ALSA-2026:0491

Details

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)
postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Packages

postgresql

AlmaLinux 9

Fixed in:

13.23-1.el9_7

postgresql-contrib

AlmaLinux 9

Fixed in:

13.23-1.el9_7

postgresql-plperl

AlmaLinux 9

Fixed in:

13.23-1.el9_7

postgresql-plpython3

AlmaLinux 9

Fixed in:

13.23-1.el9_7

postgresql-pltcl

AlmaLinux 9

Fixed in:

13.23-1.el9_7

postgresql-private-libs

AlmaLinux 9

Fixed in:

13.23-1.el9_7

postgresql-server

AlmaLinux 9

Fixed in:

13.23-1.el9_7

postgresql-upgrade

AlmaLinux 9

Fixed in:

13.23-1.el9_7

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0491 ADVISORYhttps://bugzilla.redhat.com/2414825 ADVISORYhttps://bugzilla.redhat.com/2414826 ADVISORYhttps://errata.almalinux.org/9/ALSA-2026-0491.html

ALSA-2026:0491

Details

Affected Packages

References

Related

Ecosystems

Timeline