Skip to content
OpenAdvisories
Medium ELSA-2026-0594 1 CVE

Moderate: libpq security update (Oracle Linux 10)

Published Jan 14, 2026 · Updated Jan 14, 2026

Ecosystem: Oracle Linux

Summary

[16.11-3]
- Release bump

[16.11-1]
- Rebase to upstream release 16.11

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 10 libpq 0:16.11-3.el10_1
Oracle Linux · 10 libpq-devel 0:16.11-3.el10_1

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-12818

    PostgreSQL libpq undersizes allocations, via integer wraparound

    Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for …

    rust postgresql-9.3 postgresql15 postgresql-9.5 Debian Ubuntu Azure Linux Alpine