Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
PostgreSQL 13: Remote Attackers Can Access Sensitive Data
published 10 months ago
Summary
A security update for PostgreSQL 13 is available to fix a vulnerability that could allow an attacker to access sensitive data. This update is recommended for all users of PostgreSQL 13 to protect against unauthorized data access.
What to do
- Update redhat pgaudit to version 0:1.5.0-1.module+el8.4.0+8873+b821c30a.
- Update redhat pgaudit-debuginfo to version 0:1.5.0-1.module+el8.4.0+8873+b821c30a.
- Update redhat pgaudit-debugsource to version 0:1.5.0-1.module+el8.4.0+8873+b821c30a.
- Update redhat postgres-decoderbufs to version 0:0.10.0-2.module+el8.4.0+8873+b821c30a.
- Update redhat postgres-decoderbufs-debuginfo to version 0:0.10.0-2.module+el8.4.0+8873+b821c30a.
- Update redhat postgres-decoderbufs-debugsource to version 0:0.10.0-2.module+el8.4.0+8873+b821c30a.
- Update redhat postgresql to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-contrib to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-contrib-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-debugsource to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-docs to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-docs-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-plperl to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-plperl-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-plpython3 to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-plpython3-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-pltcl to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-pltcl-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-server to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-server-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-server-devel to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-server-devel-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-static to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-test to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-test-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-test-rpm-macros to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-upgrade to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-upgrade-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-upgrade-devel to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
- Update redhat postgresql-upgrade-devel-debuginfo to version 0:13.23-1.module+el8.4.0+23703+6d959a24.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_aus:8.4::appstream | redhat | pgaudit |
< 0:1.5.0-1.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:1.5.0-1.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_aus:8.4::appstream | redhat | pgaudit-debuginfo |
< 0:1.5.0-1.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:1.5.0-1.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_aus:8.4::appstream | redhat | pgaudit-debugsource |
< 0:1.5.0-1.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:1.5.0-1.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgres-decoderbufs |
< 0:0.10.0-2.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:0.10.0-2.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgres-decoderbufs-debuginfo |
< 0:0.10.0-2.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:0.10.0-2.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgres-decoderbufs-debugsource |
< 0:0.10.0-2.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:0.10.0-2.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-contrib |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-contrib-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-debugsource |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-docs |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-docs-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-plperl |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-plperl-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-plpython3 |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-plpython3-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-pltcl |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-pltcl-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-server |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-server-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-server-devel |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-server-devel-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-static |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-test |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-test-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-test-rpm-macros |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-upgrade |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-upgrade-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-upgrade-devel |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_aus:8.4::appstream | redhat | postgresql-upgrade-devel-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | pgaudit |
< 0:1.5.0-1.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:1.5.0-1.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | pgaudit-debuginfo |
< 0:1.5.0-1.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:1.5.0-1.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | pgaudit-debugsource |
< 0:1.5.0-1.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:1.5.0-1.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgres-decoderbufs |
< 0:0.10.0-2.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:0.10.0-2.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgres-decoderbufs-debuginfo |
< 0:0.10.0-2.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:0.10.0-2.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgres-decoderbufs-debugsource |
< 0:0.10.0-2.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:0.10.0-2.module+el8.4.0+8873+b821c30a
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-contrib |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-contrib-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-debugsource |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-docs |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-docs-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-plperl |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-plperl-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-plpython3 |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-plpython3-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-pltcl |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-pltcl-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
Showing 50 of 62. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-server |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-server-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-server-devel |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-server-devel-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-static |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-test |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-test-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-test-rpm-macros |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-upgrade |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-upgrade-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-upgrade-devel |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
| Red Hat:rhel_eus_long_life:8.4::appstream | redhat | postgresql-upgrade-devel-debuginfo |
< 0:13.23-1.module+el8.4.0+23703+6d959a24 Fix: upgrade to 0:13.23-1.module+el8.4.0+23703+6d959a24
|
Original advisory text
Red Hat Security Advisory: postgresql:13 security update
References
- https://access.redhat.com/errata/RHSA-2026:0265 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2414825 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2414826 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0265.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-12817 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-12817 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-12817 Vendor Advisory
- https://www.postgresql.org/support/security/CVE-2025-12817/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-12818 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-12818 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-12818 Vendor Advisory
- https://www.postgresql.org/support/security/CVE-2025-12818/ Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published8 Jan 2026
Updated19 Apr 2026
First seen19 Apr 2026
Sources
RHSA-2026:0265 · OSV
Track software like this
Free during beta