Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-upgradeUpgrade postgisUpgrade postgres-decoderbufsUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade pg_repackUpgrade postgis-clientUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade pgvectorUpgrade postgis-utilsUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgis-docsUpgrade postgresql-private-libsUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade postgis-upgrade | Oct 27, 2026 | Jun 16, 2026 |
| Alpine Linux | — | Upgrade postgresql18 | May 15, 2026 | May 14, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-test-debuginfoUpgrade postgresql18-staticUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-testUpgrade postgresql18-plperlUpgrade postgresql18-private-develUpgrade postgresql18-upgrade-develUpgrade postgresql18-server-debuginfoUpgrade postgresql18-plpython3Upgrade postgresql18-pltclUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-contribUpgrade postgresql18-docsUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-llvmjitUpgrade postgresql18Upgrade postgresql18-contrib-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18-upgradeUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-plperl-debuginfo | Jun 9, 2026 | May 14, 2026 |
| Freebsd | — | Upgrade postgresql17-serverUpgrade postgresql17-clientUpgrade postgresql18-serverUpgrade postgresql16-serverUpgrade postgresql18-clientUpgrade postgresql15-serverUpgrade postgresql15-clientUpgrade postgresql14-clientUpgrade postgresql16-clientUpgrade postgresql14-server | May 21, 2026 | May 14, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade postgresql18-private-libsUpgrade postgresql18-serverUpgrade postgresql18-server-develUpgrade postgresql18-upgrade-develUpgrade postgresql18-upgradeUpgrade postgresql18Upgrade postgresql18-staticUpgrade postgresql18-docsUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-plperlUpgrade postgresql18-private-develUpgrade postgresql18-testUpgrade postgresql18-plpython3Upgrade postgresql18-contrib | Oct 22, 2026 | May 14, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.4 | May 14, 2026 | May 14, 2026 |
| Redhat_linux | — | Upgrade postgresql18-plpython3Upgrade postgresql18-server-develUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql-staticUpgrade pgaudit-debuginfoUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql18-plperlUpgrade pg_repackUpgrade postgresql-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgis-clientUpgrade pgvector-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperlUpgrade postgresql18-upgradeUpgrade postgresql-server-debuginfoUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql18-contribUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade postgresql18-private-libsUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-debugsourceUpgrade postgis-docsUpgrade postgresql-debugsourceUpgrade postgis-utilsUpgrade postgresql-private-libsUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-staticUpgrade postgresql-upgrade-debuginfoUpgrade pgauditUpgrade postgresql18-docsUpgrade postgis-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql18-test-rpm-macrosUpgrade pgaudit-debugsourceUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-plpython3-debuginfoUpgrade postgresql18-test-debuginfoUpgrade pg_repack-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-upgradeUpgrade pg_repack-debugsourceUpgrade postgresql18Upgrade pgvectorUpgrade postgresql18-private-develUpgrade postgis-upgradeUpgrade postgresql-test-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-testUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgisUpgrade postgresql-docs-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contrib-debuginfo | Jul 17, 2026 | May 14, 2026 |
| Ubuntu | — | Upgrade postgresql-17Upgrade postgresql-14Upgrade postgresql-18Upgrade postgresql-16 | May 25, 2026 | May 21, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub