Red Hat Security Advisory

RHSA-2026:0744

libpq security update

Released 2026-01-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) libpq-13.23-1.el8_4, libpq-devel-13.23-1.el8_4
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) libpq-13.23-1.el8_4, libpq-devel-13.23-1.el8_4

Fixes 1 record

TI-2025-11741 CVE-2025-12818 · GHSA-pr6x-gg24-6wfp

PostgreSQL libpq undersizes allocations, via integer wraparound

LOW 26

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00364 Published 2025-11-13 Partial fix · 18.1, 17.7 +4 CWE-190