Issued:

2026-01-13

Updated:

2026-01-13

RHSA-2026:0493 - Moderate: postgresql:16 security update

Synopsis

Moderate: postgresql:16 security update

Type/Severity

Security Advisory Moderate

Topic

An update for the postgresql:16 module is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

• postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)

• postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• pg_repack-debugsource-1.5.1-1.module+el9.6.0+22880+6b241eec.ppc64le.rpm
• postgresql-test-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-server-devel-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-private-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-private-libs-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-test-rpm-macros-16.11-1.module+el9.7.0+23784+0c5a3b34.noarch.rpm
• pgaudit-16.0-1.module+el9.4.0+20427+07482b8c.src.rpm
• postgis-docs-3.5.3-3.module+el9.7.0+23421+025f8139.ppc64le.rpm
• postgis-client-3.5.3-3.module+el9.7.0+23421+025f8139.ppc64le.rpm
• postgis-utils-3.5.3-3.module+el9.7.0+23421+025f8139.ppc64le.rpm
• postgresql-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgis-upgrade-3.5.3-3.module+el9.7.0+23421+025f8139.ppc64le.rpm
• pgvector-debuginfo-0.6.2-2.module+el9.6.0+22979+c3d78d52.ppc64le.rpm
• pg_repack-1.5.1-1.module+el9.6.0+22880+6b241eec.src.rpm
• postgresql-plperl-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-server-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-upgrade-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-upgrade-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-private-libs-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-contrib-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-static-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-upgrade-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-server-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-upgrade-devel-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• pg_repack-1.5.1-1.module+el9.6.0+22880+6b241eec.ppc64le.rpm
• pgvector-0.6.2-2.module+el9.6.0+22979+c3d78d52.ppc64le.rpm
• pgaudit-debugsource-16.0-1.module+el9.4.0+20427+07482b8c.ppc64le.rpm
• postgis-debugsource-3.5.3-3.module+el9.7.0+23421+025f8139.ppc64le.rpm
• pgaudit-debuginfo-16.0-1.module+el9.4.0+20427+07482b8c.ppc64le.rpm
• postgres-decoderbufs-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.ppc64le.rpm
• postgresql-contrib-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgres-decoderbufs-debugsource-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.ppc64le.rpm
• postgis-client-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.ppc64le.rpm
• postgresql-plpython3-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• pgaudit-16.0-1.module+el9.4.0+20427+07482b8c.ppc64le.rpm
• postgres-decoderbufs-debuginfo-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.ppc64le.rpm
• pgvector-debugsource-0.6.2-2.module+el9.6.0+22979+c3d78d52.ppc64le.rpm
• postgresql-docs-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-docs-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgres-decoderbufs-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.src.rpm
• postgresql-debugsource-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-pltcl-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgresql-16.11-1.module+el9.7.0+23784+0c5a3b34.src.rpm
• postgresql-test-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgis-upgrade-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.ppc64le.rpm
• postgresql-plperl-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• pg_repack-debuginfo-1.5.1-1.module+el9.6.0+22880+6b241eec.ppc64le.rpm
• postgis-3.5.3-3.module+el9.7.0+23421+025f8139.src.rpm
• postgis-3.5.3-3.module+el9.7.0+23421+025f8139.ppc64le.rpm
• postgresql-plpython3-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• pgvector-0.6.2-2.module+el9.6.0+22979+c3d78d52.src.rpm
• postgresql-pltcl-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgis-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.ppc64le.rpm
• postgresql-server-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.ppc64le.rpm
• postgis-3.5.3-3.module+el9.7.0+23421+025f8139.s390x.rpm
• postgresql-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-plperl-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-plperl-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• pgaudit-debugsource-16.0-1.module+el9.4.0+20427+07482b8c.s390x.rpm
• postgres-decoderbufs-debuginfo-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.s390x.rpm
• postgresql-contrib-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-server-devel-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-static-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-test-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• pgvector-0.6.2-2.module+el9.6.0+22979+c3d78d52.s390x.rpm
• pgvector-debugsource-0.6.2-2.module+el9.6.0+22979+c3d78d52.s390x.rpm
• postgresql-docs-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-server-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-upgrade-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-upgrade-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-pltcl-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-server-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-upgrade-devel-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-docs-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• pg_repack-1.5.1-1.module+el9.6.0+22880+6b241eec.s390x.rpm
• pgaudit-16.0-1.module+el9.4.0+20427+07482b8c.s390x.rpm
• postgresql-debugsource-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgis-upgrade-3.5.3-3.module+el9.7.0+23421+025f8139.s390x.rpm
• postgresql-pltcl-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-private-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-private-libs-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• pg_repack-debuginfo-1.5.1-1.module+el9.6.0+22880+6b241eec.s390x.rpm
• postgis-client-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.s390x.rpm
• pgaudit-debuginfo-16.0-1.module+el9.4.0+20427+07482b8c.s390x.rpm
• postgis-debugsource-3.5.3-3.module+el9.7.0+23421+025f8139.s390x.rpm
• postgis-utils-3.5.3-3.module+el9.7.0+23421+025f8139.s390x.rpm
• postgresql-plpython3-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-private-libs-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-test-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-upgrade-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-contrib-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgis-upgrade-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.s390x.rpm
• postgresql-server-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• postgresql-plpython3-16.11-1.module+el9.7.0+23784+0c5a3b34.s390x.rpm
• pg_repack-debugsource-1.5.1-1.module+el9.6.0+22880+6b241eec.s390x.rpm
• postgis-client-3.5.3-3.module+el9.7.0+23421+025f8139.s390x.rpm
• postgis-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.s390x.rpm
• postgres-decoderbufs-debugsource-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.s390x.rpm
• pgvector-debuginfo-0.6.2-2.module+el9.6.0+22979+c3d78d52.s390x.rpm
• postgis-docs-3.5.3-3.module+el9.7.0+23421+025f8139.s390x.rpm
• postgres-decoderbufs-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.s390x.rpm
• postgresql-docs-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-plpython3-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgis-3.5.3-3.module+el9.7.0+23421+025f8139.x86_64.rpm
• postgresql-static-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgis-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.x86_64.rpm
• postgres-decoderbufs-debugsource-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.x86_64.rpm
• postgresql-server-devel-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• pgaudit-debugsource-16.0-1.module+el9.4.0+20427+07482b8c.x86_64.rpm
• postgis-debugsource-3.5.3-3.module+el9.7.0+23421+025f8139.x86_64.rpm
• pg_repack-debugsource-1.5.1-1.module+el9.6.0+22880+6b241eec.x86_64.rpm
• postgis-docs-3.5.3-3.module+el9.7.0+23421+025f8139.x86_64.rpm
• postgres-decoderbufs-debuginfo-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.x86_64.rpm
• postgresql-contrib-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-contrib-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-plpython3-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• pg_repack-1.5.1-1.module+el9.6.0+22880+6b241eec.x86_64.rpm
• pgvector-debugsource-0.6.2-2.module+el9.6.0+22979+c3d78d52.x86_64.rpm
• pg_repack-debuginfo-1.5.1-1.module+el9.6.0+22880+6b241eec.x86_64.rpm
• postgis-client-3.5.3-3.module+el9.7.0+23421+025f8139.x86_64.rpm
• postgres-decoderbufs-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.x86_64.rpm
• postgresql-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-pltcl-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-private-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-server-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-debugsource-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-private-libs-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-private-libs-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-plperl-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-test-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-test-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• pgaudit-debuginfo-16.0-1.module+el9.4.0+20427+07482b8c.x86_64.rpm
• postgis-upgrade-3.5.3-3.module+el9.7.0+23421+025f8139.x86_64.rpm
• postgresql-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-pltcl-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-upgrade-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-upgrade-devel-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-docs-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-plperl-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-upgrade-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• pgvector-debuginfo-0.6.2-2.module+el9.6.0+22979+c3d78d52.x86_64.rpm
• postgresql-server-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-server-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• postgresql-upgrade-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.x86_64.rpm
• pgaudit-16.0-1.module+el9.4.0+20427+07482b8c.x86_64.rpm
• postgis-upgrade-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.x86_64.rpm
• postgis-utils-3.5.3-3.module+el9.7.0+23421+025f8139.x86_64.rpm
• pgvector-0.6.2-2.module+el9.6.0+22979+c3d78d52.x86_64.rpm
• postgis-client-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.x86_64.rpm
• postgresql-upgrade-devel-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-plpython3-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• pgaudit-debugsource-16.0-1.module+el9.4.0+20427+07482b8c.aarch64.rpm
• postgis-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.aarch64.rpm
• postgis-upgrade-3.5.3-3.module+el9.7.0+23421+025f8139.aarch64.rpm
• pg_repack-debugsource-1.5.1-1.module+el9.6.0+22880+6b241eec.aarch64.rpm
• postgres-decoderbufs-debugsource-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.aarch64.rpm
• postgresql-plperl-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• pgvector-debugsource-0.6.2-2.module+el9.6.0+22979+c3d78d52.aarch64.rpm
• pgvector-0.6.2-2.module+el9.6.0+22979+c3d78d52.aarch64.rpm
• postgis-client-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.aarch64.rpm
• pgaudit-16.0-1.module+el9.4.0+20427+07482b8c.aarch64.rpm
• postgis-utils-3.5.3-3.module+el9.7.0+23421+025f8139.aarch64.rpm
• postgres-decoderbufs-debuginfo-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.aarch64.rpm
• postgis-client-3.5.3-3.module+el9.7.0+23421+025f8139.aarch64.rpm
• postgresql-contrib-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgis-docs-3.5.3-3.module+el9.7.0+23421+025f8139.aarch64.rpm
• postgresql-docs-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-plpython3-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-pltcl-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-debugsource-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• pgaudit-debuginfo-16.0-1.module+el9.4.0+20427+07482b8c.aarch64.rpm
• postgresql-private-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-private-libs-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-server-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-static-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-server-devel-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-test-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-upgrade-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-server-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgis-debugsource-3.5.3-3.module+el9.7.0+23421+025f8139.aarch64.rpm
• postgresql-upgrade-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-plperl-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-server-devel-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgis-upgrade-debuginfo-3.5.3-3.module+el9.7.0+23421+025f8139.aarch64.rpm
• pgvector-debuginfo-0.6.2-2.module+el9.6.0+22979+c3d78d52.aarch64.rpm
• postgresql-private-libs-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-contrib-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgres-decoderbufs-2.4.0-1.Final.module+el9.4.0+20427+07482b8c.aarch64.rpm
• pg_repack-1.5.1-1.module+el9.6.0+22880+6b241eec.aarch64.rpm
• postgresql-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• pg_repack-debuginfo-1.5.1-1.module+el9.6.0+22880+6b241eec.aarch64.rpm
• postgis-3.5.3-3.module+el9.7.0+23421+025f8139.aarch64.rpm
• postgresql-docs-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-pltcl-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-test-debuginfo-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm
• postgresql-upgrade-16.11-1.module+el9.7.0+23784+0c5a3b34.aarch64.rpm

Fixes

• This content is not included.BZ - 2414825
• This content is not included.BZ - 2414826

CVEs

• CVE-2025-12817
• CVE-2025-12818

References

• https://access.redhat.com/security/updates/classification/#moderate

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at Security Contacts and Procedures.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.