Most recent entries from all

ALSA-2026:0458 — Moderate: libpq security update

Affected: AlmaLinux:9: libpq, AlmaLinux:9: libpq-devel

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.

Security Fix(es):

* postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-13962

BELL-CVE-2025-12818

Affected: Alpaquita:23: postgresql15, Alpaquita:25: postgresql17, Alpaquita:stream: postgresql18

BIT-postgresql-2025-12818 — PostgreSQL libpq undersizes allocations, via integer wraparound

Affected: Bitnami: postgresql

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

certfr-2025-avi-1007 — De multiples vulnérabilités ont été découvertes dans PostgreSQL. Elles permettent à un attaquant de provoquer un déni d…

certfr-2025-avi-1007

CLEANSTART-2026-DY00588 — Security fix for CVE-2025-12818 applied in: postgresql17 17.7-r0

Affected: CleanStart: postgresql17

Security vulnerability affects the postgresql17 package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-260695

fkie_cve-2025-12818

GHSA-pr6x-gg24-6wfp

jvndb-2026-010299

Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2024-4028, CVE-2025-8714, CVE-2025-8715, CVE-2025-10044, CVE-2025-12817, CVE-2025-12818, CVE-2025-41248, CVE-2025-41249 (*)CVE-2026-1190 is removed from the list.

msrc_CVE-2025-12818 — PostgreSQL libpq undersizes allocations, via integer wraparound

msrc_CVE-2025-12818

NCSC-2026-0321 — Meerdere kwetsbaarheden verholpen in IBM AIX en IBM PowerVM VIOS

NCSC-2026-0321

OESA-2025-2715 — postgresql-13 security update

Affected: openEuler:20.03-LTS-SP4: postgresql-13

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you&apos;ll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package. Security Fix(es):

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.(CVE-2025-12817)

openSUSE-SU-2025:15782-1 — postgresql13-13.23-1.1 on GA media

postgresql13-13.23-1.1 on GA media

RHSA-2025:22728 — Red Hat Security Advisory: postgresql:15 security update

postgresql: CREATE STATISTICS does not check for schema CREATE privilege postgresql: libpq: libpq undersizes allocations, via integer wraparound

SUSE-SU-2025:4325-1 — Security update for postgresql13

Security update for postgresql13

UBUNTU-CVE-2025-12818

Affected: Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16, Ubuntu:25.10: postgresql-17, Ubuntu:26.04:LTS: postgresql-18

WID-SEC-W-2025-2600 — PostgreSQL: Mehrere Schwachstellen ermöglichen Denial of Service

Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um einen Denial of Service Angriff durchzuführen.