HCE2-SA-2026-0027 Moderate HCE 2.0 Security Fix(es): Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected. (CVE-2025-12817) Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected. (CVE-2025-12818) HCE 2.0 postgresql-13.23-1.hce2.x86_64.rpm postgresql-contrib-13.23-1.hce2.x86_64.rpm postgresql-docs-13.23-1.hce2.x86_64.rpm postgresql-llvmjit-13.23-1.hce2.x86_64.rpm postgresql-plperl-13.23-1.hce2.x86_64.rpm postgresql-plpython3-13.23-1.hce2.x86_64.rpm postgresql-pltcl-13.23-1.hce2.x86_64.rpm postgresql-private-devel-13.23-1.hce2.x86_64.rpm postgresql-private-libs-13.23-1.hce2.x86_64.rpm postgresql-server-13.23-1.hce2.x86_64.rpm postgresql-server-devel-13.23-1.hce2.x86_64.rpm postgresql-static-13.23-1.hce2.x86_64.rpm postgresql-test-13.23-1.hce2.x86_64.rpm postgresql-test-rpm-macros-13.23-1.hce2.noarch.rpm postgresql-13.23-1.hce2.aarch64.rpm postgresql-contrib-13.23-1.hce2.aarch64.rpm postgresql-docs-13.23-1.hce2.aarch64.rpm postgresql-llvmjit-13.23-1.hce2.aarch64.rpm postgresql-plperl-13.23-1.hce2.aarch64.rpm postgresql-plpython3-13.23-1.hce2.aarch64.rpm postgresql-pltcl-13.23-1.hce2.aarch64.rpm postgresql-private-devel-13.23-1.hce2.aarch64.rpm postgresql-private-libs-13.23-1.hce2.aarch64.rpm postgresql-server-13.23-1.hce2.aarch64.rpm postgresql-server-devel-13.23-1.hce2.aarch64.rpm postgresql-static-13.23-1.hce2.aarch64.rpm postgresql-test-13.23-1.hce2.aarch64.rpm