Skip to content
OpenAdvisories
Medium ELSA-2026-0695 1 CVE

Moderate: libpq security update (Oracle Linux 8)

Published Jan 15, 2026 · Updated Jan 15, 2026

Ecosystem: Oracle Linux

Summary

[13.23-1]
- Rebase to upstream release 13.23
- Resolves: RHEL-131269 (CVE-2025-12818)

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 libpq 0:13.23-1.el8_10
Oracle Linux · 8 libpq-devel 0:13.23-1.el8_10

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-12818

    PostgreSQL libpq undersizes allocations, via integer wraparound

    Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for …

    rust postgresql-9.3 postgresql15 postgresql-9.5 Debian Ubuntu Azure Linux Alpine