Red Hat Security Advisory

RHSA-2025:23158

libpq security update

Released 2025-12-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) libpq-13.23-1.el8_6, libpq-devel-13.23-1.el8_6
Red Hat Enterprise Linux AppStream E4S (v.8.6) libpq-13.23-1.el8_6, libpq-devel-13.23-1.el8_6
Red Hat Enterprise Linux AppStream TUS (v.8.6) libpq-13.23-1.el8_6, libpq-devel-13.23-1.el8_6

Fixes 1 record

TI-2025-11741 CVE-2025-12818 · GHSA-pr6x-gg24-6wfp

PostgreSQL libpq undersizes allocations, via integer wraparound

LOW 26

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00364 Published 2025-11-13 Partial fix · 18.1, 17.7 +4 CWE-190