PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this data is consulted during the query planning process. Prior to this release, a user could craft a leaky operator that bypassed view access control lists (ACLs) and bypassed row security policies in partitioning or table inheritance hierarchies. Reachable statistics data notably included histograms and most-common-values lists. CVE-2017-7484 and CVE-2019-10130 intended to close this class of vulnerability, but this gap remained. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgresql-testUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresqlUpgrade pgvectorUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contrib | Oct 27, 2026 | Aug 28, 2025 |
| Alpine Linux | — | Upgrade postgresql16Upgrade postgresql15Upgrade postgresql17 | Aug 18, 2025 | Aug 14, 2025 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade postgresql-llvmjitUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-upgrade | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql15-server-devel-debuginfoUpgrade postgresql17-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-test-debuginfoUpgrade postgresql17-upgrade-develUpgrade postgresql17-contrib-debuginfoUpgrade postgresql15-serverUpgrade postgresql16-testUpgrade postgresql16-contrib-debuginfoUpgrade postgresql17-contribUpgrade postgresql15-debugsourceUpgrade postgresql15-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql16-serverUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql17-testUpgrade postgresql16-staticUpgrade postgresql17-plpython3Upgrade postgresql16-private-libs-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql16-upgrade-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql17Upgrade postgresql17-docs-debuginfoUpgrade postgresql16-contribUpgrade postgresql16-test-rpm-macrosUpgrade postgresql17-llvmjitUpgrade postgresql17-docsUpgrade postgresql15-staticUpgrade postgresql16-llvmjit-debuginfoUpgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql16-docsUpgrade postgresql15-contribUpgrade postgresql16-server-develUpgrade postgresql17-staticUpgrade postgresql17-serverUpgrade postgresql15-pltclUpgrade postgresql16-plperlUpgrade postgresql16-private-libsUpgrade postgresql16Upgrade postgresql16-test-debuginfoUpgrade postgresql15-private-develUpgrade postgresql17-debugsourceUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-upgrade-develUpgrade postgresql16-llvmjitUpgrade postgresql17-private-develUpgrade postgresql16-docs-debuginfoUpgrade postgresql15-server-develUpgrade postgresql16-plperl-debuginfoUpgrade postgresql16-debuginfoUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql17-test-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-contrib-debuginfoUpgrade postgresql16-pltcl-debuginfoUpgrade postgresql17-server-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql17-server-develUpgrade postgresql17-private-libsUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql16-pltclUpgrade postgresql16-debugsourceUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql17-upgradeUpgrade postgresql17-pltclUpgrade postgresql15-testUpgrade postgresql17-plperlUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-plperl-debuginfoUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql17-test-rpm-macrosUpgrade postgresql16-private-develUpgrade postgresql15-docsUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql15Upgrade postgresql17-private-libs-debuginfo | Sep 9, 2025 | Aug 14, 2025 |
| Debian | — | Upgrade postgresql-17Upgrade postgresql-13Upgrade postgresql-15 | Aug 18, 2025 | Aug 18, 2025 |
| Freebsd | — | Upgrade postgresql13-serverUpgrade postgresql14-serverUpgrade postgresql15-serverUpgrade postgresql17-serverUpgrade postgresql16-server | Dec 10, 2025 | Aug 14, 2025 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 14.19Upgrade to PostgreSQL version 15.14Upgrade to PostgreSQL version 13.22Upgrade to PostgreSQL version 17.6Upgrade to PostgreSQL version 16.10 | Aug 15, 2025 | Aug 14, 2025 |
| Redhat_linux | — | Upgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgvector-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade pgvectorUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-develUpgrade pg_repack-debuginfoUpgrade postgresql-private-libsUpgrade pg_repack-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoNo solution existsUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-plperl-debuginfoUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresql-testUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-test-debuginfo | Nov 14, 2025 | Aug 14, 2025 |
| Suse | — | Upgrade postgresql14-llvmjitUpgrade postgresql15-llvmjit-develUpgrade postgresql13-llvmjitUpgrade postgresql13-develUpgrade postgresql16-testUpgrade postgresql14-serverUpgrade postgresql17Upgrade libpq5-32bitUpgrade postgresql13-serverUpgrade postgresql16-serverUpgrade libpq5Upgrade postgresql14-plperlUpgrade postgresql17-testUpgrade postgresql15Upgrade postgresql15-llvmjitUpgrade postgresql14-develUpgrade postgresql14-plpythonUpgrade postgresql15-contribUpgrade postgresql17-plpythonUpgrade postgresql14-contribUpgrade libecpg6-32bitUpgrade postgresql13-pltclUpgrade postgresql15-plpythonUpgrade postgresql17-pltclUpgrade postgresql17-serverUpgrade postgresql13Upgrade postgresql16-docsUpgrade postgresql13-docsUpgrade postgresql17-llvmjitUpgrade postgresql13-testUpgrade postgresql14-llvmjit-develUpgrade postgresql13-llvmjit-develUpgrade postgresql13-plpythonUpgrade postgresql16-plperlUpgrade postgresql17-develUpgrade postgresql17-llvmjit-develUpgrade postgresql15-pltclUpgrade postgresql17-docsUpgrade postgresql16-llvmjit-develUpgrade postgresql13-plperlUpgrade postgresql13-contribUpgrade postgresql15-testUpgrade postgresql14-docsUpgrade libecpg6Upgrade postgresql15-docsUpgrade postgresql14Upgrade postgresql16-server-develUpgrade postgresql14-server-develUpgrade postgresql17-contribUpgrade postgresql16-llvmjitUpgrade postgresql13-server-develUpgrade postgresql15-develUpgrade postgresql14-testUpgrade postgresql17-server-develUpgrade postgresql17-plperlUpgrade postgresql16-plpythonUpgrade postgresql16Upgrade postgresql16-contribUpgrade postgresql16-pltclUpgrade postgresql15-server-develUpgrade postgresql15-plperlUpgrade postgresql15-serverUpgrade postgresql14-pltclUpgrade postgresql16-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade postgresql-17Upgrade postgresql-14Upgrade postgresql-client-17Upgrade postgresql-16Upgrade postgresql-client-14Upgrade postgresql-client-16 | Sep 9, 2025 | Aug 14, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 22, 2025 | Aug 14, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub