SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgis-utilsUpgrade pgvectorUpgrade postgresql-test-rpm-macrosUpgrade postgis-clientUpgrade postgresql-private-develUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgisUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-plpython3Upgrade postgis-docsUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-testUpgrade postgis-upgradeUpgrade postgresql-private-libsUpgrade postgresql-server | Oct 11, 2026 | Sep 16, 2026 |
| Alpine Linux | — | Upgrade postgresql17Upgrade postgresql18 | May 15, 2026 | May 14, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql17-testUpgrade postgresql18-private-develUpgrade postgresql18-serverUpgrade postgresql17-test-debuginfoUpgrade postgresql17-docsUpgrade postgresql18-pltclUpgrade postgresql17-plpython3Upgrade postgresql17-upgrade-debuginfoUpgrade postgresql17-contribUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql17-llvmjitUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql17-docs-debuginfoUpgrade postgresql17-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql17Upgrade postgresql18-docs-debuginfoUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-server-debuginfoUpgrade postgresql17-staticUpgrade postgresql17-serverUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-plpython3Upgrade postgresql18-pltcl-debuginfoUpgrade postgresql17-server-debuginfoUpgrade postgresql17-plperl-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-docsUpgrade postgresql18-contribUpgrade postgresql17-private-libsUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql17-contrib-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-plperlUpgrade postgresql17-upgrade-develUpgrade postgresql17-private-develUpgrade postgresql17-pltclUpgrade postgresql17-server-develUpgrade postgresql18-test-debuginfoUpgrade postgresql18-testUpgrade postgresql18-private-libsUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-debugsourceUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql17-plperlUpgrade postgresql18-staticUpgrade postgresql18Upgrade postgresql17-upgradeUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql17-test-rpm-macrosUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql17-debugsourceUpgrade postgresql18-llvmjit | Jun 9, 2026 | May 14, 2026 |
| Debian | — | Upgrade postgresql-17 | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade postgresql16-serverUpgrade postgresql18-clientUpgrade postgresql18-serverUpgrade postgresql17-serverUpgrade postgresql17-clientUpgrade postgresql15-serverUpgrade postgresql14-serverUpgrade postgresql14-clientUpgrade postgresql16-clientUpgrade postgresql15-client | May 21, 2026 | May 14, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade postgis-utilsUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql18-server-develUpgrade pgvectorUpgrade postgresql-test-rpm-macrosUpgrade postgis-docsUpgrade postgisUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade postgresql18Upgrade postgresql-private-libsUpgrade postgresql18-serverUpgrade postgresql18-staticUpgrade postgresql18-contribUpgrade postgresql-plperlUpgrade postgresql18-private-libsUpgrade postgresql-plpython3Upgrade postgresql18-plperlUpgrade postgresql18-docsUpgrade postgresql18-private-develUpgrade postgresql-private-develUpgrade postgresql18-test-rpm-macrosUpgrade pgauditUpgrade postgresql18-plpython3Upgrade postgresql18-upgradeUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgis-upgradeUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql18-upgrade-develUpgrade postgresql-testUpgrade postgis-clientUpgrade pg_repackUpgrade postgresql18-test | Oct 22, 2026 | May 14, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.4Upgrade to PostgreSQL version 17.10 | May 14, 2026 | May 14, 2026 |
| Redhat_linux | — | Upgrade pgvectorUpgrade postgresql-serverUpgrade postgresql-debugsourceUpgrade postgresql18-testUpgrade postgis-client-debuginfoUpgrade pg_repackUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql18-staticUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-test-debuginfoUpgrade pg_repack-debuginfoUpgrade postgis-utilsUpgrade postgresql18-test-rpm-macrosUpgrade postgresql-test-rpm-macrosUpgrade postgresql-test-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-plpython3Upgrade postgis-upgradeUpgrade postgis-upgrade-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-private-libsUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-server-develUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgresqlUpgrade postgresql18-contribUpgrade postgresql18-contrib-debuginfoUpgrade postgis-debugsourceUpgrade postgres-decoderbufsUpgrade postgis-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql18-docsUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-debuginfoUpgrade postgis-docsUpgrade postgresql18-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgis-clientUpgrade pgvector-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql18-serverUpgrade postgresql18-plperlUpgrade postgresql18-private-libsUpgrade pgauditUpgrade postgresql-private-libs-debuginfoUpgrade postgisUpgrade postgresql18-debugsourceUpgrade postgresql18Upgrade postgresql-contrib-debuginfoUpgrade postgresql-docsUpgrade postgres-decoderbufs-debuginfo | Sep 16, 2026 | May 14, 2026 |
| Rocky_linux | — | Upgrade postgresql-docs-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-server-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-testUpgrade postgres-decoderbufs-debugsourceUpgrade pgvector-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgis-utilsUpgrade postgis-docsUpgrade postgresql-contrib-debuginfoUpgrade postgis-upgradeUpgrade pgaudit-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-server-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-private-libsUpgrade postgisUpgrade postgresql-serverUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-plperl-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-test-debuginfoUpgrade pgvectorUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-staticUpgrade postgis-debugsourceUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgis-clientUpgrade postgres-decoderbufsUpgrade pg_repackUpgrade postgresql-private-develUpgrade postgis-debuginfoUpgrade postgresql-upgrade-debuginfo | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-17Upgrade postgresql-18Upgrade postgresql-14 | May 25, 2026 | May 21, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub