The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresqlUpgrade postgis-upgradeUpgrade postgresql-upgradeUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgres-decoderbufsUpgrade postgis-docsUpgrade pgauditUpgrade postgisUpgrade postgresql-testUpgrade postgis-clientUpgrade postgresql-private-libsUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgresql-test-rpm-macrosUpgrade postgis-utilsUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade pgvectorUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-upgrade-devel | Oct 11, 2026 | Sep 15, 2026 |
| Alpine Linux | — | Upgrade postgresql17Upgrade postgresql15Upgrade postgresql16Upgrade postgresql18 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-testUpgrade postgresql-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql16-plpython3Upgrade postgresql17-debuginfoUpgrade postgresql16-test-debuginfoUpgrade postgresql17-serverUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql17-plpython3Upgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql16-plperlUpgrade postgresql16-debugsourceUpgrade postgresql16-upgradeUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-serverUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql17-staticUpgrade postgresql18-upgradeUpgrade postgresql18-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql18-upgrade-develUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql18-server-develUpgrade postgresql16-staticUpgrade postgresql18-serverUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql16-private-libs-debuginfoUpgrade postgresql15-staticUpgrade postgresql16-server-debuginfoUpgrade postgresql16-serverUpgrade postgresql17-docs-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-private-develUpgrade postgresql17-plperl-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql16-llvmjit-debuginfoUpgrade postgresql17Upgrade postgresql17-test-debuginfoUpgrade postgresql16-llvmjitUpgrade postgresql18-docs-debuginfoUpgrade postgresql16-contribUpgrade postgresql16-server-develUpgrade postgresql16-test-rpm-macrosUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql17-llvmjitUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-debuginfoUpgrade postgresql18-plpython3Upgrade postgresql18-private-develUpgrade postgresql17-testUpgrade postgresql16-docsUpgrade postgresql15-test-rpm-macrosUpgrade postgresql18-plperlUpgrade postgresql16-upgrade-develUpgrade postgresql16-docs-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql18-pltclUpgrade postgresql18-contribUpgrade postgresql18-private-libsUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql17-upgradeUpgrade postgresql17-server-develUpgrade postgresql17-server-debuginfoUpgrade postgresql17-private-libsUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-plperlUpgrade postgresql17-docsUpgrade postgresql16-pltcl-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-debugsourceUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-testUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql16-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-pltclUpgrade postgresql15Upgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-llvmjitUpgrade postgresql18Upgrade postgresql16-private-libsUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-testUpgrade postgresql18-staticUpgrade postgresql18-debugsourceUpgrade postgresql17-test-rpm-macrosUpgrade postgresql17-debugsourceUpgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql15-plperlUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql17-contrib-debuginfoUpgrade postgresql16-private-develUpgrade postgresql16-contrib-debuginfoUpgrade postgresql16Upgrade postgresql15-test-debuginfoUpgrade postgresql15-contribUpgrade postgresql17-upgrade-develUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-docsUpgrade postgresql17-private-develUpgrade postgresql17-pltclUpgrade postgresql16-testUpgrade postgresql17-contribUpgrade postgresql16-plperl-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql16-pltclUpgrade postgresql18-server-debuginfoUpgrade postgresql16-upgrade-debuginfo | Sep 1, 2026 | Aug 13, 2026 |
| Debian | — | Upgrade postgresql-17Upgrade postgresql-15 | Aug 16, 2026 | Aug 16, 2026 |
| Freebsd | — | Upgrade postgresql15-serverUpgrade postgresql16-serverUpgrade postgresql17-serverUpgrade postgresql18-serverUpgrade postgresql14-server | Aug 17, 2026 | Aug 16, 2026 |
| Oracle_linux | — | Upgrade postgis-docsUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgis-clientUpgrade postgresql-docsUpgrade postgresql18-testUpgrade postgresql18-contribUpgrade postgisUpgrade postgresql18Upgrade postgresql18-serverUpgrade pgauditUpgrade postgresql18-private-develUpgrade postgresql18-plperlUpgrade postgresql18-docsUpgrade postgresql18-plpython3Upgrade postgresql18-test-rpm-macrosUpgrade postgresql18-upgrade-develUpgrade postgresql18-private-libsUpgrade postgresql-private-develUpgrade postgresql18-upgradeUpgrade postgresql-pltclUpgrade pgvectorUpgrade postgresql18-server-develUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql18-staticUpgrade postgis-utilsUpgrade pg_repackUpgrade postgis-upgradeUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macros | Oct 22, 2026 | Aug 13, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 15.19Upgrade to PostgreSQL version 17.11Upgrade to PostgreSQL version 16.15Upgrade to PostgreSQL version 18.6Upgrade to PostgreSQL version 14.24 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgis-docsUpgrade postgresql-docs-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql-private-develUpgrade postgresql18-plperlUpgrade pgauditUpgrade postgresql16-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-server-develUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-testUpgrade postgresql-private-libsUpgrade postgis-clientUpgrade postgresql16-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql18-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql18-docsUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-upgradeUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18-plpython3Upgrade pg_repackUpgrade postgis-utilsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-serverUpgrade postgresql18Upgrade postgresql18-contribUpgrade postgresql18-staticUpgrade postgresql-testUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-devel-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgis-debugsourceUpgrade postgresql-staticUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-pltclUpgrade pgvector-debugsourceUpgrade postgis-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgis-client-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgis-upgradeUpgrade postgresql-contribUpgrade postgresql18-debuginfoUpgrade postgisUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-server-develUpgrade postgres-decoderbufsUpgrade pgvectorUpgrade postgresql-docsUpgrade postgresql-plpython3Upgrade postgresql18-serverUpgrade postgresql-private-libs-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-test-debuginfoUpgrade pg_repack-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql18-upgrade-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql18-private-devel | Aug 31, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade pgaudit-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-testUpgrade postgis-docsUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-private-libsUpgrade postgresql-upgrade-debuginfoUpgrade postgis-upgradeUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql-private-develUpgrade pg_repack-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debuginfoUpgrade pgvectorUpgrade postgis-debugsourceUpgrade postgis-clientUpgrade pgvector-debugsourceUpgrade postgresql-upgrade-develUpgrade postgis-upgrade-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgisUpgrade postgresql-docs-debuginfoUpgrade postgis-utilsUpgrade postgis-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgauditUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contrib | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-16Upgrade postgresql-18 | Aug 20, 2026 | Aug 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 22, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub