Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-serverUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade pg_repackUpgrade postgis-upgradeUpgrade pgvectorUpgrade postgresql-plperlUpgrade postgis-clientUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgis-utilsUpgrade postgisUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresqlUpgrade postgis-docs | Oct 11, 2026 | Sep 16, 2026 |
| Alpine Linux | — | Upgrade postgresql17Upgrade postgresql15Upgrade postgresql16Upgrade postgresql18 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-test-rpm-macrosUpgrade postgresql18-private-develUpgrade postgresql18-test-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-testUpgrade postgresql18-plpython3Upgrade postgresql18-llvmjitUpgrade postgresql18-staticUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-plperlUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-pltclUpgrade postgresql18-server-develUpgrade postgresql18-docsUpgrade postgresql18-upgradeUpgrade postgresql18-debugsourceUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-contribUpgrade postgresql18-upgrade-develUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18Upgrade postgresql18-server-devel-debuginfo | Sep 1, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade postgresql17-serverUpgrade postgresql15-serverUpgrade postgresql14-serverUpgrade postgresql16-serverUpgrade postgresql18-server | Aug 17, 2026 | Aug 16, 2026 |
| Oracle_linux | — | Upgrade postgresql18-private-develUpgrade postgresql18-upgrade-develUpgrade postgisUpgrade postgresql-plpython3Upgrade pgauditUpgrade pgvectorUpgrade postgis-upgradeUpgrade postgresql18-docsUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql18-serverUpgrade postgresql-test-rpm-macrosUpgrade postgresql18-contribUpgrade postgresql-testUpgrade postgresql18-plperlUpgrade postgresql18-staticUpgrade postgresql18-server-develUpgrade postgresql18-testUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql18-upgradeUpgrade postgresql18-private-libsUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgis-clientUpgrade pg_repackUpgrade postgresql18Upgrade postgresql-private-develUpgrade postgresql-private-libsUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-plpython3Upgrade postgis-docsUpgrade postgresql-server-develUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgis-utils | Oct 22, 2026 | Aug 13, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.6 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgresql18-private-libs-debuginfoUpgrade postgresql-plperlUpgrade postgresql18-plperl-debuginfoUpgrade pgvector-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql18-contribUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgis-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgis-docsUpgrade postgis-client-debuginfoUpgrade postgresql-private-libsUpgrade postgresql18-private-libsUpgrade postgis-upgrade-debuginfoUpgrade postgis-utilsUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade pgvectorUpgrade postgresql-private-libs-debuginfoUpgrade postgisUpgrade postgresql18-debugsourceUpgrade postgresql18-docs-debuginfoUpgrade postgresql18Upgrade postgresql18-serverUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade pgaudit-debugsourceUpgrade postgresql18-test-debuginfoUpgrade postgresql-upgradeUpgrade postgresql18-server-develUpgrade postgresql18-staticUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql-plpython3-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgis-upgradeUpgrade pgauditUpgrade postgresql-test-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgis-clientUpgrade postgresql-upgrade-develUpgrade postgresql18-docsUpgrade postgresql-docsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresql18-plperlUpgrade pg_repack-debugsourceUpgrade postgresql18-testUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql18-plpython3Upgrade postgresql-plperl-debuginfoUpgrade pg_repackUpgrade postgresql18-private-develUpgrade postgresql-server | Aug 31, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgis-docsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade pg_repack-debugsourceUpgrade pgaudit-debuginfoUpgrade pgauditUpgrade postgresql-private-libsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-private-develUpgrade pgvector-debugsourceUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debuginfoUpgrade postgisUpgrade postgresql-upgrade-develUpgrade postgis-clientUpgrade postgresql-upgrade-debuginfoUpgrade postgis-utilsUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgis-client-debuginfoUpgrade postgis-upgradeUpgrade postgresql-server-develUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgres-decoderbufs-debugsourceUpgrade postgis-debugsourceUpgrade postgis-upgrade-debuginfoUpgrade postgresql-debuginfoUpgrade pgvectorUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperlUpgrade pg_repackUpgrade pgvector-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-server | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-14Upgrade postgresql-18 | Aug 20, 2026 | Aug 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 22, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub