The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-staticUpgrade postgis-docsUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgis-upgradeUpgrade postgresql-plperlUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade postgisUpgrade pgvectorUpgrade postgresql-private-develUpgrade postgis-clientUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgis-utilsUpgrade postgresql-upgradeUpgrade pg_repack | Oct 11, 2026 | Sep 16, 2026 |
| Alpine Linux | — | Upgrade postgresql18Upgrade postgresql17 | May 15, 2026 | May 14, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql17-llvmjitUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql17-docsUpgrade postgresql18-pltclUpgrade postgresql18-upgradeUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql17-test-debuginfoUpgrade postgresql17-serverUpgrade postgresql17-plpython3Upgrade postgresql17-staticUpgrade postgresql18-server-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-serverUpgrade postgresql17-testUpgrade postgresql18-docs-debuginfoUpgrade postgresql17-contribUpgrade postgresql18-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql18-server-develUpgrade postgresql17-docs-debuginfoUpgrade postgresql17-debuginfoUpgrade postgresql17Upgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql17-upgrade-develUpgrade postgresql18-staticUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql17-private-develUpgrade postgresql18-plperlUpgrade postgresql17-plperlUpgrade postgresql17-pltclUpgrade postgresql17-server-develUpgrade postgresql18Upgrade postgresql18-upgrade-develUpgrade postgresql17-contrib-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-debugsourceUpgrade postgresql17-server-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-llvmjitUpgrade postgresql17-plperl-debuginfoUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql17-debugsourceUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-docsUpgrade postgresql18-contribUpgrade postgresql17-test-rpm-macrosUpgrade postgresql17-private-libsUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-testUpgrade postgresql18-test-debuginfoUpgrade postgresql18-plpython3Upgrade postgresql18-private-libsUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql17-upgrade | Jun 9, 2026 | May 14, 2026 |
| Debian | — | Upgrade postgresql-17 | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade postgresql14-clientUpgrade postgresql15-serverUpgrade postgresql16-clientUpgrade postgresql15-clientUpgrade postgresql17-clientUpgrade postgresql14-serverUpgrade postgresql17-serverUpgrade postgresql16-serverUpgrade postgresql18-serverUpgrade postgresql18-client | May 21, 2026 | May 14, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade postgresql18-test-rpm-macrosUpgrade postgresql18-docsUpgrade postgis-upgradeUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql18-upgrade-develUpgrade postgresql-staticUpgrade postgresql18-private-develUpgrade postgresql-private-develUpgrade postgresql-serverUpgrade postgresql18-plpython3Upgrade postgresql18-plperlUpgrade postgis-clientUpgrade pg_repackUpgrade postgresql18-testUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql18-upgradeUpgrade postgresql18-contribUpgrade pgvectorUpgrade postgresql-plpython3Upgrade postgresql18-server-develUpgrade postgresql-plperlUpgrade postgresql18-staticUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql18-private-libsUpgrade postgresql-upgrade-develUpgrade postgis-utilsUpgrade postgresql18-serverUpgrade postgresql-contribUpgrade postgresql18Upgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgis-docsUpgrade postgisUpgrade postgresql-private-libs | Oct 22, 2026 | May 14, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 17.10Upgrade to PostgreSQL version 18.4 | May 14, 2026 | May 14, 2026 |
| Redhat_linux | — | Upgrade pgauditUpgrade postgresql18-upgrade-develUpgrade pgvector-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql18-docsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-serverUpgrade postgis-clientUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgis-debuginfoUpgrade postgres-decoderbufsUpgrade postgis-docsUpgrade postgresql-docsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgis-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql18-plperlUpgrade postgisUpgrade postgresql-upgradeUpgrade postgresql18-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql18Upgrade postgresql18-private-libsUpgrade pg_repack-debugsourceUpgrade postgresql18-upgradeUpgrade postgresql18-upgrade-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql-private-develUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-contribUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql18-server-develUpgrade postgis-upgradeUpgrade postgresql-serverUpgrade postgresql18-testUpgrade postgis-utilsUpgrade postgresql18-private-develUpgrade postgresql18-test-rpm-macrosUpgrade postgresql-testUpgrade pg_repack-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade pgvectorUpgrade pg_repackUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-contribUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresql-plpython3Upgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-pltclUpgrade postgresql18-staticUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docs-debuginfoUpgrade postgresql18-plpython3Upgrade postgresql-server-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-debugsourceUpgrade postgis-client-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql-plperl | Sep 16, 2026 | May 14, 2026 |
| Rocky_linux | — | Upgrade postgis-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade pgaudit-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade pg_repack-debugsourceUpgrade postgresql-private-libsUpgrade postgis-docsUpgrade postgis-utilsUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pgvector-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgisUpgrade postgresql-testUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgis-clientUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgis-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgis-debugsourceUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-private-develUpgrade pg_repackUpgrade postgresql-pltclUpgrade pgvectorUpgrade postgis-client-debuginfoUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgres-decoderbufs-debuginfoUpgrade postgis-upgrade-debuginfo | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-17Upgrade postgresql-16Upgrade postgresql-18 | May 25, 2026 | May 21, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub