Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgis-docsUpgrade postgresql-private-libsUpgrade postgresql18-private-libsUpgrade pgauditUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql18-staticUpgrade postgresql18-plpython3Upgrade postgresql18-private-develUpgrade postgis-utilsUpgrade postgresql18Upgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql18-contribUpgrade postgresql18-upgradeUpgrade postgresql18-test-rpm-macrosUpgrade postgresqlUpgrade postgresql18-testUpgrade postgresql18-upgrade-develUpgrade postgisUpgrade postgresql18-plperlUpgrade postgresql-upgradeUpgrade postgresql18-docsUpgrade postgresql-serverUpgrade pgvectorUpgrade postgresql18-serverUpgrade postgresql-pltclUpgrade postgis-upgradeUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade pg_repackUpgrade postgis-clientUpgrade postgresql-test-rpm-macrosUpgrade postgresql18-server-devel | Oct 11, 2026 | Sep 16, 2026 |
| Alpine Linux | — | Upgrade postgresql16Upgrade postgresql18Upgrade postgresql15Upgrade postgresql17 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-upgrade-develUpgrade postgresql18-docs-debuginfoUpgrade postgresql18Upgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-contribUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-pltclUpgrade postgresql18-debugsourceUpgrade postgresql18-upgradeUpgrade postgresql18-docsUpgrade postgresql18-private-libsUpgrade postgresql18-serverUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-private-develUpgrade postgresql18-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-testUpgrade postgresql18-test-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-plperlUpgrade postgresql18-llvmjitUpgrade postgresql18-staticUpgrade postgresql18-plpython3 | Sep 1, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade postgresql14-serverUpgrade postgresql16-serverUpgrade postgresql18-serverUpgrade postgresql15-serverUpgrade postgresql17-server | Aug 17, 2026 | Aug 16, 2026 |
| Oracle_linux | — | Upgrade postgresql18-plperlUpgrade postgresql18-testUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql18-private-libsUpgrade postgresql-server-develUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql18-staticUpgrade postgis-utilsUpgrade postgresql18-server-develUpgrade postgresql-testUpgrade postgresql18-upgradeUpgrade postgis-docsUpgrade postgis-clientUpgrade postgresql-staticUpgrade postgresql18Upgrade postgresql18-test-rpm-macrosUpgrade postgresql-private-develUpgrade postgresql18-contribUpgrade postgresql18-plpython3Upgrade postgresql-private-libsUpgrade postgisUpgrade postgis-upgradeUpgrade pgvectorUpgrade postgresql18-serverUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql18-private-develUpgrade postgresql18-docsUpgrade postgresql18-upgrade-develUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgresql-test-rpm-macros | Oct 22, 2026 | Aug 13, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.6 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgresql-server-devel-debuginfoUpgrade postgresql18-docsUpgrade pgauditUpgrade postgresql18-upgrade-develUpgrade pg_repackUpgrade postgresql18-testUpgrade postgresql-testUpgrade postgresql18-plperlUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql-staticUpgrade postgresql18-server-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18-test-rpm-macrosUpgrade pg_repack-debugsourceUpgrade postgresql18-plpython3Upgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-serverUpgrade postgresql18-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql18-private-develUpgrade postgis-upgradeUpgrade postgis-clientUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-server-develUpgrade postgresql18-docs-debuginfoUpgrade pgvector-debuginfoUpgrade pgvectorUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgis-utilsUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltclUpgrade postgresql18-contribUpgrade postgresql-docs-debuginfoUpgrade postgis-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgis-docsUpgrade postgresql-private-libsUpgrade postgisUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgis-debugsourceUpgrade postgresql-plpython3Upgrade pgaudit-debugsourceUpgrade postgresql-upgradeUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql-debuginfoUpgrade pg_repack-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18Upgrade postgresql18-staticUpgrade postgresql18-debugsourceUpgrade postgres-decoderbufs-debugsource | Aug 31, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgresql-server-develUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repackUpgrade postgresql-plperl-debuginfoUpgrade postgis-upgradeUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgis-utilsUpgrade postgis-upgrade-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade pgvector-debuginfoUpgrade pgvectorUpgrade postgis-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade pgaudit-debugsourceUpgrade postgis-debugsourceUpgrade postgisUpgrade pg_repack-debugsourceUpgrade pgaudit-debuginfoUpgrade postgis-docsUpgrade postgresql-testUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-debugsourceUpgrade postgis-clientUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade pgvector-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-private-devel | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-14Upgrade postgresql-18 | Aug 20, 2026 | Aug 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 22, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub