Read the docs
Red Hat Security Advisory

RHSA-2026:0458

libpq security update

Released 2026-01-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 26

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00364 Published 2025-11-13 Partial fix · 18.1, 17.7 +4 CWE-190