Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
PostgreSQL 15 Security Update: Potential Data Exposure
published 9 months ago
Summary
A security update is available for PostgreSQL 15. It fixes a vulnerability that could allow an attacker to access sensitive data. Update your PostgreSQL installation to the latest version to ensure your data remains secure.
What to do
- Update redhat pg_repack to version 0:1.4.8-2.module+el9.5.0+22224+f5585c78.
- Update redhat pg_repack-debuginfo to version 0:1.4.8-2.module+el9.5.0+22224+f5585c78.
- Update redhat pg_repack-debugsource to version 0:1.4.8-2.module+el9.5.0+22224+f5585c78.
- Update redhat pgaudit to version 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60.
- Update redhat pgaudit-debuginfo to version 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60.
- Update redhat pgaudit-debugsource to version 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60.
- Update redhat postgres-decoderbufs to version 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.
- Update redhat postgres-decoderbufs-debuginfo to version 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.
- Update redhat postgres-decoderbufs-debugsource to version 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.
- Update redhat postgresql to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-contrib to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-contrib-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-debugsource to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-docs to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-docs-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-plperl to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-plperl-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-plpython3 to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-plpython3-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-pltcl to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-pltcl-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-private-devel to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-private-libs to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-private-libs-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-server to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-server-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-server-devel to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-server-devel-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-static to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-test to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-test-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-test-rpm-macros to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-upgrade to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-upgrade-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-upgrade-devel to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
- Update redhat postgresql-upgrade-devel-debuginfo to version 0:15.15-2.module+el9.7.0+23785+f55bffc9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::appstream | redhat | pg_repack |
< 0:1.4.8-2.module+el9.5.0+22224+f5585c78 Fix: upgrade to 0:1.4.8-2.module+el9.5.0+22224+f5585c78
|
| Red Hat:enterprise_linux:9::appstream | redhat | pg_repack-debuginfo |
< 0:1.4.8-2.module+el9.5.0+22224+f5585c78 Fix: upgrade to 0:1.4.8-2.module+el9.5.0+22224+f5585c78
|
| Red Hat:enterprise_linux:9::appstream | redhat | pg_repack-debugsource |
< 0:1.4.8-2.module+el9.5.0+22224+f5585c78 Fix: upgrade to 0:1.4.8-2.module+el9.5.0+22224+f5585c78
|
| Red Hat:enterprise_linux:9::appstream | redhat | pgaudit |
< 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60 Fix: upgrade to 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
|
| Red Hat:enterprise_linux:9::appstream | redhat | pgaudit-debuginfo |
< 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60 Fix: upgrade to 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
|
| Red Hat:enterprise_linux:9::appstream | redhat | pgaudit-debugsource |
< 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60 Fix: upgrade to 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgres-decoderbufs |
< 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 Fix: upgrade to 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgres-decoderbufs-debuginfo |
< 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 Fix: upgrade to 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgres-decoderbufs-debugsource |
< 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 Fix: upgrade to 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-contrib |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-contrib-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-debugsource |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-docs |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-docs-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-plperl |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-plperl-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-plpython3 |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-plpython3-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-pltcl |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-pltcl-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-private-devel |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-private-libs |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-private-libs-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-server |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-server-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-server-devel |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-server-devel-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-static |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-test |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-test-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-test-rpm-macros |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-upgrade |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-upgrade-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-upgrade-devel |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
| Red Hat:enterprise_linux:9::appstream | redhat | postgresql-upgrade-devel-debuginfo |
< 0:15.15-2.module+el9.7.0+23785+f55bffc9 Fix: upgrade to 0:15.15-2.module+el9.7.0+23785+f55bffc9
|
Original advisory text
Red Hat Security Advisory: postgresql:15 security update
References
- https://access.redhat.com/errata/RHSA-2026:0492 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2414825 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2414826 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0492.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-12817 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-12817 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-12817 Vendor Advisory
- https://www.postgresql.org/support/security/CVE-2025-12817/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-12818 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-12818 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-12818 Vendor Advisory
- https://www.postgresql.org/support/security/CVE-2025-12818/ Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published14 Jan 2026
Updated19 Apr 2026
First seen19 Apr 2026
Sources
RHSA-2026:0492 · OSV
Track software like this
Free during beta