The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-private-libsUpgrade pg_repackUpgrade postgis-utilsUpgrade postgis-upgradeUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgis-clientUpgrade postgresql-private-develUpgrade postgis-docsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgisUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade pgvectorUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-upgrade-devel | Oct 11, 2026 | Sep 16, 2026 |
| Alpine Linux | — | Upgrade postgresql17Upgrade postgresql15Upgrade postgresql16Upgrade postgresql18 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-llvmjitUpgrade postgresql18-plperlUpgrade postgresql18-private-libsUpgrade postgresql18-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-pltclUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-plpython3Upgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18Upgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql18-testUpgrade postgresql18-staticUpgrade postgresql18-contribUpgrade postgresql18-docsUpgrade postgresql18-server-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-upgrade | Sep 1, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade postgresql17-serverUpgrade postgresql18-serverUpgrade postgresql16-serverUpgrade postgresql14-serverUpgrade postgresql15-server | Aug 17, 2026 | Aug 16, 2026 |
| Oracle_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgresql18-docsUpgrade postgis-docsUpgrade postgresql-private-libsUpgrade postgresql18-staticUpgrade postgis-clientUpgrade postgresql18-contribUpgrade postgresqlUpgrade postgresql18-plpython3Upgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgresql18-private-libsUpgrade pgauditUpgrade postgresql18-serverUpgrade postgresql18-plperlUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgis-utilsUpgrade postgresql18-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade pgvectorUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-upgrade-develUpgrade postgresql18-server-develUpgrade postgresql18-private-develUpgrade postgisUpgrade postgis-upgradeUpgrade postgresql-plpython3Upgrade postgresql18Upgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql18-test | Oct 22, 2026 | Aug 13, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.6 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql18-serverUpgrade postgresql18-private-libsUpgrade postgresql-debugsourceUpgrade postgresql18-contribUpgrade pgauditUpgrade postgresql18-server-debuginfoUpgrade postgis-debugsourceUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade pg_repackUpgrade postgresql18-upgradeUpgrade postgresql-private-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgis-clientUpgrade postgresql-server-devel-debuginfoUpgrade postgresql18-docsUpgrade postgresql-staticUpgrade postgresql18-staticUpgrade postgis-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql18-plperlUpgrade pgvector-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql-plperl-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql-server-develUpgrade postgresql18-debugsourceUpgrade postgresql18-docs-debuginfoUpgrade postgis-upgradeUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-testUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgisUpgrade pgvector-debuginfoUpgrade postgresql18-testUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debugsourceUpgrade pgvectorUpgrade postgresql18-private-develUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql18Upgrade postgresql-pltclUpgrade postgis-upgrade-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql18-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql18-test-debuginfoUpgrade postgis-client-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-plperlUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql-contribUpgrade postgresql18-test-rpm-macrosUpgrade postgis-docsUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-private-libsUpgrade postgis-utilsUpgrade postgresql18-server-develUpgrade postgresql18-private-libs-debuginfo | Aug 27, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade pgvectorUpgrade postgis-upgradeUpgrade pgvector-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debugsourceUpgrade postgisUpgrade postgis-docsUpgrade pgvector-debuginfoUpgrade postgis-utilsUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-server-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-server-develUpgrade postgresql-server-devel-debuginfoUpgrade pg_repackUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresqlUpgrade postgis-clientUpgrade postgresql-plperl-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade pgauditUpgrade postgis-debugsourceUpgrade postgresql-staticUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-contrib | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-18Upgrade postgresql-14 | Aug 20, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub