The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade pgvectorUpgrade pgauditUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgis-utilsUpgrade pg_repackUpgrade postgis-clientUpgrade postgresql-private-develUpgrade postgresql-server-develUpgrade postgis-docsUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgis-upgradeUpgrade postgisUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresql-plpython3 | Oct 11, 2026 | Sep 16, 2026 |
| Alpine Linux | — | Upgrade postgresql16Upgrade postgresql15Upgrade postgresql17Upgrade postgresql18 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-plperl-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-testUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-serverUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-plpython3Upgrade postgresql18Upgrade postgresql18-upgrade-develUpgrade postgresql18-staticUpgrade postgresql18-llvmjitUpgrade postgresql18-private-develUpgrade postgresql18-docsUpgrade postgresql18-plperlUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-upgradeUpgrade postgresql18-server-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18-contribUpgrade postgresql18-pltclUpgrade postgresql18-debuginfoUpgrade postgresql18-plpython3-debuginfo | Sep 1, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade postgresql14-serverUpgrade postgresql15-serverUpgrade postgresql18-serverUpgrade postgresql17-serverUpgrade postgresql16-server | Aug 17, 2026 | Aug 16, 2026 |
| Oracle_linux | — | Upgrade postgresql18-plpython3Upgrade postgresql18-staticUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-private-develUpgrade postgresql18-private-libsUpgrade postgis-clientUpgrade postgresql-private-libsUpgrade postgresql-staticUpgrade postgresql18-upgradeUpgrade postgresql18-plperlUpgrade postgis-utilsUpgrade postgresql18-contribUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql18-serverUpgrade postgresql-test-rpm-macrosUpgrade pg_repackUpgrade postgis-docsUpgrade postgresql18-docsUpgrade postgresql18-server-develUpgrade postgresql18-upgrade-develUpgrade postgresql18-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql18-testUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade pgvectorUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-testUpgrade postgresql18-private-develUpgrade postgisUpgrade postgresql18Upgrade postgis-upgrade | Oct 22, 2026 | Aug 13, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.6 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgresql18-private-libs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgrade-debuginfoUpgrade postgresql18-debugsourceUpgrade postgisUpgrade pgvector-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgis-upgradeUpgrade postgresql18Upgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufs-debugsourceUpgrade postgis-client-debuginfoUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgis-docsUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-testUpgrade postgresql18-testUpgrade pgvectorUpgrade postgresql-plperlUpgrade postgresql18-plpython3Upgrade postgresql-test-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-serverUpgrade postgis-utilsUpgrade postgresql18-server-develUpgrade postgresql-private-libsUpgrade postgis-debuginfoUpgrade postgresql-staticUpgrade postgis-clientUpgrade postgresql18-serverUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql18-server-debuginfoUpgrade postgresql18-contribUpgrade pgauditUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql-plperl-debuginfoUpgrade pg_repackUpgrade postgresql18-staticUpgrade postgresql-server-devel-debuginfoUpgrade postgresqlUpgrade postgresql-pltcl-debuginfoUpgrade postgresql18-plperlUpgrade postgis-debugsourceUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-private-develUpgrade postgresql18-docsUpgrade postgresql-private-libs-debuginfoUpgrade postgresql18-debuginfoUpgrade postgres-decoderbufsUpgrade pgvector-debugsourceUpgrade postgresql18-upgrade-develUpgrade postgresql-upgradeUpgrade postgis-upgrade-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql18-private-develUpgrade postgresql18-test-debuginfoUpgrade postgresql18-pltcl-debuginfo | Aug 27, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade pgauditUpgrade postgis-debugsourceUpgrade postgis-upgrade-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repackUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-private-develUpgrade postgresql-serverUpgrade postgis-client-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgis-clientUpgrade postgresqlUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3Upgrade postgis-utilsUpgrade postgis-upgradeUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgisUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgvector-debuginfoUpgrade postgresql-server-develUpgrade postgis-docsUpgrade pgvectorUpgrade pg_repack-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-testUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-debugsource | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-18Upgrade postgresql-14 | Aug 20, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub