ALAS2023-2025-1313

References: CVE-2025-12817  CVE-2025-12818 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected. (CVE-2025-12817)

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected. (CVE-2025-12818)

Issue Correction:
Run dnf update postgresql15 --releasever 2023.9.20251208 or dnf update --advisory ALAS2023-2025-1313 --releasever 2023.9.20251208 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    postgresql15-upgrade-devel-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-plperl-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-docs-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-plperl-15.15-1.amzn2023.0.1.aarch64
    postgresql15-static-15.15-1.amzn2023.0.1.aarch64
    postgresql15-private-libs-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-private-devel-15.15-1.amzn2023.0.1.aarch64
    postgresql15-plpython3-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-pltcl-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-llvmjit-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-contrib-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-private-libs-15.15-1.amzn2023.0.1.aarch64
    postgresql15-server-devel-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-contrib-15.15-1.amzn2023.0.1.aarch64
    postgresql15-test-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-pltcl-15.15-1.amzn2023.0.1.aarch64
    postgresql15-plpython3-15.15-1.amzn2023.0.1.aarch64
    postgresql15-15.15-1.amzn2023.0.1.aarch64
    postgresql15-upgrade-15.15-1.amzn2023.0.1.aarch64
    postgresql15-server-devel-15.15-1.amzn2023.0.1.aarch64
    postgresql15-upgrade-devel-15.15-1.amzn2023.0.1.aarch64
    postgresql15-server-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-docs-15.15-1.amzn2023.0.1.aarch64
    postgresql15-llvmjit-15.15-1.amzn2023.0.1.aarch64
    postgresql15-upgrade-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-debuginfo-15.15-1.amzn2023.0.1.aarch64
    postgresql15-test-15.15-1.amzn2023.0.1.aarch64
    postgresql15-server-15.15-1.amzn2023.0.1.aarch64
    postgresql15-debugsource-15.15-1.amzn2023.0.1.aarch64

noarch:
    postgresql15-test-rpm-macros-15.15-1.amzn2023.0.1.noarch

src:
    postgresql15-15.15-1.amzn2023.0.1.src

x86_64:
    postgresql15-private-libs-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-test-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-server-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-test-15.15-1.amzn2023.0.1.x86_64
    postgresql15-private-libs-15.15-1.amzn2023.0.1.x86_64
    postgresql15-plpython3-15.15-1.amzn2023.0.1.x86_64
    postgresql15-plperl-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-static-15.15-1.amzn2023.0.1.x86_64
    postgresql15-private-devel-15.15-1.amzn2023.0.1.x86_64
    postgresql15-15.15-1.amzn2023.0.1.x86_64
    postgresql15-upgrade-devel-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-contrib-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-llvmjit-15.15-1.amzn2023.0.1.x86_64
    postgresql15-llvmjit-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-server-devel-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-docs-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-pltcl-15.15-1.amzn2023.0.1.x86_64
    postgresql15-pltcl-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-upgrade-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-plpython3-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-plperl-15.15-1.amzn2023.0.1.x86_64
    postgresql15-docs-15.15-1.amzn2023.0.1.x86_64
    postgresql15-server-devel-15.15-1.amzn2023.0.1.x86_64
    postgresql15-upgrade-devel-15.15-1.amzn2023.0.1.x86_64
    postgresql15-debuginfo-15.15-1.amzn2023.0.1.x86_64
    postgresql15-contrib-15.15-1.amzn2023.0.1.x86_64
    postgresql15-server-15.15-1.amzn2023.0.1.x86_64
    postgresql15-upgrade-15.15-1.amzn2023.0.1.x86_64
    postgresql15-debugsource-15.15-1.amzn2023.0.1.x86_64