Fixed packages 49
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | pg_repack | 0:1.5.1-1.module+el9.6.0+22880+6b241eec |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | pg_repack-debuginfo | 0:1.5.1-1.module+el9.6.0+22880+6b241eec |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | pg_repack-debugsource | 0:1.5.1-1.module+el9.6.0+22880+6b241eec |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | pgaudit | 0:16.0-1.module+el9.4.0+20427+07482b8c |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | pgaudit-debuginfo | 0:16.0-1.module+el9.4.0+20427+07482b8c |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | pgaudit-debugsource | 0:16.0-1.module+el9.4.0+20427+07482b8c |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | pgvector | 0:0.6.2-2.module+el9.6.0+22979+c3d78d52 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | pgvector-debuginfo | 0:0.6.2-2.module+el9.6.0+22979+c3d78d52 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | pgvector-debugsource | 0:0.6.2-2.module+el9.6.0+22979+c3d78d52 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgis | 0:3.5.3-3.module+el9.7.0+23421+025f8139 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgis-client | 0:3.5.3-3.module+el9.7.0+23421+025f8139 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgis-client-debuginfo | 0:3.5.3-3.module+el9.7.0+23421+025f8139 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgis-debuginfo | 0:3.5.3-3.module+el9.7.0+23421+025f8139 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgis-debugsource | 0:3.5.3-3.module+el9.7.0+23421+025f8139 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgis-docs | 0:3.5.3-3.module+el9.7.0+23421+025f8139 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgis-upgrade | 0:3.5.3-3.module+el9.7.0+23421+025f8139 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgis-upgrade-debuginfo | 0:3.5.3-3.module+el9.7.0+23421+025f8139 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgis-utils | 0:3.5.3-3.module+el9.7.0+23421+025f8139 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgres-decoderbufs | 0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgres-decoderbufs-debuginfo | 0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgres-decoderbufs-debugsource | 0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-contrib | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-contrib-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-debugsource | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-docs | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-docs-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-plperl | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-plperl-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-plpython3 | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-plpython3-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-pltcl | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-pltcl-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-private-devel | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-private-libs | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-private-libs-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-server | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-server-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-server-devel | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-server-devel-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-static | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-test | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-test-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-test-rpm-macros | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-upgrade | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-upgrade-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-upgrade-devel | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | postgresql-upgrade-devel-debuginfo | 0:16.11-1.module+el9.7.0+23784+0c5a3b34 |
Vulnerabilities 2
-
Medium 5.9
PostgreSQL libpq undersizes allocations, via integer wraparound
Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for …
-
Low 3.1
PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege
Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privile…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2414825
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2414826
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0493.json
-
report
https://access.redhat.com/security/cve/CVE-2025-12817
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-12817
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-12817
-
article
https://www.postgresql.org/support/security/CVE-2025-12817/
-
report
https://access.redhat.com/security/cve/CVE-2025-12818
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-12818
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-12818
-
article
https://www.postgresql.org/support/security/CVE-2025-12818/