Description
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PostgreSQL | 18 – < 18.6, 17 – < 17.11, 16 – < 16.15, 15 – < 15.19, < 14.24 | 18.6 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | postgresql-18 | 18.6-1 | — |
| Debian 13 | postgresql-17 | 17.11-0+deb13u1 | — |
| Debian 12 | postgresql-15 | 15.19-0+deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | postgresql-18 | 18.6-0ubuntu0.26.04.1 | USN-8653-1 |
| Ubuntu 24.04 LTS | postgresql-16 | 16.15-0ubuntu0.24.04.1 | USN-8653-1 |
| Ubuntu 22.04 LTS | postgresql-14 | 14.24-0ubuntu0.22.04.1 | USN-8653-1 |
| Ubuntu 20.04 LTS | postgresql-12 | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | postgresql-10 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | postgresql-9.5 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | postgresql-9.3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | postgresql +15 | 16.15-1.el10_2 | RHSA-2026:70186 |
| RHEL 10 | postgresql18 +13 | 18.6-1.el10_2 | RHSA-2026:67280 |
| RHEL 9 | pg_repack | 1.4.8-2.module+el9.8.0+24091+17775505 | RHSA-2026:69914, RHSA-2026:67848, RHSA-2026:67491 |
| RHEL 9 | pgaudit | 1.7.0-1.module+el9.8.0+24091+17775505 | RHSA-2026:69914, RHSA-2026:67848, RHSA-2026:67491 |
| RHEL 9 | pgvector | 0.6.2-2.module+el9.8.0+24090+8f0ee565 | RHSA-2026:67848, RHSA-2026:67491 |
| RHEL 9 | postgis +4 | 3.5.3-6.module+el9.8.0+24839+3a67b9ca | RHSA-2026:67848, RHSA-2026:67491 |
| RHEL 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.8.0+24091+17775505 | RHSA-2026:69914, RHSA-2026:67848, RHSA-2026:67491 |
| RHEL 9 | postgresql +14 | 15.19-1.module+el9.8.0+24800+a95bf172 | RHSA-2026:69914, RHSA-2026:67848, RHSA-2026:67491 |
| RHEL 8 | pg_repack | 1.4.8-1.module+el8.9.0+19797+c4ce5969 | RHSA-2026:69923, RHSA-2026:69876 |
| RHEL 8 | pgaudit | 1.7.0-1.module+el8.9.0+19797+c4ce5969 | RHSA-2026:69923, RHSA-2026:69876 |
| RHEL 8 | postgres-decoderbufs | 1.9.7-1.Final.module+el8.9.0+19797+c4ce5969 | RHSA-2026:69923, RHSA-2026:69876 |
| RHEL 8 | postgresql +14 | 15.19-1.module+el8.10.0+24831+9c841e4e | RHSA-2026:69923, RHSA-2026:69876 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | postgresql +15 | 16.15-1.el10_0 | RHSA-2026:72282 |
| RHEL 9.6 EUS | pg_repack | 1.4.8-2.module+el9.5.0+22224+f5585c78 | RHSA-2026:70559, RHSA-2026:69698 |
| RHEL 9.6 EUS | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2026:70559, RHSA-2026:69698 |
| RHEL 9.6 EUS | pgvector | 0.6.2-2.module+el9.6.0+22979+c3d78d52 | RHSA-2026:70559 |
| RHEL 9.6 EUS | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2026:70559, RHSA-2026:69698 |
| RHEL 9.6 EUS | postgresql +14 | 15.19-1.module+el9.6.0+24906+1a0a7a43 | RHSA-2026:70559, RHSA-2026:69698 |
| RHEL 9.4 E4S | pg_repack | 1.4.8-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2026:70856, RHSA-2026:70762 |
| RHEL 9.4 E4S | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2026:70856, RHSA-2026:70762 |
| RHEL 9.4 E4S | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2026:70856, RHSA-2026:70762 |
| RHEL 9.4 E4S | postgresql +14 | 15.19-1.module+el9.4.0+24899+b7f8fff2 | RHSA-2026:70856, RHSA-2026:70762 |
| RHEL 9.2 E4S | pg_repack | 1.4.8-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2026:70763 |
| RHEL 9.2 E4S | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2026:70763 |
| RHEL 9.2 E4S | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2026:70763 |
| RHEL 9.2 E4S | postgresql +14 | 15.19-1.module+el9.2.0+24900+35767d9a | RHSA-2026:70763 |
| RHEL 8.8 TUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72362, RHSA-2026:70602 |
| RHEL 8.8 TUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72362, RHSA-2026:70602 |
| RHEL 8.8 TUS | postgres-decoderbufs | 0.10.0-2.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72362, RHSA-2026:70602 |
| RHEL 8.8 TUS | postgresql +12 | 12.22-1.module+el8.8.0+24947+3b6f2b4e.6 | RHSA-2026:72362, RHSA-2026:70602 |
| RHEL 8.8 TUS | postgresql-private-libs +1 | 15.19-1.module+el8.8.0+24926+55068be7 | RHSA-2026:70602 |
| RHEL 8.8 E4S | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72362, RHSA-2026:70602 |
| RHEL 8.8 E4S | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72362, RHSA-2026:70602 |
| RHEL 8.8 E4S | postgres-decoderbufs | 0.10.0-2.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72362, RHSA-2026:70602 |
| RHEL 8.8 E4S | postgresql +12 | 12.22-1.module+el8.8.0+24947+3b6f2b4e.6 | RHSA-2026:72362, RHSA-2026:70602 |
| RHEL 8.8 E4S | postgresql-private-libs +1 | 15.19-1.module+el8.8.0+24926+55068be7 | RHSA-2026:70602 |
| RHEL 8.6 EUS Long Life | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72363 |
| RHEL 8.6 EUS Long Life | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72363 |
| RHEL 8.6 EUS Long Life | postgres-decoderbufs | 0.10.0-2.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72363 |
| RHEL 8.6 EUS Long Life | postgresql +12 | 12.22-1.module+el8.6.0+24946+5e4e9c0a.6 | RHSA-2026:72363 |
| RHEL 8.6 AUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72363 |
| RHEL 8.6 AUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72363 |
| RHEL 8.6 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.5.0+11354+78b3c9c5 | RHSA-2026:72363 |
| RHEL 8.6 AUS | postgresql +12 | 12.22-1.module+el8.6.0+24946+5e4e9c0a.6 | RHSA-2026:72363 |
| RHEL 8.4 EUS Long Life | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2026:73912 |
| RHEL 8.4 EUS Long Life | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+11288+c193d6d7 | RHSA-2026:73912 |
| RHEL 8.4 EUS Long Life | postgresql +12 | 12.22-1.module+el8.4.0+24949+926f0b6b.6 | RHSA-2026:73912 |
| RHEL 8.4 AUS | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2026:73912 |
| RHEL 8.4 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+11288+c193d6d7 | RHSA-2026:73912 |
| RHEL 8.4 AUS | postgresql +12 | 12.22-1.module+el8.4.0+24949+926f0b6b.6 | RHSA-2026:73912 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | postgresql +14 | 16.15-1.el10_2 | ALSA-2026:70186 |
| AlmaLinux 10 | postgresql18 +13 | 18.6-1.el10_2 | ALSA-2026:67280 |
| AlmaLinux 9 | pg_repack | 1.4.8-2.module_el9.5.0+119+18833d03 | ALSA-2026:69914, ALSA-2026:67848, ALSA-2026:67491 |
| AlmaLinux 9 | pgaudit | 1.7.0-1.module_el9.3.0+52+21733919 | ALSA-2026:69914, ALSA-2026:67848, ALSA-2026:67491 |
| AlmaLinux 9 | pgvector | 0.6.2-2.module_el9.6.0+167+4e561146 | ALSA-2026:67848, ALSA-2026:67491 |
| AlmaLinux 9 | postgis +4 | 3.5.3-6.module_el9.8.0+311+c39b793b | ALSA-2026:67848, ALSA-2026:67491 |
| AlmaLinux 9 | postgres-decoderbufs | 1.9.7-1.Final.module_el9.3.0+52+21733919 | ALSA-2026:69914, ALSA-2026:67848, ALSA-2026:67491 |
| AlmaLinux 9 | postgresql +14 | 15.19-1.module_el9.8.0+318+764e137c | ALSA-2026:69914, ALSA-2026:67848, ALSA-2026:67491 |
| AlmaLinux 8 | pg_repack | 1.4.8-1.module_el8.9.0+3706+885c732e | ALSA-2026:69923, ALSA-2026:69876 |
| AlmaLinux 8 | pgaudit | 1.7.0-1.module_el8.9.0+3706+885c732e | ALSA-2026:69923, ALSA-2026:69876 |
| AlmaLinux 8 | postgres-decoderbufs | 1.9.7-1.Final.module_el8.9.0+3706+885c732e | ALSA-2026:69923, ALSA-2026:69876 |
| AlmaLinux 8 | postgresql +14 | 15.19-1.module_el8.10.0+4287+eeacefcc | ALSA-2026:69923, ALSA-2026:69876 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | postgresql16 | 16.15-1.el10_2 | RLSA-2026:70186 |
| Rocky Linux 10 | postgresql18 | 18.6-1.el10_2 | RLSA-2026:67280 |
| Rocky Linux 9 | pg_repack | 1.4.8-2.module+el9.7.0+40011+28af63c9 | RLSA-2026:69914, RLSA-2026:67848, RLSA-2026:67491 |
| Rocky Linux 9 | pgaudit | 1.7.0-1.module+el9.7.0+40011+28af63c9 | RLSA-2026:69914, RLSA-2026:67848, RLSA-2026:67491 |
| Rocky Linux 9 | pgvector | 0.6.2-2.module+el9.8.0+40159+adcaa225 | RLSA-2026:67848, RLSA-2026:67491 |
| Rocky Linux 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.7.0+40011+28af63c9 | RLSA-2026:69914, RLSA-2026:67848, RLSA-2026:67491 |
| Rocky Linux 8 | pg_repack | 1.4.8-1.module+el8.9.0+1525+fc91df60 | RLSA-2026:69923, RLSA-2026:69876 |
| Rocky Linux 8 | pgaudit | 1.7.0-1.module+el8.9.0+1525+fc91df60 | RLSA-2026:69923, RLSA-2026:69876 |
| Rocky Linux 8 | postgres-decoderbufs | 1.9.7-1.Final.module+el8.9.0+1525+fc91df60 | RLSA-2026:69923, RLSA-2026:69876 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | postgresql14 | 14.24-150600.16.36.1 | SUSE-SU-2026:3944-1 |
| SLES 15 SP7 | postgresql15 | 15.19-150600.16.36.1 | SUSE-SU-2026:4017-1 |
| SLES 15 SP7 | postgresql16 | 16.15-150600.16.38.1 | SUSE-SU-2026:3963-1 |
| SLES 15 SP7 | postgresql17 | 17.11-150600.13.32.1 | SUSE-SU-2026:4016-1 |
| SLES 15 SP7 | postgresql18 | 18.6-150600.13.16.1 | SUSE-SU-2026:4014-1 |
| SLES 15 SP6 | postgresql14 | 14.24-150600.16.36.1 | SUSE-SU-2026:3944-1 |
| SLES 15 SP6 | postgresql15 | 15.19-150600.16.36.1 | SUSE-SU-2026:4017-1 |
| SLES 15 SP6 | postgresql16 | 16.15-150600.16.38.1 | SUSE-SU-2026:3963-1 |
| SLES 15 SP6 | postgresql17 | 17.11-150600.13.32.1 | SUSE-SU-2026:4016-1 |
| SLES 15 SP6 | postgresql18 | 18.6-150600.13.16.1 | SUSE-SU-2026:4014-1 |
| SLES 15 SP5 | postgresql14 | 14.24-150200.5.77.1 | SUSE-SU-2026:3941-1 |
| SLES 15 SP5 | postgresql15 | 15.19-150200.5.62.1 | SUSE-SU-2026:4018-1 |
| SLES 15 SP5 | postgresql16 | 16.15-150200.5.49.1 | SUSE-SU-2026:3943-1 |
| SLES 15 SP5 | postgresql17 | 17.11-150200.5.33.1 | SUSE-SU-2026:4013-1 |
| SLES 15 SP5 | postgresql18 | 18.6-150200.5.17.1 | SUSE-SU-2026:4015-1 |
| SLES 15 SP4 | postgresql14 | 14.24-150200.5.77.1 | SUSE-SU-2026:3941-1 |
| SLES 15 SP4 | postgresql15 | 15.19-150200.5.62.1 | SUSE-SU-2026:4018-1 |
| SLES 15 SP4 | postgresql16 | 16.15-150200.5.49.1 | SUSE-SU-2026:3943-1 |
| SLES 15 SP4 | postgresql17 | 17.11-150200.5.33.1 | SUSE-SU-2026:4013-1 |
| SLES 15 SP4 | postgresql18 | 18.6-150200.5.17.1 | SUSE-SU-2026:4015-1 |
| SLES 12 SP5 | postgresql14 | 14.24-3.75.1 | SUSE-SU-2026:3793-1 |
| SLES 12 SP5 | postgresql15 | 15.19-3.61.1 | SUSE-SU-2026:3940-1 |
| SLES 12 SP5 | postgresql16 | 16.15-3.47.1 | SUSE-SU-2026:3794-1 |
| SLES 12 SP5 | postgresql18 | 18.6-8.17.1 | SUSE-SU-2026:3942-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | postgresql14 | 14.24-160000.1.1 | SUSE-SU-2026:23578-1 |
| SLES for SAP 16.0 | postgresql15 | 15.19-160000.1.1 | SUSE-SU-2026:23579-1 |
| SLES for SAP 16.0 | postgresql16 | 16.15-160000.1.1 | SUSE-SU-2026:23580-1 |
| SLES for SAP 16.0 | postgresql17 | 17.11-160000.1.1 | SUSE-SU-2026:23582-1 |
| SLES for SAP 16.0 | postgresql18 | 18.6-160000.1.1 | SUSE-SU-2026:23577-1 |
| SLES for SAP 15 SP6 | postgresql14 | 14.24-150600.16.36.1 | SUSE-SU-2026:3944-1 |
| SLES for SAP 15 SP6 | postgresql15 | 15.19-150600.16.36.1 | SUSE-SU-2026:4017-1 |
| SLES for SAP 15 SP6 | postgresql16 | 16.15-150600.16.38.1 | SUSE-SU-2026:3963-1 |
| SLES for SAP 15 SP6 | postgresql17 | 17.11-150600.13.32.1 | SUSE-SU-2026:4016-1 |
| SLES for SAP 15 SP6 | postgresql18 | 18.6-150600.13.16.1 | SUSE-SU-2026:4014-1 |
| SLES for SAP 15 SP5 | postgresql14 | 14.24-150200.5.77.1 | SUSE-SU-2026:3941-1 |
| SLES for SAP 15 SP5 | postgresql15 | 15.19-150200.5.62.1 | SUSE-SU-2026:4018-1 |
| SLES for SAP 15 SP5 | postgresql16 | 16.15-150200.5.49.1 | SUSE-SU-2026:3943-1 |
| SLES for SAP 15 SP5 | postgresql17 | 17.11-150200.5.33.1 | SUSE-SU-2026:4013-1 |
| SLES for SAP 15 SP5 | postgresql18 | 18.6-150200.5.17.1 | SUSE-SU-2026:4015-1 |
| SLES for SAP 15 SP4 | postgresql14 | 14.24-150200.5.77.1 | SUSE-SU-2026:3941-1 |
| SLES for SAP 15 SP4 | postgresql15 | 15.19-150200.5.62.1 | SUSE-SU-2026:4018-1 |
| SLES for SAP 15 SP4 | postgresql16 | 16.15-150200.5.49.1 | SUSE-SU-2026:3943-1 |
| SLES for SAP 15 SP4 | postgresql17 | 17.11-150200.5.33.1 | SUSE-SU-2026:4013-1 |
| SLES for SAP 15 SP4 | postgresql18 | 18.6-150200.5.17.1 | SUSE-SU-2026:4015-1 |
| SLES 16.0 | postgresql14 | 14.24-160000.1.1 | SUSE-SU-2026:23578-1 |
| SLES 16.0 | postgresql15 | 15.19-160000.1.1 | SUSE-SU-2026:23579-1 |
| SLES 16.0 | postgresql16 | 16.15-160000.1.1 | SUSE-SU-2026:23580-1 |
| SLES 16.0 | postgresql17 | 17.11-160000.1.1 | SUSE-SU-2026:23582-1 |
| SLES 16.0 | postgresql18 | 18.6-160000.1.1 | SUSE-SU-2026:23577-1 |
| SLE HPC 15 SP5 | postgresql15 | 15.19-150200.5.62.1 | SUSE-SU-2026:4018-1 |
| SLE HPC 15 SP5 | postgresql16 | 16.15-150200.5.49.1 | SUSE-SU-2026:3943-1 |
| SLE HPC 15 SP5 | postgresql17 | 17.11-150200.5.33.1 | SUSE-SU-2026:4013-1 |
| SLE HPC 15 SP5 | postgresql18 | 18.6-150200.5.17.1 | SUSE-SU-2026:4015-1 |
| SLE HPC 15 SP4 | postgresql14 | 14.24-150200.5.77.1 | SUSE-SU-2026:3941-1 |
| SLE HPC 15 SP4 | postgresql15 | 15.19-150200.5.62.1 | SUSE-SU-2026:4018-1 |
| SLE HPC 15 SP4 | postgresql16 | 16.15-150200.5.49.1 | SUSE-SU-2026:3943-1 |
| SLE HPC 15 SP4 | postgresql17 | 17.11-150200.5.33.1 | SUSE-SU-2026:4013-1 |
| SLE HPC 15 SP4 | postgresql18 | 18.6-150200.5.17.1 | SUSE-SU-2026:4015-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | postgresql14 | 14.24-1.1 | openSUSE-SU-2026:11552-1 |
| openSUSE Tumbleweed | postgresql15 | 15.19-1.1 | openSUSE-SU-2026:11553-1 |
| openSUSE Tumbleweed | postgresql16 | 16.15-1.1 | openSUSE-SU-2026:11554-1 |
| openSUSE Tumbleweed | postgresql17 | 17.11-1.1 | openSUSE-SU-2026:11555-1 |
| openSUSE Tumbleweed | postgresql18 | 18.6-1.1 | openSUSE-SU-2026:11565-1 |
| openSUSE Leap 16.0 | postgresql14 | 14.24-160000.1.1 | openSUSE-SU-2026:21699-1 |
| openSUSE Leap 16.0 | postgresql15 | 15.19-160000.1.1 | openSUSE-SU-2026:21700-1 |
| openSUSE Leap 16.0 | postgresql16 | 16.15-160000.1.1 | openSUSE-SU-2026:21701-1 |
| openSUSE Leap 16.0 | postgresql17 | 17.11-160000.1.1 | openSUSE-SU-2026:21702-1 |
| openSUSE Leap 16.0 | postgresql18 +1 | 18.6-160000.1.1 | openSUSE-SU-2026:21703-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | postgresql16 | 16.15-r0 | — |
| Alpine v3.24 | postgresql17 | 17.11-r0 | — |
| Alpine v3.24 | postgresql18 | 18.5-r0 | — |
| Alpine v3.23 | postgresql16 | 16.15-r0 | — |
| Alpine v3.23 | postgresql17 | 17.11-r0 | — |
| Alpine v3.23 | postgresql18 | 18.5-r0 | — |
| Alpine v3.22 | postgresql15 | 15.19-r0 | — |
| Alpine v3.22 | postgresql16 | 16.15-r0 | — |
| Alpine v3.22 | postgresql17 | 17.11-r0 | — |
| Alpine v3.21 | postgresql15 | 15.19-r0 | — |
| Alpine v3.21 | postgresql16 | 16.15-r0 | — |
| Alpine v3.21 | postgresql17 | 17.11-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | postgresql15 +15 | 15.19-1.amzn2023.0.1 | ALAS2023-2026-2077 |
| Amazon Linux 2023 | postgresql16 +15 | 16.15-1.amzn2023.0.1 | ALAS2023-2026-2078 |
| Amazon Linux 2023 | postgresql17 +15 | 17.11-1.amzn2023.0.1 | ALAS2023-2026-2076 |
| Amazon Linux 2023 | postgresql18 +15 | 18.6-1.amzn2023.0.1 | ALAS2023-2026-2079 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | postgresql | 16.15-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | postgresql +14 | 16.15-1.0.1.el10_2 | ELSA-2026-70186 |
| Oracle Linux 9 | pg_repack | 1.4.8-2.module+el9.8.0+91043+b3320147 | ELSA-2026-69914, ELSA-2026-67848, ELSA-2026-67491 |
| Oracle Linux 9 | pgaudit | 1.7.0-1.module+el9.8.0+91043+b3320147 | ELSA-2026-69914, ELSA-2026-67848, ELSA-2026-67491 |
| Oracle Linux 9 | pgvector | 0.6.2-2.module+el9.8.0+91036+1d936f05 | ELSA-2026-67848, ELSA-2026-67491 |
| Oracle Linux 9 | postgis +4 | 3.5.3-6.module+el9.8.0+91036+1d936f05 | ELSA-2026-67848, ELSA-2026-67491 |
| Oracle Linux 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.8.0+91043+b3320147 | ELSA-2026-69914, ELSA-2026-67848, ELSA-2026-67491 |
| Oracle Linux 9 | postgresql +14 | 15.19-1.module+el9.8.0+91043+b3320147 | ELSA-2026-69914, ELSA-2026-67848, ELSA-2026-67491 |
| Oracle Linux 8 | pg_repack | 1.4.8-1.module+el8.9.0+90110+d8a562d5 | ELSA-2026-69923, ELSA-2026-69876 |
| Oracle Linux 8 | pgaudit | 1.7.0-1.module+el8.9.0+90110+d8a562d5 | ELSA-2026-69923, ELSA-2026-69876 |
| Oracle Linux 8 | postgres-decoderbufs | 1.9.7-1.Final.module+el8.9.0+90110+d8a562d5 | ELSA-2026-69923, ELSA-2026-69876 |
| Oracle Linux 8 | postgresql +14 | 15.19-1.module+el8.10.0+91041+3270c1ae | ELSA-2026-69923, ELSA-2026-69876 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | postgresql-14 | 14.24-r0 | — |
| Wolfi rolling | postgresql-15 | 15.19-r0 | — |
| Wolfi rolling | postgresql-16 | 16.15-r0 | — |
| Wolfi rolling | postgresql-17 | 17.11-r0 | — |
| Wolfi rolling | postgresql-18 | 18.6-r0 | — |
Advisories 50
- ALSA-2026:67491 Important: postgresql:16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:67848 Important: postgresql:18 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:67280 Important: postgresql18 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:70186 Important: postgresql16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:69914 Important: postgresql:15 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:69876 Important: postgresql:16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:69923 Important: postgresql:15 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:70559 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:73912 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:72363 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:72362 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:72282 Red Hat Security Advisory: postgresql16 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:70856 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:70763 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:70762 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:70602 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:70186 Red Hat Security Advisory: postgresql16 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:69923 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:69914 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:69698 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:69876 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:67848 Red Hat Security Advisory: postgresql:18 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:67491 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- RHSA-2026:67280 Red Hat Security Advisory: postgresql18 security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- WID-SEC-2026-2844 PostgreSQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- SUSE-SU-2026:23580-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23582-1 Security update for postgresql17 SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23579-1 Security update for postgresql15 SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23577-1 Security update for postgresql18 SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23578-1 Security update for postgresql14 SUSE / openSUSE Security Updates · Sep 29, 2026
- RLSA-2026:70186 Important: postgresql16 security update Rocky Linux Security Advisories · Sep 23, 2026
- ELSA-2026-69923 Important: postgresql:15 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Sep 23, 2026
- ELSA-2026-70186 Important: postgresql16 security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Sep 23, 2026
- ELSA-2026-69914 Important: postgresql:15 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 23, 2026
- ELSA-2026-69876 Important: postgresql:16 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Sep 23, 2026
- RLSA-2026:69876 Important: postgresql:16 security update Rocky Linux Security Advisories · Sep 22, 2026
- RLSA-2026:69914 Important: postgresql:15 security update Rocky Linux Security Advisories · Sep 22, 2026
- RLSA-2026:69923 Important: postgresql:15 security update Rocky Linux Security Advisories · Sep 22, 2026
- RLSA-2026:67848 Important: postgresql:18 security update Rocky Linux Security Advisories · Sep 16, 2026
- ELSA-2026-67848 Important: postgresql:18 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 16, 2026
- ELSA-2026-67491 Important: postgresql:16 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 16, 2026
- RLSA-2026:67280 Important: postgresql18 security update Rocky Linux Security Advisories · Sep 15, 2026
- RLSA-2026:67491 Important: postgresql:16 security update Rocky Linux Security Advisories · Sep 15, 2026
- SUSE-SU-2026:4013-1 Security update for postgresql17 SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:4014-1 Security update for postgresql18 SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:4015-1 Security update for postgresql18 SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:4016-1 Security update for postgresql17 SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:4017-1 Security update for postgresql15 SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:4018-1 Security update for postgresql15 SUSE / openSUSE Security Updates · Sep 13, 2026
- SUSE-SU-2026:3963-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Sep 13, 2026