Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgis-upgradeUpgrade postgresql-plperlUpgrade pgvectorUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgis-clientUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-docsUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgis-utilsUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade pgauditUpgrade postgresql-server-develUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgis-docsUpgrade postgis | Oct 11, 2026 | Sep 16, 2026 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql17Upgrade postgresql16Upgrade postgresql18 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-testUpgrade postgresql18-plpython3Upgrade postgresql18-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-staticUpgrade postgresql18-llvmjitUpgrade postgresql18-plperlUpgrade postgresql18-server-debuginfoUpgrade postgresql18-contribUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-private-libsUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18Upgrade postgresql18-pltclUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-upgradeUpgrade postgresql18-serverUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-docs | Sep 1, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade postgresql16-serverUpgrade postgresql18-serverUpgrade postgresql14-serverUpgrade postgresql15-serverUpgrade postgresql17-server | Aug 17, 2026 | Aug 16, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.6 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgis-utilsUpgrade postgresql18-serverUpgrade postgresql-docs-debuginfoUpgrade postgresql18-staticUpgrade postgresql18-debugsourceUpgrade pgvectorUpgrade postgresql18-contribUpgrade postgresql-debuginfoUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-private-libs-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18Upgrade postgresql-plperlUpgrade postgis-upgrade-debuginfoUpgrade postgis-debugsourceUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-pltclUpgrade postgresql-private-libsUpgrade postgis-docsUpgrade postgresql-contrib-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-upgradeUpgrade postgresql18-test-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgrade-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql-contribUpgrade postgis-client-debuginfoUpgrade postgresql18-server-develUpgrade postgisUpgrade postgis-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-testUpgrade pg_repackUpgrade postgresql18-private-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql-debugsourceUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-plperlUpgrade postgresql-private-develUpgrade postgresql-testUpgrade postgresql-test-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pgauditUpgrade postgresql18-docsUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgis-upgradeUpgrade postgis-clientUpgrade postgresql-serverUpgrade postgresql18-plpython3Upgrade postgresqlUpgrade postgres-decoderbufs | Aug 31, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade pgvectorUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgis-upgrade-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-server-develUpgrade postgis-client-debuginfoUpgrade postgis-upgradeUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfoUpgrade postgresqlUpgrade postgis-debuginfoUpgrade postgresql-contribUpgrade postgis-utilsUpgrade postgis-debugsourceUpgrade pgvector-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-debugsourceUpgrade postgresql-testUpgrade postgis-clientUpgrade postgis-docsUpgrade postgresql-upgradeUpgrade pgauditUpgrade pg_repack-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-test-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade pgaudit-debuginfoUpgrade pg_repack-debugsourceUpgrade postgisUpgrade postgresql-docsUpgrade pgvector-debugsource | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-18Upgrade postgresql-16 | Aug 20, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub