[ALSA-2026:0523] Moderate: postgresql:13 security update
Type:
security
Severity:
moderate
Release date:
2026-01-16
Description:
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 postgresql-contrib-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm 04fa3d4329c45f0d323d2649ca575a07fb8b6d07a18703ebb040dea65db8f758
aarch64 pg_repack-1.4.6-3.module_el8.6.0+2760+1746ec94.aarch64.rpm 0bc131332c26443ba517f370c75ff8455abd1e32f7762def0cb858065ae917ec
aarch64 postgresql-upgrade-devel-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm 49ee49a76f83a06d4615842850fc692070a0f167df01693023aee2200093d97c
aarch64 postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm 522d374504e79f3f77e5e3b5416322b20c7ada54a0415faad2ec266934a2416b
aarch64 pgaudit-1.5.0-1.module_el8.6.0+2760+1746ec94.aarch64.rpm 5693432a162b3d47be77299991ed7dd77bc206427ce8f7442f27f6342a7502f3
aarch64 postgresql-upgrade-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm 6da7ff70d7025a2a00df1a4e56ff3ffbd9a223d2cc56f221146f8b5d74515827
aarch64 postgresql-server-devel-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm 6dbbbbb71d0b8ba4487a779fea8bdacf75e16545f0161c8f4dd98ca29d48be96
aarch64 postgres-decoderbufs-0.10.0-2.module_el8.6.0+2760+1746ec94.aarch64.rpm 6e3400183f8f17474e90addbd65385025002f6f67f655a5c09fccd1901a6bd45
aarch64 postgresql-pltcl-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm 9457033f0acbe808139100e209e20323b1471f3cc4e9a3d2af330330f57e75c6
aarch64 postgresql-server-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm 98d8b678191164be6346db0ef8bdb5828c69e31d2e8495db98bef3fd3d8c8e1c
aarch64 postgresql-plpython3-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm b1a1029fb10bfb1a50f796d748a25b526fdc609db74e19e569092f6101c8b56c
aarch64 postgresql-static-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm bccd08a2ae50b71c7f765387b0b384de5b47fa80fbe26d4bfe35fb2b3882f4c8
aarch64 postgresql-docs-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm d40217ab8b3c94fa34aa03deb3adbcd7248a24ec377e549721e1f9fc562de36a
aarch64 postgresql-test-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm d48e0fa75d81c5157327b5c12d54258c68d8e4857d2e7fa1380974b9c2866040
aarch64 postgresql-plperl-13.23-1.module_el8.10.0+4097+ed3c9b5c.aarch64.rpm ed80b1ec967b62a4ae34cc5ffb521465825749cb485f5f8b54a9d50104d6ba0a
noarch postgresql-test-rpm-macros-13.23-1.module_el8.10.0+4097+ed3c9b5c.noarch.rpm b484f3d2a2cf0eaa6eeb3276c7bb27c0f7fe1280b2562abf47803f23a9705775
ppc64le postgres-decoderbufs-0.10.0-2.module_el8.6.0+2760+1746ec94.ppc64le.rpm 13cd44b926f28289bb0a5b01f74460112ef2a7b442da8131cb2586d4227ef755
ppc64le postgresql-server-devel-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm 238cb3ca1ece1f92680dd2e6e858219be12667a2ce8dd4d6f0b3cedf54be95b1
ppc64le postgresql-plperl-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm 580d2b377d5a6c6d69593dafeab021b4a2b513f45398b714caf764dba1dc096a
ppc64le postgresql-test-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm 62b162004195fd2e809aad3f1ce691df1f8206d17fe0e932df7a0dc55667f941
ppc64le pgaudit-1.5.0-1.module_el8.6.0+2760+1746ec94.ppc64le.rpm 69187c120a179f0153c3110e7c5dd4cd103e1c2bb0c9b4a0da8a16b85c3f3390
ppc64le pg_repack-1.4.6-3.module_el8.6.0+2760+1746ec94.ppc64le.rpm 9a907ca1b9082a2da428045283c26d15f54bd5ed2179c1de36a53ae6b52c08bb
ppc64le postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm b12cf8998ef4fb68d3ae79df2e4ec56483f284bdf145430bbdb9e235b2339071
ppc64le postgresql-contrib-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm c694963ce1857c90f38a20febf018e3a9c75efdc0487282b97f1fda92c45b5ab
ppc64le postgresql-docs-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm c697b6b776e09698922f526d7f6ee6e86d801e8756eaa06df9aeb72bd8a02d10
ppc64le postgresql-static-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm cbc7eb1752f8b13648ced7e0510a8caa141c8be95ce56b8a7a221d037c48d13e
ppc64le postgresql-pltcl-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm cd0180570790235711767958236fdb3bacb38293c7ec40fafeec71f323ba0c66
ppc64le postgresql-upgrade-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm cda8be512bb3d5c72b384faf47e12d2dd985877fe5d99398ffc5a7ed803a70f6
ppc64le postgresql-plpython3-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm e72e9415c6424860b1197314b0d8e880ec6eb23a9a77d5f0112ccb4d975725ac
ppc64le postgresql-upgrade-devel-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm e813f054c114d0537c3793049dd5a6cf1ff0384d422a8f43706b38346e2f0290
ppc64le postgresql-server-13.23-1.module_el8.10.0+4097+ed3c9b5c.ppc64le.rpm ed649d830b1d6feb7025b166c0f921b46e62495a887f58f6639c40fe081ca633
s390x postgresql-plpython3-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm 08f845a9daa15da27576f8e1e0a8ce41022ab9ede44ebf16ee66a991a90aeaae
s390x postgresql-upgrade-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm 0daea037173b67bff9d1d5eb0c67930b4929a8e47267e1565ae4cb0b7f051f5d
s390x postgresql-plperl-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm 3779ab20abb6b395286766341fee1e8a4de2832a566f630217e0a943ea04c278
s390x postgresql-contrib-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm 60de1318484dbf8a96e02b2af421926c11fb88930cdc37bae092b8064ac48493
s390x postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm 73d9c2df2f057f58d7bf983aaee60e0b7482cbce1ef6a764e574cc1a35a7d9db
s390x postgresql-test-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm 7947afb61ccadc3611a5b0ae75b5b532a3cb9bf1df4cba6f0c3253ae2919c058
s390x postgresql-pltcl-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm 8120a6a496b7a4f0e69f774b4ec0fea19763fc27c9d3bf8e34751a3462a2e57a
s390x postgresql-server-devel-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm 85f94c0a381733426237a90e1c381fbd31428af0c9ef01512fe98b03197c9fa6
s390x postgresql-docs-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm 873979ef0b22b80fd171dcf6baf80a25dca5e97ea2ad442a89e7e4f52e2b51d5
s390x pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35
s390x postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3
s390x pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7
s390x postgresql-upgrade-devel-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm e29f08377eaff82009ec3e2ba85e87095d2118865913eea65c18092afb4777c4
s390x postgresql-server-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm e80294522ee5d97a55898e55844e8082156fda156adc954f5efa535f609a7377
s390x postgresql-static-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm f46bbd25d1568144205381caed5f19206f19f94317eb9e86dae96afb0686a9c0
x86_64 postgresql-plperl-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm 0bd6aff23686a97792c15d6cc50dfd6edead89c348ba8f21979263e287bb52eb
x86_64 postgresql-upgrade-devel-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm 0e9e9b6a06e98e6161022ed236775291b164a0cc002c46cda1def1324782304b
x86_64 postgresql-upgrade-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm 2d1d5d189e45f61f10e44906683fcf30839df714ba3c7fef0b29472d972e8a3c
x86_64 postgresql-server-devel-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm 2ea5b619004ed88920b9f8ae9ea9118230ed54996bc43f3217b57ac92b4239cf
x86_64 postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm 3d8b0e8034d8e0cfa9ba49d0ffdd1f8f04494ed2860d341ed1575e73d4a7f87f
x86_64 postgres-decoderbufs-0.10.0-2.module_el8.6.0+2760+1746ec94.x86_64.rpm 77c2586f944e08d0a073c739b9eeeedc0d9ca7da51f43a0dcdc3a1c383a1b0fe
x86_64 postgresql-test-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm 89ba17da1fbcac73f68c056c296d886c251963a46bb6f7b68c732bf9d4f00568
x86_64 postgresql-contrib-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm 91396e1bcf7cd99e6f5e23c6acb8217ad3a06d093bc65ab8cfcb2b2aef6ef4c3
x86_64 pg_repack-1.4.6-3.module_el8.6.0+2760+1746ec94.x86_64.rpm 92f387cdf31b3872470fb3402126bc72e2e6f6b342192bc2333465e896810c0b
x86_64 postgresql-pltcl-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm 95e0ccee4316da190996698d510ebd8296ded694cae2dec4ecc3c70ff3577659
x86_64 postgresql-docs-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm a7998ca0dc88cda723a41269c3b6b81ff8844fcb4449980ea65aeb99ff2a4735
x86_64 postgresql-plpython3-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm d5a536687c5d1173ba2f061886e7cc7795b4e0ea6f7644d8117090b7524d1cd7
x86_64 postgresql-static-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm d688e501d846a1ec7003425aee7ebb2c09abe159ca43f1db75723c482889053f
x86_64 pgaudit-1.5.0-1.module_el8.6.0+2760+1746ec94.x86_64.rpm d75cd67116ed5f4af36fdbe2c39536a2de4594a800698c0b041f36122b61843e
x86_64 postgresql-server-13.23-1.module_el8.10.0+4097+ed3c9b5c.x86_64.rpm e0ccc7558f7577f1610408d90ef29f9b152278ca5c567506dc2c7308b4453924
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.