The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-testUpgrade postgis-docsUpgrade postgis-upgradeUpgrade postgresql-private-develUpgrade postgis-clientUpgrade postgres-decoderbufsUpgrade postgisUpgrade pgvectorUpgrade pgauditUpgrade postgresql-upgradeUpgrade pg_repackUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgis-utilsUpgrade postgresql-contrib | Oct 27, 2026 | Jun 16, 2026 |
| Alpine Linux | — | Upgrade postgresql18 | May 15, 2026 | May 14, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-plpython3Upgrade postgresql18-test-rpm-macrosUpgrade postgresql18-test-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-server-develUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-testUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-docsUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-server-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-plperlUpgrade postgresql18-staticUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-pltclUpgrade postgresql18-llvmjitUpgrade postgresql18-contribUpgrade postgresql18 | Jun 9, 2026 | May 14, 2026 |
| Freebsd | — | Upgrade postgresql14-serverUpgrade postgresql16-clientUpgrade postgresql14-clientUpgrade postgresql15-clientUpgrade postgresql15-serverUpgrade postgresql16-serverUpgrade postgresql18-serverUpgrade postgresql17-clientUpgrade postgresql17-serverUpgrade postgresql18-client | May 21, 2026 | May 14, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade postgresql18Upgrade postgresql18-private-develUpgrade postgresql18-plperlUpgrade postgresql18-docsUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-contribUpgrade postgresql18-plpython3Upgrade postgresql18-testUpgrade postgresql18-staticUpgrade postgresql18-private-libsUpgrade postgresql18-upgrade-develUpgrade postgresql18-server-develUpgrade postgresql18-serverUpgrade postgresql18-upgrade | Oct 22, 2026 | May 14, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.4 | May 14, 2026 | May 14, 2026 |
| Redhat_linux | — | Upgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql18-server-develUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-plpython3Upgrade pgaudit-debuginfoUpgrade postgresql-private-develUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql-serverUpgrade pgauditUpgrade postgis-utilsUpgrade postgresql18-debugsourceUpgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql18-docsUpgrade postgis-docsUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-server-develUpgrade postgresql18-server-debuginfoUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql18-plperlUpgrade postgresql18-staticUpgrade postgis-clientUpgrade postgis-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql18-upgradeUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperlUpgrade postgresql18-contribUpgrade postgresql-pltcl-debuginfoUpgrade postgresql18-private-develUpgrade pgvectorUpgrade postgis-upgradeUpgrade postgresql18-test-rpm-macrosUpgrade postgresql-contrib-debuginfoUpgrade postgresql18-testUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade pg_repack-debugsourceUpgrade postgresql18Upgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgisUpgrade pgvector-debugsourceUpgrade postgresql18-debuginfoUpgrade postgresql18-serverUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql-plpython3Upgrade postgis-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-develUpgrade postgis-client-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql-test-debuginfo | Jul 17, 2026 | May 14, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-18Upgrade postgresql-14Upgrade postgresql-17 | May 25, 2026 | May 21, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub