Skip to content
OpenAdvisories
Medium RHSA-2026:0519 2 CVEs

Red Hat Security Advisory: postgresql:16 security update

Published Jan 14, 2026 · Updated Jul 9, 2026

Ecosystem: Red Hat

Fixed packages 37

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream pg_repack 0:1.5.1-1.module+el8.10.0+22551+c0330dc9
Red Hat · RHEL 8 enterprise_linux:8::appstream pg_repack-debuginfo 0:1.5.1-1.module+el8.10.0+22551+c0330dc9
Red Hat · RHEL 8 enterprise_linux:8::appstream pg_repack-debugsource 0:1.5.1-1.module+el8.10.0+22551+c0330dc9
Red Hat · RHEL 8 enterprise_linux:8::appstream pgaudit 0:16.0-1.module+el8.10.0+20413+d8116364
Red Hat · RHEL 8 enterprise_linux:8::appstream pgaudit-debuginfo 0:16.0-1.module+el8.10.0+20413+d8116364
Red Hat · RHEL 8 enterprise_linux:8::appstream pgaudit-debugsource 0:16.0-1.module+el8.10.0+20413+d8116364
Red Hat · RHEL 8 enterprise_linux:8::appstream postgres-decoderbufs 0:2.4.0-1.Final.module+el8.10.0+20413+d8116364
Red Hat · RHEL 8 enterprise_linux:8::appstream postgres-decoderbufs-debuginfo 0:2.4.0-1.Final.module+el8.10.0+20413+d8116364
Red Hat · RHEL 8 enterprise_linux:8::appstream postgres-decoderbufs-debugsource 0:2.4.0-1.Final.module+el8.10.0+20413+d8116364
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-contrib 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-contrib-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-debugsource 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-docs 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-docs-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-plperl 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-plperl-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-plpython3 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-plpython3-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-pltcl 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-pltcl-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-private-devel 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-private-libs 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-private-libs-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-server 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-server-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-server-devel 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-server-devel-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-static 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-test 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-test-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-test-rpm-macros 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-upgrade 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-upgrade-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-upgrade-devel 0:16.11-1.module+el8.10.0+23783+d9790420
Red Hat · RHEL 8 enterprise_linux:8::appstream postgresql-upgrade-devel-debuginfo 0:16.11-1.module+el8.10.0+23783+d9790420

Vulnerabilities 2

  • Medium 5.9
    CVE-2025-12818

    PostgreSQL libpq undersizes allocations, via integer wraparound

    Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for …

    rust postgresql15 postgresql-15 postgresql16 Debian Ubuntu Azure Linux Alpine
  • Low 3.1
    CVE-2025-12817

    PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege

    Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privile…

    postgresql15 postgresql-15 postgresql16 postgresql-9.3 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2414825
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2414826
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0519.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-12817
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-12817
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-12817
  • article
    https://www.postgresql.org/support/security/CVE-2025-12817/
  • report
    https://access.redhat.com/security/cve/CVE-2025-12818
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-12818
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-12818
  • article
    https://www.postgresql.org/support/security/CVE-2025-12818/