ubuntu0.20.04.112.6-0ubuntu0.20.04.112.7-0ubuntu0.20.04.112.8-0ubuntu0.20.04.112.9-0ubuntu0.20.04.112.10-0ubuntu0.20.04.112.11-0ubuntu0.20.04.112.12-0ubuntu0.20.04.112.13-0ubuntu0.20.04.112.14-0ubuntu0.20.04.112.15-0ubuntu0.20.04.112.16-0ubuntu0.20.04.112.17-0ubuntu0.20.04.112.18-0ubuntu0.20.04.112.19-0ubuntu0.20.04.112.20-0ubuntu0.20.04.112.22-0ubuntu0.20.04.112.22-0ubuntu0.20.04.212.22-0ubuntu0.20.04.4
 None known
postgresql-14
Ubuntu:22.04:LTS
 before 14.20-0ubuntu0.22.04.1, plus listed versions
14.1-1ubuntu114.2-114.2-1ubuntu114.3-0ubuntu0.22.04.114.4-0ubuntu0.22.04.1
Show 13 moreShow less
14.5-0ubuntu0.22.04.114.6-0ubuntu0.22.04.114.7-0ubuntu0.22.04.114.8-0ubuntu0.22.04.114.9-0ubuntu0.22.04.114.10-0ubuntu0.22.04.114.11-0ubuntu0.22.04.114.12-0ubuntu0.22.04.114.13-0ubuntu0.22.04.114.15-0ubuntu0.22.04.114.17-0ubuntu0.22.04.114.18-0ubuntu0.22.04.114.19-0ubuntu0.22.04.1
14.20-0ubuntu0.22.04.1
postgresql-16
Ubuntu:24.04:LTS
 before 16.11-0ubuntu0.24.04.1, plus listed versions
16.0-216.1-116.1-1build116.1-1build316.2-1
Show 10 moreShow less
16.2-1ubuntu216.2-1ubuntu316.2-1ubuntu416.3-0ubuntu0.24.04.116.4-0ubuntu0.24.04.116.4-0ubuntu0.24.04.216.6-0ubuntu0.24.04.116.8-0ubuntu0.24.04.116.9-0ubuntu0.24.04.116.10-0ubuntu0.24.04.1
16.11-0ubuntu0.24.04.1
postgresql-17
Ubuntu:25.10
 before 17.7-0ubuntu0.25.10.1, plus listed versions
17.4-117.4-217.5-117.5-1build117.6-117.6-1build1
17.7-0ubuntu0.25.10.1
postgresql-18
Ubuntu:26.04:LTS
 before 18.1-1ubuntu1, plus listed versions
18.0-118.1-1
18.1-1ubuntu1
postgresql-14
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 14.20-0ubuntu0.22.04.1, plus listed versions
14.1-1ubuntu114.2-114.2-1ubuntu114.3-0ubuntu0.22.04.114.4-0ubuntu0.22.04.1
Show 13 moreShow less
14.5-0ubuntu0.22.04.114.6-0ubuntu0.22.04.114.7-0ubuntu0.22.04.114.8-0ubuntu0.22.04.114.9-0ubuntu0.22.04.114.10-0ubuntu0.22.04.114.11-0ubuntu0.22.04.114.12-0ubuntu0.22.04.114.13-0ubuntu0.22.04.114.15-0ubuntu0.22.04.114.17-0ubuntu0.22.04.114.18-0ubuntu0.22.04.114.19-0ubuntu0.22.04.1
14.20-0ubuntu0.22.04.1
postgresql-16
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 16.11-0ubuntu0.24.04.1, plus listed versions
16.0-216.1-116.1-1build116.1-1build316.2-1
Show 10 moreShow less
16.2-1ubuntu216.2-1ubuntu316.2-1ubuntu416.3-0ubuntu0.24.04.116.4-0ubuntu0.24.04.116.4-0ubuntu0.24.04.216.6-0ubuntu0.24.04.116.8-0ubuntu0.24.04.116.9-0ubuntu0.24.04.116.10-0ubuntu0.24.04.1
16.11-0ubuntu0.24.04.1
postgresql-17
Ubuntu:25.10
From an advisory covering 2 CVEs
 before 17.7-0ubuntu0.25.10.1, plus listed versions
17.4-117.4-217.5-117.5-1build117.6-117.6-1build1
17.7-0ubuntu0.25.10.1
postgresql13
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 13.23-1.1
13.23-1.1
postgresql14
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 14.20-1.1
14.20-1.1
postgresql15
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 15.15-1.1
15.15-1.1
postgresql16
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 16.11-1.1
16.11-1.1
postgresql17
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 17.7-1.1
17.7-1.1
postgresql18
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 18.1-1.1
18.1-1.1
postgresql16
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 16.11-160000.1.1
16.11-160000.1.1
postgresql
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 18-160000.1.1
18-160000.1.1
postgresql13-pgaudit
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 1.5.3-160000.3.1
1.5.3-160000.3.1
postgresql13-pgvector
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.8.1-160000.1.1
0.8.1-160000.1.1
postgresql14-pgaudit
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 1.6.3-160000.3.1
1.6.3-160000.3.1
postgresql14-pgvector
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.8.1-160000.1.1
0.8.1-160000.1.1
postgresql15-pgaudit
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 1.7.1-160000.3.1
1.7.1-160000.3.1
postgresql15-pgvector
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.8.1-160000.1.1
0.8.1-160000.1.1
postgresql16-pgaudit
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 16.1-160000.3.1
16.1-160000.3.1
postgresql16-pgvector
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.8.1-160000.1.1
0.8.1-160000.1.1
postgresql17
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 17.7-160000.1.1
17.7-160000.1.1
postgresql17-pgaudit
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 17.1-160000.3.1
17.1-160000.3.1
postgresql17-pgvector
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.8.1-160000.1.1
0.8.1-160000.1.1
postgresql18
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 18.1-160000.1.2
18.1-160000.1.2
postgresql18-mini
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 18.1-160000.1.1
18.1-160000.1.1
postgresql18-pgaudit
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 18.0-160000.3.1
18.0-160000.3.1
postgresql18-pgvector
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.8.1-160000.1.1
0.8.1-160000.1.1
postgresql14
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 14.21-160000.1.1
14.21-160000.1.1
postgresql15
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 15.16-160000.1.1
15.16-160000.1.1
postgresql13
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 13.23-160000.1.1
13.23-160000.1.1

History

History
RecordedChangedSources
affected
factsOSV
affectedOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-12818 is a medium vulnerability (CVSS 5.9) in libpq, published November 13, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in postgresql15 15.15-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,131 package rows and 1 reference. The JSON record has them. Also not on the record: 15 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 63 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open