Red Hat Product Errata RHSA-2026:0263 - Security Advisory
Issued:
2026-01-08
Updated:
2026-01-08

RHSA-2026:0263 - Security Advisory

Synopsis

Moderate: postgresql security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for postgresql is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)
  • postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x

Fixes

  • BZ - 2414825 - CVE-2025-12817 postgresql: CREATE STATISTICS does not check for schema CREATE privilege
  • BZ - 2414826 - CVE-2025-12818 postgresql: libpq undersizes allocations, via integer wraparound

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0

SRPM
postgresql-13.23-1.el9_0.src.rpm SHA-256: 7fe586c10d3256c4e84f7c28761c0860b7cfa683a7be79b74a426643590b575b
ppc64le
postgresql-13.23-1.el9_0.ppc64le.rpm SHA-256: af96b2eb2235de2b75368e5ff4df8b36fd7f9156227a9f4a693aafaab481d6b8
postgresql-contrib-13.23-1.el9_0.ppc64le.rpm SHA-256: 93cb5889778af7b85e825b4a7022d962745c614b586f35b8e2182bb0c096dc8c
postgresql-contrib-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: daf01e533042253e66d4efde40d16f53732b0078e23be4b331af92af513a8416
postgresql-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: 404b6ce64c46528f8ff3e54af235baa422be456c57c50caac2aa893f5721fa76
postgresql-debugsource-13.23-1.el9_0.ppc64le.rpm SHA-256: fd54d99c9c977941ecb3ea46526bcc6af883af934a36456e48867a18cee037cc
postgresql-docs-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: 19344707f057b4bfc1aa3bffd0d47e62e170b8bdd36931f727d021cee0bf7727
postgresql-plperl-13.23-1.el9_0.ppc64le.rpm SHA-256: 6c49cd7919221c73f93d6a07a9e6d247ba0dd42a8fa22e081dce3a218a0203c6
postgresql-plperl-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: d0a1760353cf12bf3bcdf8978eafad06f337b86fccbf16bf8ea3f5d98bd180d0
postgresql-plpython3-13.23-1.el9_0.ppc64le.rpm SHA-256: c6e6ec711e86f090e783999da84d0712c9b282a138a4f130aa07e03ddbc9709a
postgresql-plpython3-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: e47db16199d8b2652ba40c7224403955457a818772bb4fbf4cfd4f27547729ae
postgresql-pltcl-13.23-1.el9_0.ppc64le.rpm SHA-256: 22af6316e1e9998e3e248703f7a5ea4d6d7cf310754a2c23e413e6af7bec607a
postgresql-pltcl-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: f7e7fad802cb447e4e0b7c45741eaee58af369ae72d006e00a06b356612e6c03
postgresql-private-libs-13.23-1.el9_0.ppc64le.rpm SHA-256: e19f81c3bd14c62932d11fa71e09ae9de2a420489820ed2f7f7223ea3d1256e8
postgresql-private-libs-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: b0c1f77fe8919d8cb719f0926e7be60bbbe5e85c8c5aaab6b221919c7d6ab57a
postgresql-server-13.23-1.el9_0.ppc64le.rpm SHA-256: bd551c26aa5162a3c6976a2d037487cd208462ed4c7abe66046da37bcac7880a
postgresql-server-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: ae181e0a2f91defb01137ad9bd0fef11731d37fa4e626262e391ba398b42476c
postgresql-server-devel-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: a4027bfe6feb077c2e6d8f76ee4cff2d3dccd7ddec5c3c28b66916b4b2c8aa7b
postgresql-test-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: dcc0350634904e542093f3004673f8c4f16e7135e86fb84465007d7f38a20282
postgresql-upgrade-13.23-1.el9_0.ppc64le.rpm SHA-256: 6a26031606959899527d2c70559de569709a66c58c4f9db2feeda562c87d3697
postgresql-upgrade-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: fb5b757de6ed4e0a8eb72a56661e28e7828d3904a0e33467b01eb0097700b206
postgresql-upgrade-devel-debuginfo-13.23-1.el9_0.ppc64le.rpm SHA-256: ed065cc97aca6200a4c847196f2f1f6485438d7fd71424bf34f93fddb54a2173

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0

SRPM
postgresql-13.23-1.el9_0.src.rpm SHA-256: 7fe586c10d3256c4e84f7c28761c0860b7cfa683a7be79b74a426643590b575b
x86_64
postgresql-13.23-1.el9_0.x86_64.rpm SHA-256: 86dd73bcc1e276143bb816bee17cad944c1ab8196e4562ae7cdb822442874179
postgresql-contrib-13.23-1.el9_0.x86_64.rpm SHA-256: caa32fe0c55cd870b24955b8bca329f23c709e65e3df102ba7171b5cd42edceb
postgresql-contrib-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: e5857c8990dcc700684ded0b46912a9d9068e807642a2c819a6277e20f268bd0
postgresql-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: fea1a6c75108fe1f3bcfe094de7c2161e1d78941f5857e3666c820940a1a7156
postgresql-debugsource-13.23-1.el9_0.x86_64.rpm SHA-256: fce832087e632ec75a48729ea61802853e60969b194df63d3e07665957b9442d
postgresql-docs-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: da516f30af8134dffa09b59b61a4cc279d2c459427a6dfcd43805d2176fa57b0
postgresql-plperl-13.23-1.el9_0.x86_64.rpm SHA-256: 49124cad8bcccd7cf6fb739fedc9e8b590de3f8e9acd696db84f41b8fbc773f7
postgresql-plperl-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: 7972ae01ca42e94c21b803797fc40095d5bb2e62b5b2a5faa4ab1ec13923b32d
postgresql-plpython3-13.23-1.el9_0.x86_64.rpm SHA-256: f182dc08cb20a62bb787fbec56b82ad589ec201c064948c9ee3568636690962b
postgresql-plpython3-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: ad083c12208dcca90790b28fe067bff38e4f45d081df7b09b1f43843ea14e0a2
postgresql-pltcl-13.23-1.el9_0.x86_64.rpm SHA-256: ce1338d1ccb93f1a35aaf7c628d43562b38ffb672a88a452fd88c2da6763282c
postgresql-pltcl-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: 3238a6778c1a94a5e23ae40e56d457df66e02271635eed379e866a1eaa158109
postgresql-private-libs-13.23-1.el9_0.x86_64.rpm SHA-256: 4f075ab7a11b8a2f76184147f0e3fa6b045a1bcb5921520e8ad5d2985aaf851f
postgresql-private-libs-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: 51e58d800024553d0f2229e393961933d6215ce3c91521af45775e272b89e2f8
postgresql-server-13.23-1.el9_0.x86_64.rpm SHA-256: cd3a51386553295c62f3badeb82665b94d23acfa3bd4227f53b2505d621cd166
postgresql-server-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: 12c5e0d2bbcbdc0df12dca4eff514b36b6df309017d5afc4c22b209b7ad357b6
postgresql-server-devel-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: e9296b0d6277c5a2fdeb70f7159874f683f9e67b668d8b8ba5f15b63c0cf5e32
postgresql-test-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: cec607591ad7fcefecb32e617dcf6a36000ba6195030f95e986d2e384f07161b
postgresql-upgrade-13.23-1.el9_0.x86_64.rpm SHA-256: 278a328d189f4f8441b81fd30a99e542d648bcded85055259321ab430d741a05
postgresql-upgrade-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: 77b82e98576bcd95002226438ea1ee793eac7da875545d5446c63048ee1474ba
postgresql-upgrade-devel-debuginfo-13.23-1.el9_0.x86_64.rpm SHA-256: 34e5abee85a42e52aff78b3e101fb1c4f8e7f0e4f7ef5227f7cbb7b639625d1c

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0

SRPM
postgresql-13.23-1.el9_0.src.rpm SHA-256: 7fe586c10d3256c4e84f7c28761c0860b7cfa683a7be79b74a426643590b575b
aarch64
postgresql-13.23-1.el9_0.aarch64.rpm SHA-256: f7b3e63dbeea6db125777d2d340e00a987a891efadb385892a7a25512ac4b27f
postgresql-contrib-13.23-1.el9_0.aarch64.rpm SHA-256: 6beccfe26b7c00cbf08035f47384d48fa5087a9c0d6dc12c950959bb6d41d672
postgresql-contrib-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: 3a0faa13c5ccd73c69fdbd221fa79e426ff77546e5323e22a2903b7e76480d87
postgresql-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: f25cef69ab65e110a94b3e7a633e2bd38ace3de41bf20d911672457877ea6d9b
postgresql-debugsource-13.23-1.el9_0.aarch64.rpm SHA-256: 882e93ba9f3170ca28d363c9ffcaf3a852a85f42c6738251d5e2bd2dbed3d7f3
postgresql-docs-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: 35fd85d0d89a9d13cb07f119d86b47d6758dc50b23bcb46557692d931cb92f33
postgresql-plperl-13.23-1.el9_0.aarch64.rpm SHA-256: 826050e5cd4948f9ef2179130faa9249725a15edd906571a17eb4052e8378b12
postgresql-plperl-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: 25f27e30ec664377b2099269ef8c1bf1ac00059a730c72bdd3c64e6b3514067a
postgresql-plpython3-13.23-1.el9_0.aarch64.rpm SHA-256: 22a947b13adbb516e4b129bfbc0fa005ef510a660a03fa480c4f359143aca2ea
postgresql-plpython3-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: ffb93ee02d46ce099a2d6957c417fb48aadafbb711c4931cb0f9a7f431860b00
postgresql-pltcl-13.23-1.el9_0.aarch64.rpm SHA-256: 72f16a492723ed53449b03f021def8e89e095eebe6a101aaebdb7b1504624d94
postgresql-pltcl-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: 4ea6f48377462d53c067c5b4ce558eb11040e413a4855a217063c08247e9c457
postgresql-private-libs-13.23-1.el9_0.aarch64.rpm SHA-256: 2e07b5f0ac72c49cc908e6e8d737a6f688e33b3364b2bd0249dc956dabd29ff6
postgresql-private-libs-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: 5e4ab0da58b43be63eadc88e540e5ddac9dbcad2dfd27f93a9e078d01a98b857
postgresql-server-13.23-1.el9_0.aarch64.rpm SHA-256: f98e3e3f6f9ef4977c2c684db5ad902a25da38fac4b743dd8ff6163b54bfac83
postgresql-server-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: 62a9c8c9980aa42f98898c38aa026d1ed3ae1e9dae78e3e08968274c2e5fd475
postgresql-server-devel-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: ed9de83ae9511fe0d716c4bfcc6f5ca6b1f453f2c1de4bbd9c6d80df9215954b
postgresql-test-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: d99ff3c556516013b5c199dc95dd332b0532bafa6801faa2f84ac1770c7559a9
postgresql-upgrade-13.23-1.el9_0.aarch64.rpm SHA-256: b90e6d11d9372c48ab779a5a607158ca218657aa70e2f0828aa879580b3cc790
postgresql-upgrade-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: 199abddd1171b51054d1ad99ecb870ac4ae6c96327b5726ee190b08f92328a8d
postgresql-upgrade-devel-debuginfo-13.23-1.el9_0.aarch64.rpm SHA-256: abfa9c61f92493917df8bddf7497521bd083755602c13cfce729c0664f99fa66

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0

SRPM
postgresql-13.23-1.el9_0.src.rpm SHA-256: 7fe586c10d3256c4e84f7c28761c0860b7cfa683a7be79b74a426643590b575b
s390x
postgresql-13.23-1.el9_0.s390x.rpm SHA-256: 848d1150b1e50449c07aae90586b8842354c43dde0e3ef7bc060cf4df5797f81
postgresql-contrib-13.23-1.el9_0.s390x.rpm SHA-256: 1b1a61811e24504f6096f8404d49c235698e700959d4366791d885583a2041fd
postgresql-contrib-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: 6c2e21ae4701afa0ad63bbdb1d3518b07c37cb6047de0fdd6818f8b6aa265769
postgresql-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: 26e56443fa9933d3c66bea82a28ea21abcb625aad3d95a7245dbd503ba2319f4
postgresql-debugsource-13.23-1.el9_0.s390x.rpm SHA-256: c1b157794427e10c8fc7fa05ea8502eb9167a88cb975ee06facb8532ddcbfa9a
postgresql-docs-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: 177d052e6704685a2c69a442ea6c236d9e47e2be32c93c3f0951f37c4dc8a8be
postgresql-plperl-13.23-1.el9_0.s390x.rpm SHA-256: a71480e3dd4bf13a4853c40fd7f0f986238772843125a8ea3fa2735871a7cd45
postgresql-plperl-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: b069980a16757b93ab744a75d54e6855204d21ea30d5567dee0a78db7f58119a
postgresql-plpython3-13.23-1.el9_0.s390x.rpm SHA-256: a31566837a44e046e21e111f4cf5548a4ce5c664f9b9a9937681195bad359876
postgresql-plpython3-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: 9be7f7dde351bb36d57a3ce9bf9a43cfb67753f1b3a52a4f9deea94a3212481d
postgresql-pltcl-13.23-1.el9_0.s390x.rpm SHA-256: f4ead3172fdbc7d418d3980d8092f66c1f3e903397e1d4499044e9925933ebcb
postgresql-pltcl-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: f6645d90d7e481232e3c0bafb6ab2cfb56f305df1503e1b88f83f2b032734e38
postgresql-private-libs-13.23-1.el9_0.s390x.rpm SHA-256: 8d567de6ddd2092d3233caa9e0027170943a93009349635d38d73881636bcce5
postgresql-private-libs-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: 580f40e07ce0ee20fcf26627173c17ed0568c424cf3fafc72fafd3be459c1d13
postgresql-server-13.23-1.el9_0.s390x.rpm SHA-256: 32137f90e5aa39ad9684d2b1e0e02f1cc0f4be20971f271e870641ab65df2cb1
postgresql-server-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: 51bb888c7d3b31f7260c089ed9db79d3661bbc3d14233d181a4fc06ebc18c86f
postgresql-server-devel-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: e7157886a574f670ac6d5daaa69809c8df396ff70f200718d19db188837a3424
postgresql-test-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: 55ce96f3d47b5711d2d51b44e36d736f12688c4cfe2f4e5ed89259f0edf32024
postgresql-upgrade-13.23-1.el9_0.s390x.rpm SHA-256: 69743d235762db1c5b7a55a3d8d129ea477d89510e395aa15892479821452f3a
postgresql-upgrade-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: 361a7cd8d699542ee4242e2c56dcef326aceb01187a1921fca3c7580d63abf37
postgresql-upgrade-devel-debuginfo-13.23-1.el9_0.s390x.rpm SHA-256: f14fcad6879370727d074a1620f84af9568d76e9e6f3b5563c52d375aaeaf89f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.