The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgis-upgradeUpgrade postgis-docsUpgrade postgresql-private-develUpgrade postgis-utilsUpgrade postgresql-private-libsUpgrade postgis-clientUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgisUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade pgvectorUpgrade pgaudit | Oct 11, 2026 | Sep 16, 2026 |
| Alpine Linux | — | Upgrade postgresql18Upgrade postgresql16Upgrade postgresql17Upgrade postgresql15 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-upgradeUpgrade postgresql18-staticUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-contribUpgrade postgresql18-private-libsUpgrade postgresql18-plperlUpgrade postgresql18-llvmjitUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-docsUpgrade postgresql18-pltclUpgrade postgresql18-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-server-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18Upgrade postgresql18-plpython3Upgrade postgresql18-upgrade-develUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-testUpgrade postgresql18-debugsourceUpgrade postgresql18-test-debuginfoUpgrade postgresql18-pltcl-debuginfo | Sep 1, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade postgresql14-serverUpgrade postgresql15-serverUpgrade postgresql18-serverUpgrade postgresql17-serverUpgrade postgresql16-server | Aug 17, 2026 | Aug 16, 2026 |
| Oracle_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-upgrade-develUpgrade postgresql18Upgrade postgis-upgradeUpgrade postgisUpgrade postgresql18-testUpgrade postgresql-plpython3Upgrade postgresql18-private-develUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade pgvectorUpgrade postgresql18-server-develUpgrade postgresqlUpgrade postgresql18-serverUpgrade postgresql-staticUpgrade postgresql18-staticUpgrade postgresql18-plpython3Upgrade postgresql18-private-libsUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgis-clientUpgrade postgresql-private-libsUpgrade postgis-docsUpgrade pg_repackUpgrade pgauditUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql18-docsUpgrade postgresql18-upgradeUpgrade postgresql18-plperlUpgrade postgresql18-contribUpgrade postgis-utilsUpgrade postgresql-test-rpm-macros | Oct 22, 2026 | Aug 13, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.6 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgresql18-server-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-testUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-private-develUpgrade postgis-docsUpgrade postgresql-private-libsUpgrade postgresql-contribUpgrade postgis-utilsUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql18-plpython3Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql18-test-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-pltclUpgrade postgis-upgrade-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-debuginfoUpgrade pgvectorUpgrade postgresql18-testUpgrade postgresql-plpython3Upgrade postgresql18-debugsourceUpgrade postgisUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade pgaudit-debugsourceUpgrade postgresql-server-develUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-plperlUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgis-upgradeUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18Upgrade postgresql18-contribUpgrade postgresql-staticUpgrade pgauditUpgrade postgresql18-plperlUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql-debuginfoUpgrade postgres-decoderbufsUpgrade postgis-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-debugsourceUpgrade postgis-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgis-clientUpgrade pg_repackUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-staticUpgrade postgresql-private-develUpgrade postgresql18-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-docsUpgrade postgres-decoderbufs-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql18-debuginfo | Aug 27, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgresql-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade pgvector-debugsourceUpgrade postgis-utilsUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgis-upgradeUpgrade pgvector-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsourceUpgrade postgisUpgrade postgresql-pltcl-debuginfoUpgrade pgvectorUpgrade postgresql-server-devel-debuginfoUpgrade postgis-docsUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-server-develUpgrade postgresql-private-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgis-clientUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql-plperl-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-test-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-staticUpgrade pg_repackUpgrade postgresql-serverUpgrade postgis-debugsourceUpgrade pgauditUpgrade postgis-client-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-14Upgrade postgresql-18 | Aug 20, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub