Skip to content
OpenAdvisories
Medium DLA-4420-1 2 CVEs

postgresql-13 - security update

Published Dec 26, 2025 · Updated Dec 26, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 postgresql-13 13.23-0+deb11u1

Vulnerabilities 2

  • Medium 5.9
    CVE-2025-12818

    PostgreSQL libpq undersizes allocations, via integer wraparound

    Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for …

    rust postgresql15 postgresql-15 postgresql16 Debian Ubuntu Azure Linux Alpine
  • Low 3.1
    CVE-2025-12817

    PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege

    Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privile…

    postgresql15 postgresql-15 postgresql16 postgresql-9.3 Debian Ubuntu Azure Linux Alpine