Skip to content
OpenAdvisories
Medium DLA-4159-1 1 CVE

postgresql-13 - security update

Published May 9, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 postgresql-13 13.21-0+deb11u1

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-4207

    PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

    Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions …

    rust postgresql-9.3 postgresql15 postgresql-9.5 Debian Ubuntu Azure Linux Alpine Wolfi