Every CVE Search/ Get API key

CVE-2025-4207

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

5.9 MediumFix available

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.76%Up 0.7 points since May 9, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.9

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
CVE-2025-4207
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-126
Updated
2026-11-02
EUVDEUVD-2025-14007 5.9

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
EUVD-2025-14007
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-6x46-2273-xjjf 5.9

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to...

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
GHSA-6x46-2273-xjjf
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-126
Updated
2026-11-02
NVD 5.9

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
CVE-2025-4207
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-126
Updated
2026-11-02
OSVALPINE-CVE-2025-4207 5.9

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
ALPINE-CVE-2025-4207
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVBELL-CVE-2025-4207 5.9
Record
BELL-CVE-2025-4207
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVDEBIAN-CVE-2025-4207 5.9

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
DEBIAN-CVE-2025-4207
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1508 5.9

postgresql-13 security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)

Record
OESA-2025-1508
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1565 5.9

libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or interface.

Security Fix(es):

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)

Record
OESA-2025-1565
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1566 5.9

libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or interface.

Security Fix(es):

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)

Record
OESA-2025-1566
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1567 5.9

libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or interface.

Security Fix(es):

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)

Record
OESA-2025-1567
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1568 5.9

libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or interface.

Security Fix(es):

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)

Record
OESA-2025-1568
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1697 5.9

postgresql security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)

Record
OESA-2025-1697
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1698 5.9

postgresql security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)

Record
OESA-2025-1698
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1699 5.9

postgresql security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)

Record
OESA-2025-1699
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1700 5.9

postgresql security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)

Record
OESA-2025-1700
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:14826 8.8

Red Hat Security Advisory: postgresql16 security update

Record
RHSA-2025:14826
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:14827 8.8

Red Hat Security Advisory: postgresql:16 security update

Record
RHSA-2025:14827
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:14862 8.8

Red Hat Security Advisory: postgresql:15 security update

Record
RHSA-2025:14862
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:14899 8.8

Red Hat Security Advisory: postgresql:16 security update

Record
RHSA-2025:14899
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:15021 8.8

Red Hat Security Advisory: postgresql:13 security update

Record
RHSA-2025:15021
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:15022 8.8

Red Hat Security Advisory: postgresql:15 security update

Record
RHSA-2025:15022
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-4207 5.9

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
UBUNTU-CVE-2025-4207
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2025:14826 No score

Important: postgresql16 security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

  • postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  • postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:14826
Updated
2026-11-02
OSVALSA-2025:14827 No score

Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  • postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:14827
Updated
2026-11-02
OSVALSA-2025:14862 No score

Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  • postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:14862
Updated
2026-11-02
OSVALSA-2025:14899 No score

Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  • postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:14899
Updated
2026-11-02
OSVALSA-2025:15021 No score

Important: postgresql:13 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  • postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:15021
Updated
2026-11-02
OSVALSA-2025:15022 No score

Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  • postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:15022
Updated
2026-11-02
OSVAZL-61736 No score

CVE-2025-4207 affecting package postgresql for versions less than 16.9-1

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
AZL-61736
Updated
2026-11-02
OSVAZL-61739 No score

CVE-2025-4207 affecting package postgresql for versions less than 14.18-1

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
AZL-61739
Updated
2026-11-02
OSVAZL-74894 No score

CVE-2025-4207 affecting package rust for versions less than 1.90.0-4

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
AZL-74894
Updated
2026-11-05
OSVBIT-postgresql-2025-4207 No score

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
BIT-postgresql-2025-4207
Updated
2026-11-02
OSVCLSA-2025-1759784438 No score

postgresql: Fix of CVE-2025-4207

  • CVE-2025-4207: fix buffer over-read in GB18030 encoding validation to prevent temporary denial of service
Record
CLSA-2025-1759784438
Updated
2026-11-02
OSV No score

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Record
CVE-2025-4207
Updated
2026-11-02
OSVMGASA-2025-0155 No score

Updated postgresql15 & postgresql13 packages fix security vulnerability

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation. (CVE-2025-4207)

Record
MGASA-2025-0155
Updated
2026-11-02
OSVopenSUSE-SU-2025:15137-1 No score

postgresql13-13.21-1.1 on GA media

These are all security issues fixed in the postgresql13-13.21-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15137-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15138-1 No score

postgresql14-14.18-1.1 on GA media

These are all security issues fixed in the postgresql14-14.18-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15138-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15139-1 No score

postgresql15-15.13-1.1 on GA media

These are all security issues fixed in the postgresql15-15.13-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15139-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15140-1 No score

postgresql16-16.9-1.1 on GA media

These are all security issues fixed in the postgresql16-16.9-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15140-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15151-1 No score

libecpg6-17.5-1.1 on GA media

These are all security issues fixed in the libecpg6-17.5-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15151-1
Updated
2026-11-02
OSVSUSE-SU-2025:01644-1 No score

Security update for postgresql17

This update for postgresql17 fixes the following issues:

Upgrade to 17.5:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/17.5/

Record
SUSE-SU-2025:01644-1
Updated
2026-11-02
OSVSUSE-SU-2025:01644-2 No score

Security update for postgresql17

This update for postgresql17 fixes the following issues:

Upgrade to 17.5:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/17.5/

Record
SUSE-SU-2025:01644-2
Updated
2026-11-02
OSVSUSE-SU-2025:01654-1 No score

Security update for postgresql13

This update for postgresql13 fixes the following issues:

Upgrade to 13.21:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/13.21/

Record
SUSE-SU-2025:01654-1
Updated
2026-11-02
OSVSUSE-SU-2025:01661-1 No score

Security update for postgresql14

This update for postgresql14 fixes the following issues:

Upgrade to 14.18:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)
Record
SUSE-SU-2025:01661-1
Updated
2026-11-02
OSVSUSE-SU-2025:01661-2 No score

Security update for postgresql14

This update for postgresql14 fixes the following issues:

Upgrade to 14.18:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)
Record
SUSE-SU-2025:01661-2
Updated
2026-11-02
OSVSUSE-SU-2025:01705-1 No score

Security update for postgresql13

This update for postgresql13 fixes the following issues:

Upgrade to 13.21:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/13.21/

Record
SUSE-SU-2025:01705-1
Updated
2026-11-02
OSVSUSE-SU-2025:01748-1 No score

Security update for postgresql15

This update for postgresql15 fixes the following issues:

Upgrade to 15.13:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/15.13/

Record
SUSE-SU-2025:01748-1
Updated
2026-11-02
OSVSUSE-SU-2025:01748-2 No score

Security update for postgresql15

This update for postgresql15 fixes the following issues:

Upgrade to 15.13:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/15.13/

Record
SUSE-SU-2025:01748-2
Updated
2026-11-02
OSVSUSE-SU-2025:01749-1 No score

Security update for postgresql15

This update for postgresql15 fixes the following issues:

Upgrade to 15.13:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/15.13/

Record
SUSE-SU-2025:01749-1
Updated
2026-11-02
OSVSUSE-SU-2025:01750-1 No score

Security update for postgresql13

This update for postgresql13 fixes the following issues:

Upgrade to 13.21:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/13.21/

Record
SUSE-SU-2025:01750-1
Updated
2026-11-02
OSVSUSE-SU-2025:01765-1 No score

Security update for postgresql17

This update for postgresql17 fixes the following issues:

Upgrade to 17.5:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/17.5/

Record
SUSE-SU-2025:01765-1
Updated
2026-11-02
OSVSUSE-SU-2025:01766-1 No score

Security update for postgresql16

This update for postgresql16 fixes the following issues:

Upgrade to 16.9:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/16.9/

Record
SUSE-SU-2025:01766-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
postgresql14
Alpine:v3.18
 before 14.18-r0
14.18-r0
postgresql15
Alpine:v3.18
 before 15.13-r0
15.13-r0
postgresql15
Alpine:v3.19
 before 15.13-r0
15.13-r0
postgresql15
Alpine:v3.20
 before 15.13-r0
15.13-r0
postgresql15
Alpine:v3.21
 before 15.13-r0
15.13-r0
postgresql15
Alpine:v3.22
 before 15.13-r0
15.13-r0
postgresql16
Alpine:v3.19
 before 16.9-r0
16.9-r0
postgresql16
Alpine:v3.20
 before 16.9-r0
16.9-r0
postgresql16
Alpine:v3.21
 before 16.9-r0
16.9-r0
postgresql16
Alpine:v3.22
 before 16.9-r0
16.9-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
postgresql16
Alpine:v3.23
 before 16.9-r0
16.9-r0
postgresql16
Alpine:v3.24
 before 16.9-r0
16.9-r0
postgresql17
Alpine:v3.21
 before 17.5-r0
17.5-r0
postgresql17
Alpine:v3.22
 before 17.5-r0
17.5-r0
postgresql17
Alpine:v3.23
 before 17.5-r0
17.5-r0
postgresql17
Alpine:v3.24
 before 17.5-r0
17.5-r0
postgresql-test-rpm-macros
AlmaLinux:10
From an advisory covering 3 CVEs
 before 16.10-1.el10_0
16.10-1.el10_0
pg_repack
AlmaLinux:9
From an advisory covering 4 CVEs
 before 1.5.1-1.module_el9.6.0+146+c54fdeca
1.5.1-1.module_el9.6.0+146+c54fdeca
pgaudit
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.0-1.module_el9.4.0+66+eb9878bc
16.0-1.module_el9.4.0+66+eb9878bc
pgvector
AlmaLinux:9
From an advisory covering 4 CVEs
 before 0.6.2-2.module_el9.6.0+167+4e561146
0.6.2-2.module_el9.6.0+167+4e561146
postgres-decoderbufs
AlmaLinux:9
From an advisory covering 4 CVEs
 before 2.4.0-1.Final.module_el9.4.0+66+eb9878bc
2.4.0-1.Final.module_el9.4.0+66+eb9878bc
postgresql
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-contrib
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-docs
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-plperl
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-plpython3
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-pltcl
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-private-devel
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-private-libs
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-server
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-server-devel
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-static
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-test
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-test-rpm-macros
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-upgrade
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
postgresql-upgrade-devel
AlmaLinux:9
From an advisory covering 4 CVEs
 before 16.10-1.module_el9.6.0+174+80cb77f0
16.10-1.module_el9.6.0+174+80cb77f0
pg_repack
AlmaLinux:9
From an advisory covering 4 CVEs
 before 1.4.8-2.module_el9.5.0+119+18833d03
1.4.8-2.module_el9.5.0+119+18833d03
pgaudit
AlmaLinux:9
From an advisory covering 4 CVEs
 before 1.7.0-1.module_el9.3.0+52+21733919
1.7.0-1.module_el9.3.0+52+21733919
postgres-decoderbufs
AlmaLinux:9
From an advisory covering 4 CVEs
 before 1.9.7-1.Final.module_el9.3.0+52+21733919
1.9.7-1.Final.module_el9.3.0+52+21733919
postgresql
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-contrib
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-docs
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-plperl
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-plpython3
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-pltcl
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-private-devel
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-private-libs
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-server
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-server-devel
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-static
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-test
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-test-rpm-macros
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-upgrade
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
postgresql-upgrade-devel
AlmaLinux:9
From an advisory covering 4 CVEs
 before 15.14-1.module_el9.6.0+176+c508cfa2
15.14-1.module_el9.6.0+176+c508cfa2
pg_repack
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.5.1-1.module_el8.10.0+3930+ecf33554
1.5.1-1.module_el8.10.0+3930+ecf33554
pgaudit
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.0-1.module_el8.10.0+3798+606ebb9f
16.0-1.module_el8.10.0+3798+606ebb9f
postgres-decoderbufs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.4.0-1.Final.module_el8.10.0+3798+606ebb9f
2.4.0-1.Final.module_el8.10.0+3798+606ebb9f
postgresql
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-contrib
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-docs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-plperl
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-plpython3
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-pltcl
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-private-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-private-libs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-server
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-server-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-static
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-test
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-test-rpm-macros
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-upgrade
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
postgresql-upgrade-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 16.10-1.module_el8.10.0+4038+0fbad93c
16.10-1.module_el8.10.0+4038+0fbad93c
pg_repack
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.4.6-3.module_el8.6.0+2760+1746ec94
1.4.6-3.module_el8.6.0+2760+1746ec94
pg_repack
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.4.6-3.module_el8.6.0+3095+ee60d910
1.4.6-3.module_el8.6.0+3095+ee60d910
pgaudit
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.5.0-1.module_el8.6.0+2760+1746ec94
1.5.0-1.module_el8.6.0+2760+1746ec94
pgaudit
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.5.0-1.module_el8.6.0+3095+ee60d910
1.5.0-1.module_el8.6.0+3095+ee60d910
postgres-decoderbufs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.10.0-2.module_el8.6.0+2760+1746ec94
0.10.0-2.module_el8.6.0+2760+1746ec94
postgres-decoderbufs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.10.0-2.module_el8.6.0+3095+ee60d910
0.10.0-2.module_el8.6.0+3095+ee60d910
postgresql
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-contrib
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-docs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-plperl
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-plpython3
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-pltcl
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-server
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-server-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-static
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-test
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-test-rpm-macros
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-upgrade
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
postgresql-upgrade-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 13.22-1.module_el8.10.0+4042+cb252986
13.22-1.module_el8.10.0+4042+cb252986
pg_repack
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.4.8-1.module_el8.9.0+3706+885c732e
1.4.8-1.module_el8.9.0+3706+885c732e
pgaudit
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.7.0-1.module_el8.9.0+3706+885c732e
1.7.0-1.module_el8.9.0+3706+885c732e
postgres-decoderbufs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.9.7-1.Final.module_el8.9.0+3706+885c732e
1.9.7-1.Final.module_el8.9.0+3706+885c732e
postgresql
Azure Linux:3
 before 16.9-1
16.9-1
postgresql
Azure Linux:2
 before 14.18-1
14.18-1
rust
Azure Linux:3
 1.85.0 up to 1.90.0-4
1.90.0-4
postgresql15
Alpaquita:23
 15.2-r0 up to 15.13-r0
15.13-r0
postgresql17
Alpaquita:stream
 17.0-r1 up to 17.5-r0
17.5-r0
postgresql
Bitnami
 before 13.21.0, 14.0.0 up to 14.18.0, 15.0.0 up to 15.13.0, 16.0.0 up to 16.9.0, 17.0.0 up to 17.5.0
13.21.014.18.015.13.016.9.017.5.0
postgresql
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-contrib
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-docs
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-plperl
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-plpython3
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-pltcl
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-private-devel
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-private-libs
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-server
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-server-devel
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-static
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-test
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-test-rpm-macros
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-upgrade
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-upgrade-devel
TuxCare:AlmaLinux:9.2
 before 13.11-1.el9_2.tuxcare.els12
13.11-1.el9_2.tuxcare.els12
postgresql-15
Debian:12
 before 15.13-0+deb12u1, plus listed versions
15.10-0+deb12u115.11-0+deb12u115.12-0+deb12u115.12-0+deb12u215.3-0+deb12u1
Show 10 moreShow less
15.3-115.4-0+deb12u115.4-115.4-215.4-315.5-0+deb12u115.6-0+deb12u115.7-0+deb12u115.8-0+deb12u115.9-0+deb12u1
15.13-0+deb12u1
postgresql-17
Debian:13
 before 17.5-1
17.5-1
postgresql-13
Debian:11
 before 13.21-0+deb11u1, plus listed versions
13.10-0+deb11u113.11-0+deb11u113.12-0+deb11u113.13-0+deb11u113.14-0+deb11u1
Show 15 moreShow less
13.15-0+deb11u113.16-0+deb11u113.17-0+deb11u113.18-0+deb11u113.19-0+deb11u113.20-0+deb11u113.3-113.4-0+deb11u113.4-113.4-213.4-313.5-0+deb11u113.7-0+deb11u113.8-0+deb11u113.9-0+deb11u1
13.21-0+deb11u1
postgresql15
Mageia:9
 before 15.13-1.mga9
15.13-1.mga9
postgresql13
Mageia:9
 before 13.21-1.mga9
13.21-1.mga9
postgresql-13
openEuler:20.03-LTS-SP4
 before 13.21-1.oe2003sp4
13.21-1.oe2003sp4
libpq
openEuler:24.03-LTS-SP1
 before 15.13-1.oe2403sp1
15.13-1.oe2403sp1
libpq
openEuler:22.03-LTS-SP3
 before 13.21-1.oe2203sp3
13.21-1.oe2203sp3
libpq
openEuler:22.03-LTS-SP4
 before 13.21-1.oe2203sp4
13.21-1.oe2203sp4
libpq
openEuler:24.03-LTS
 before 15.13-1.oe2403
15.13-1.oe2403
postgresql
openEuler:22.03-LTS-SP3
 before 13.21-2.oe2203sp3
13.21-2.oe2203sp3
postgresql
openEuler:22.03-LTS-SP4
 before 13.21-2.oe2203sp4
13.21-2.oe2203sp4
postgresql
openEuler:24.03-LTS
 before 15.13-2.oe2403
15.13-2.oe2403
postgresql
openEuler:24.03-LTS-SP1
 before 15.13-2.oe2403sp1
15.13-2.oe2403sp1
postgresql
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-server
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-contrib
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-contrib-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-docs
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-docs-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-plperl
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-plperl-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-plpython3
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-plpython3-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-pltcl
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-pltcl-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-private-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-private-libs
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-private-libs-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-server-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-server-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-server-devel-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-static
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-test
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-test-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-upgrade
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-upgrade-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-upgrade-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-upgrade-devel-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql16
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql16-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql16-debugsource
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
postgresql-test-rpm-macros
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:16.10-1.el10_0
0:16.10-1.el10_0
pg_repack
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.5.1-1.module+el9.6.0+22880+6b241eec
0:1.5.1-1.module+el9.6.0+22880+6b241eec
pg_repack-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.5.1-1.module+el9.6.0+22880+6b241eec
0:1.5.1-1.module+el9.6.0+22880+6b241eec
pg_repack-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.5.1-1.module+el9.6.0+22880+6b241eec
0:1.5.1-1.module+el9.6.0+22880+6b241eec
pgaudit
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.0-1.module+el9.4.0+20427+07482b8c
0:16.0-1.module+el9.4.0+20427+07482b8c
pgaudit-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.0-1.module+el9.4.0+20427+07482b8c
0:16.0-1.module+el9.4.0+20427+07482b8c
pgaudit-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.0-1.module+el9.4.0+20427+07482b8c
0:16.0-1.module+el9.4.0+20427+07482b8c
pgvector
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:0.6.2-2.module+el9.6.0+22979+c3d78d52
0:0.6.2-2.module+el9.6.0+22979+c3d78d52
pgvector-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:0.6.2-2.module+el9.6.0+22979+c3d78d52
0:0.6.2-2.module+el9.6.0+22979+c3d78d52
pgvector-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:0.6.2-2.module+el9.6.0+22979+c3d78d52
0:0.6.2-2.module+el9.6.0+22979+c3d78d52
postgres-decoderbufs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c
0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c
postgres-decoderbufs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c
0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c
postgres-decoderbufs-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c
0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c
postgresql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-contrib
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-contrib-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-docs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-plperl
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-plperl-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-plpython3
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-plpython3-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-pltcl
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-pltcl-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-private-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-private-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-private-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-server-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-server-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-static
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-test
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-test-rpm-macros
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-upgrade
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-upgrade-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-upgrade-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
postgresql-upgrade-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:16.10-1.module+el9.6.0+23420+848a4539
0:16.10-1.module+el9.6.0+23420+848a4539
pg_repack
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.4.8-2.module+el9.5.0+22224+f5585c78
0:1.4.8-2.module+el9.5.0+22224+f5585c78
pg_repack-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.4.8-2.module+el9.5.0+22224+f5585c78
0:1.4.8-2.module+el9.5.0+22224+f5585c78
pg_repack-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.4.8-2.module+el9.5.0+22224+f5585c78
0:1.4.8-2.module+el9.5.0+22224+f5585c78
pgaudit
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
pgaudit-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
pgaudit-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
postgres-decoderbufs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
postgresql17
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 17.5-150600.13.13.1
17.5-150600.13.13.1
postgresql17
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 17.5-150600.13.13.1
17.5-150600.13.13.1
postgresql17
SUSE:Linux Enterprise Module for Server Applications 15 SP6
 before 17.5-150600.13.13.1
17.5-150600.13.13.1
postgresql17
openSUSE:Leap 15.6
 before 17.5-150600.13.13.1
17.5-150600.13.13.1
postgresql17
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 17.5-150600.13.13.1
17.5-150600.13.13.1
postgresql17
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 17.5-150600.13.13.1
17.5-150600.13.13.1
postgresql17
SUSE:Linux Enterprise Module for Server Applications 15 SP7
 before 17.5-150600.13.13.1
17.5-150600.13.13.1
postgresql13
openSUSE:Leap 15.6
 before 13.21-150600.14.8.1
13.21-150600.14.8.1
postgresql14
SUSE:Linux Enterprise Module for Legacy 15 SP6
 before 14.18-150600.16.17.1
14.18-150600.16.17.1
postgresql14
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 14.18-150600.16.17.1
14.18-150600.16.17.1
postgresql14
openSUSE:Leap 15.6
 before 14.18-150600.16.17.1
14.18-150600.16.17.1
postgresql14
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 14.18-150600.16.17.1
14.18-150600.16.17.1
postgresql13
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 13.21-150200.5.72.1
13.21-150200.5.72.1
postgresql13
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 13.21-150200.5.72.1
13.21-150200.5.72.1
postgresql13
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 13.21-150200.5.72.1
13.21-150200.5.72.1
postgresql13
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 13.21-150200.5.72.1
13.21-150200.5.72.1
postgresql13
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 13.21-150200.5.72.1
13.21-150200.5.72.1
postgresql13
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 13.21-150200.5.72.1
13.21-150200.5.72.1
postgresql13
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 13.21-150200.5.72.1
13.21-150200.5.72.1
postgresql13
SUSE:Enterprise Storage 7.1
 before 13.21-150200.5.72.1
13.21-150200.5.72.1
postgresql15
SUSE:Linux Enterprise Module for Legacy 15 SP6
 before 15.13-150600.16.17.1
15.13-150600.16.17.1
postgresql15
openSUSE:Leap 15.6
 before 15.13-150600.16.17.1
15.13-150600.16.17.1
postgresql15
SUSE:Linux Enterprise Module for Legacy 15 SP7
 before 15.13-150600.16.17.1
15.13-150600.16.17.1
postgresql15
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 15.13-3.41.1
15.13-3.41.1
postgresql15
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 15.13-3.41.1
15.13-3.41.1
postgresql13
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 13.21-3.63.1
13.21-3.63.1
postgresql13
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 13.21-3.63.1
13.21-3.63.1
postgresql17
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 17.5-3.13.1
17.5-3.13.1
postgresql17
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 17.5-3.13.1
17.5-3.13.1
postgresql16
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 16.9-150600.16.18.1
16.9-150600.16.18.1
postgresql16
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 16.9-150600.16.18.1
16.9-150600.16.18.1
postgresql16
SUSE:Linux Enterprise Module for Server Applications 15 SP6
 before 16.9-150600.16.18.1
16.9-150600.16.18.1
postgresql16
openSUSE:Leap 15.6
 before 16.9-150600.16.18.1
16.9-150600.16.18.1
postgresql16
SUSE:Linux Enterprise Module for Legacy 15 SP7
 before 16.9-150600.16.18.1
16.9-150600.16.18.1
postgresql16
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 16.9-150600.16.18.1
16.9-150600.16.18.1
postgresql16
SUSE:Linux Enterprise Module for Server Applications 15 SP7
 before 16.9-150600.16.18.1
16.9-150600.16.18.1
postgresql16
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 16.9-3.29.1
16.9-3.29.1
postgresql16
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 16.9-3.29.1
16.9-3.29.1
postgresql14
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 14.18-3.57.1
14.18-3.57.1
postgresql14
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 14.18-3.57.1
14.18-3.57.1
postgresql16
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Manager Proxy 4.3
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Manager Server 4.3
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Enterprise Storage 7.1
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql16
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 16.9-150200.5.29.1
16.9-150200.5.29.1
postgresql17
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Manager Proxy 4.3
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Manager Server 4.3
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Enterprise Storage 7.1
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql17
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 17.5-150200.5.13.1
17.5-150200.5.13.1
postgresql15
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql15
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql15
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql15
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql15
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql15
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql15
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql15
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql15
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql15
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql15
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 15.13-150200.5.41.1
15.13-150200.5.41.1
postgresql-9.3
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
9.3.1-19.3.2-19.3.2-1ubuntu19.3.2-1ubuntu29.3.3-1
Show 24 moreShow less
9.3.3-1bzr19.3.3-1bzr29.3.4-19.3.5-0ubuntu0.14.04.19.3.6-0ubuntu0.14.049.3.7-0ubuntu0.14.049.3.8-0ubuntu0.4.049.3.9-0ubuntu0.14.049.3.10-0ubuntu0.14.049.3.11-0ubuntu0.14.049.3.12-0ubuntu0.14.049.3.13-0ubuntu0.14.049.3.14-0ubuntu0.14.049.3.15-0ubuntu0.14.049.3.16-0ubuntu0.14.049.3.17-0ubuntu0.14.049.3.18-0ubuntu0.14.04.19.3.19-0ubuntu0.14.049.3.20-0ubuntu0.14.049.3.21-0ubuntu0.14.049.3.22-0ubuntu0.14.049.3.23-0ubuntu0.14.049.3.24-0ubuntu0.14.049.3.24-0ubuntu0.14.04+esm1
 None known
postgresql-9.5
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
9.5.0-19.5.0-29.5.0-39.5.1-19.5.2-1
Show 29 moreShow less
9.5.3-0ubuntu0.16.049.5.4-0ubuntu0.16.049.5.5-0ubuntu0.16.049.5.6-0ubuntu0.16.049.5.7-0ubuntu0.16.049.5.8-0ubuntu0.16.04.19.5.9-0ubuntu0.16.049.5.10-0ubuntu0.16.049.5.11-0ubuntu0.16.049.5.12-0ubuntu0.16.049.5.13-0ubuntu0.16.049.5.14-0ubuntu0.16.049.5.16-0ubuntu0.16.04.19.5.17-0ubuntu0.16.04.19.5.18-0ubuntu0.16.04.19.5.19-0ubuntu0.16.04.19.5.21-0ubuntu0.16.04.19.5.23-0ubuntu0.16.04.19.5.24-0ubuntu0.16.04.19.5.25-0ubuntu0.16.04.19.5.25-0ubuntu0.16.04.1+esm19.5.25-0ubuntu0.16.04.1+esm29.5.25-0ubuntu0.16.04.1+esm39.5.25-0ubuntu0.16.04.1+esm49.5.25-0ubuntu0.16.04.1+esm59.5.25-0ubuntu0.16.04.1+esm69.5.25-0ubuntu0.16.04.1+esm79.5.25-0ubuntu0.16.04.1+esm89.5.25-0ubuntu0.16.04.1+esm10
 None known
postgresql-10
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
10.1-110.1-210.2-110.3-110.4-0ubuntu0.18.04
Show 21 moreShow less
10.5-0ubuntu0.18.0410.6-0ubuntu0.18.04.110.7-0ubuntu0.18.04.110.8-0ubuntu0.18.04.110.9-0ubuntu0.18.04.110.10-0ubuntu0.18.04.110.12-0ubuntu0.18.04.110.14-0ubuntu0.18.04.110.15-0ubuntu0.18.04.110.16-0ubuntu0.18.04.110.17-0ubuntu0.18.04.110.18-0ubuntu0.18.04.110.19-0ubuntu0.18.04.110.20-0ubuntu0.18.04.110.21-0ubuntu0.18.04.110.22-0ubuntu0.18.04.110.23-0ubuntu0.18.04.110.23-0ubuntu0.18.04.210.23-0ubuntu0.18.04.2+esm110.23-0ubuntu0.18.04.2+esm210.23-0ubuntu0.18.04.2+esm3
 None known
postgresql-12
Ubuntu:20.04:LTS
 before 12.22-0ubuntu0.20.04.4, plus listed versions
12.0-112.1-112.1-2build112.2-112.2-1ubuntu2
Show 20 moreShow less
12.2-412.4-0ubuntu0.20.04.112.5-0ubuntu0.20.04.112.6-0ubuntu0.20.04.112.7-0ubuntu0.20.04.112.8-0ubuntu0.20.04.112.9-0ubuntu0.20.04.112.10-0ubuntu0.20.04.112.11-0ubuntu0.20.04.112.12-0ubuntu0.20.04.112.13-0ubuntu0.20.04.112.14-0ubuntu0.20.04.112.15-0ubuntu0.20.04.112.16-0ubuntu0.20.04.112.17-0ubuntu0.20.04.112.18-0ubuntu0.20.04.112.19-0ubuntu0.20.04.112.20-0ubuntu0.20.04.112.22-0ubuntu0.20.04.112.22-0ubuntu0.20.04.2
12.22-0ubuntu0.20.04.4
postgresql-14
Ubuntu:22.04:LTS
 before 14.18-0ubuntu0.22.04.1, plus listed versions
14.1-1ubuntu114.2-114.2-1ubuntu114.3-0ubuntu0.22.04.114.4-0ubuntu0.22.04.1
Show 11 moreShow less
14.5-0ubuntu0.22.04.114.6-0ubuntu0.22.04.114.7-0ubuntu0.22.04.114.8-0ubuntu0.22.04.114.9-0ubuntu0.22.04.114.10-0ubuntu0.22.04.114.11-0ubuntu0.22.04.114.12-0ubuntu0.22.04.114.13-0ubuntu0.22.04.114.15-0ubuntu0.22.04.114.17-0ubuntu0.22.04.1
14.18-0ubuntu0.22.04.1
postgresql-16
Ubuntu:24.04:LTS
 before 16.9-0ubuntu0.24.04.1, plus listed versions
16.0-216.1-116.1-1build116.1-1build316.2-1
Show 8 moreShow less
16.2-1ubuntu216.2-1ubuntu316.2-1ubuntu416.3-0ubuntu0.24.04.116.4-0ubuntu0.24.04.116.4-0ubuntu0.24.04.216.6-0ubuntu0.24.04.116.8-0ubuntu0.24.04.1
16.9-0ubuntu0.24.04.1
postgresql-17
Ubuntu:25.04
 before 17.5-0ubuntu0.25.04.1, plus listed versions
17.0-117.2-117.2-1build217.3-317.3-3build117.4-1
17.5-0ubuntu0.25.04.1
postgresql13
openSUSE:Tumbleweed
 before 13.21-1.1
13.21-1.1
postgresql14
openSUSE:Tumbleweed
 before 14.18-1.1
14.18-1.1
postgresql15
openSUSE:Tumbleweed
 before 15.13-1.1
15.13-1.1
postgresql16
openSUSE:Tumbleweed
 before 16.9-1.1
16.9-1.1
postgresql17
openSUSE:Tumbleweed
 before 17.5-1.1
17.5-1.1

History

History
RecordedChangedSources
affected
factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-4207 is a medium vulnerability (CVSS 5.9) in postgresql, published May 8, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.76%, the 55th percentile. Fixed in postgresql14 14.18-r0.

References

Show 88 moreShow less
This page doesn't list everything

Left out here: 171 package rows. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 12 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open