{"id":"CVE-2026-2007","aliases":["ALPINE-CVE-2026-2007","ALSA-2026:19009","BELL-CVE-2026-2007","BIT-postgresql-2026-2007","DEBIAN-CVE-2026-2007","EUVD-2026-7042","GHSA-5pr9-9395-q5gq","MGASA-2026-0041","RHSA-2026:19009","RHSA-2026:8756","RLSA-2026:19009","SUSE-SU-2026:0584-1","SUSE-SU-2026:0585-1","SUSE-SU-2026:0881-1","SUSE-SU-2026:20921-1","UBUNTU-CVE-2026-2007","openSUSE-SU-2026:10197-1","openSUSE-SU-2026:20408-1"],"status":"published","title":"PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory","description":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00538,"percentile":0.45568,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120","CWE-122"],"published":"2026-02-12T13:00:11Z","modified":"2026-11-03T06:32:53Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"postgresql15","fixed_in":["15.16-r0","15.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"postgresql15","fixed_in":["15.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"postgresql15","fixed_in":["15.16-r0","15.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql16","fixed_in":["16.12-r0","16.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"postgresql16","fixed_in":["16.12-r0","16.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"postgresql16","fixed_in":["16.12-r0","16.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"postgresql16","fixed_in":["16.12-r0","16.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"postgresql16","fixed_in":["16.12-r0","16.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"postgresql17","fixed_in":["17.8-r0","17.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"postgresql17","fixed_in":["17.8-r0","17.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"postgresql17","fixed_in":["17.8-r0","17.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"postgresql17","fixed_in":["17.8-r0","17.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"postgresql18","fixed_in":["18.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"postgresql18","fixed_in":["18.2-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"postgresql15","fixed_in":["15.16-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"postgresql17","fixed_in":["17.8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"postgresql18","fixed_in":["18.2-r1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"postgresql","fixed_in":["18.2.0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"postgresql-18","fixed_in":["18.2-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.16-r0"},{"fixed":"15.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.16-r0"},{"fixed":"15.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.12-r0"},{"fixed":"16.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"postgresql16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.12-r0"},{"fixed":"16.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"postgresql16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.12-r0"},{"fixed":"16.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"postgresql16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.12-r0"},{"fixed":"16.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"postgresql16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.12-r0"},{"fixed":"16.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"postgresql17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8-r0"},{"fixed":"17.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"postgresql17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8-r0"},{"fixed":"17.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"postgresql17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8-r0"},{"fixed":"17.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"postgresql17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8-r0"},{"fixed":"17.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-private-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Alpaquita:23","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2-r0"},{"fixed":"15.16-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"postgresql17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.5-r0"},{"fixed":"17.8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.0-r0"},{"fixed":"18.2-r1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"postgresql","ranges":[{"type":"SEMVER","events":[{"introduced":"18.0.0"},{"fixed":"18.2.0"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"postgresql-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-1"}]}],"versions":["18.0-1","18.1-1","18.1-2","18~beta1+20250612-1","18~beta1+20250624-1","18~beta1+20250701-1","18~beta1-1","18~beta2-1","18~beta3-1","18~rc1-1","18~rc1-2","18~rc1-3","18~~devel.20250318+g4078da6c478-1","18~~devel.20250331-1","18~~devel.20250405-1","18~~devel.20250421-1","18~~devel.20250502-1"]},{"source":"osv","ecosystem":"Mageia:9","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.16-1.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-contrib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-docs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-plperl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-plpython3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-pltcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-private-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-private-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-server-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-upgrade-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-upgrade-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:10","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.3-1.el10"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-150200.5.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-150200.5.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-150200.5.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-150200.5.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-150200.5.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-150200.5.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-150200.5.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-150200.5.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-8.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-8.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-150600.13.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-150600.13.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-150600.13.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-150600.13.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-150600.13.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-150600.13.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04","9.3.7-0ubuntu0.14.04","9.3.8-0ubuntu0.4.04","9.3.9-0ubuntu0.14.04","9.3.10-0ubuntu0.14.04","9.3.11-0ubuntu0.14.04","9.3.12-0ubuntu0.14.04","9.3.13-0ubuntu0.14.04","9.3.14-0ubuntu0.14.04","9.3.15-0ubuntu0.14.04","9.3.16-0ubuntu0.14.04","9.3.17-0ubuntu0.14.04","9.3.18-0ubuntu0.14.04.1","9.3.19-0ubuntu0.14.04","9.3.20-0ubuntu0.14.04","9.3.21-0ubuntu0.14.04","9.3.22-0ubuntu0.14.04","9.3.23-0ubuntu0.14.04","9.3.24-0ubuntu0.14.04","9.3.24-0ubuntu0.14.04+esm1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"postgresql18-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3-160000.1.1"}]}],"bundled":5}],"products":[{"vendor":"postgresql","product":"postgresql"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"}],"references":[{"url":"https://www.postgresql.org/support/security/CVE-2026-2007/","tags":["Vendor Advisory","advisory","article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2007","tags":["vdb-entry","x_refsource_REDHAT","report","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439320","tags":["issue-tracking","x_refsource_REDHAT","web","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2007.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19009","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8756","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2007","tags":["web","advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-2007"},{"url":"https://github.com/advisories/GHSA-5pr9-9395-q5gq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-2007","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2003","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2004","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2005","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2006","tags":["report"]},{"url":"https://bugzilla.redhat.com/2439320","tags":["report"]},{"url":"https://bugzilla.redhat.com/2439322","tags":["report"]},{"url":"https://bugzilla.redhat.com/2439324","tags":["report"]},{"url":"https://bugzilla.redhat.com/2439325","tags":["report"]},{"url":"https://bugzilla.redhat.com/2439326","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-19009.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-2007","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-2007","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0041.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35133","tags":["report"]},{"url":"https://www.postgresql.org/about/news/postgresql-182-178-1612-1516-and-1421-released-3235/","tags":["web","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439326","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19009.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2003","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-2003/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2004","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-2004/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2005","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2005","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-2005/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2006","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-2006/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2007","tags":["advisory","report"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12818","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12817","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1975","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8756.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1975","tags":["advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","tags":["article"]},{"url":"http://marc.info/?l=bugtraq\u0026m=134124585221119\u0026w=2","tags":["article"]},{"url":"http://secunia.com/advisories/39939","tags":["article"]},{"url":"http://www.debian.org/security/2010/dsa-2051","tags":["article"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:103","tags":["article"]},{"url":"http://www.postgresql.org/docs/current/static/release-7-4-29.html","tags":["article"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-0-25.html","tags":["article"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-1-21.html","tags":["article"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-2-17.html","tags":["article"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-3-11.html","tags":["article"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-4-4.html","tags":["article"]},{"url":"http://www.securityfocus.com/bid/40304","tags":["article"]},{"url":"http://www.vupen.com/english/advisories/2010/1207","tags":["article"]},{"url":"http://www.vupen.com/english/advisories/2010/1221","tags":["article"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11004","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12817","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2025-12817/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414826","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12818","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12818","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2025-12818/","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19009","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260584-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258008","tags":["report"]},{"url":"https://bugzilla.suse.com/1258009","tags":["report"]},{"url":"https://bugzilla.suse.com/1258010","tags":["report"]},{"url":"https://bugzilla.suse.com/1258011","tags":["report"]},{"url":"https://bugzilla.suse.com/1258012","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2007","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260585-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260881-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258754","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620921-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-2007","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-2007","title":"PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory","description":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected.","status":"published","published":"2026-02-12T13:00:11.127Z","modified":"2026-07-15T01:20:48.32Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-122","CWE-120"],"updated_at":"2026-11-02T13:48:58.05327Z"}],"euvd":[{"id":"EUVD-2026-7042","description":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected.","status":"published","published":"2026-02-12T13:00:11Z","modified":"2026-07-15T01:20:48Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:55.318488Z"}],"ghsa":[{"id":"GHSA-5pr9-9395-q5gq","title":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via...","description":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected.","status":"published","published":"2026-02-12T15:32:48Z","modified":"2026-06-30T03:35:36Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-120","CWE-122"],"updated_at":"2026-11-02T15:09:04.017394Z"}],"nvd":[{"id":"CVE-2026-2007","description":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected.","status":"published","published":"2026-02-12T14:16:02.6Z","modified":"2026-07-15T02:19:27.223Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122","CWE-120"],"updated_at":"2026-11-02T14:12:05.908608Z"}],"osv":[{"id":"ALPINE-CVE-2026-2007","description":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected.","status":"published","published":"2026-02-12T14:16:02.6Z","modified":"2026-11-03T06:32:53.094975007Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:26.770911Z"},{"id":"BELL-CVE-2026-2007","status":"published","published":"2026-02-15T06:08:54.820603Z","modified":"2026-03-13T07:20:10.301772Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"CVE-2026-2007","description":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected.","status":"published","published":"2026-02-12T14:16:02.6Z","modified":"2026-05-26T16:59:23.561115761Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:58.42038Z"},{"id":"DEBIAN-CVE-2026-2007","description":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected.","status":"published","published":"2026-02-12T14:16:02.6Z","modified":"2026-10-01T03:03:20.379929598Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:53.097669Z"},{"id":"RHSA-2026:19009","title":"Red Hat Security Advisory: postgresql18 security update","status":"published","published":"2026-05-20T10:09:34Z","modified":"2026-07-12T10:09:34Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:8756","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-21T10:10:31Z","modified":"2026-10-06T10:19:37Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:19009","title":"Important: postgresql18 security update","description":"PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system.  These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection.  The PostgreSQL server can be found in the postgresql-server sub-package.\n\nSecurity Fix(es):\n\n* postgresql: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory (CVE-2026-2007)\n\n* postgresql: PostgreSQL oidvector discloses a few bytes of memory (CVE-2026-2003)\n\n* postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)\n\n* postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)\n\n* postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:08.985755789Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2026-2007","description":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected.","status":"published","published":"2026-02-12T14:16:00Z","modified":"2026-06-30T18:16:47.130397009Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"},{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"ALSA-2026:19009","title":"Important: postgresql18 security update","description":"PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.  \n\nSecurity Fix(es):  \n\n  * postgresql: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory (CVE-2026-2007)\n  * postgresql: PostgreSQL oidvector discloses a few bytes of memory (CVE-2026-2003)\n  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)\n  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)\n  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:30:16.777675168Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"BIT-postgresql-2026-2007","title":"PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory","description":"Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected.","status":"published","published":"2026-02-16T16:03:46.313Z","modified":"2026-09-08T08:48:04.831105639Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"MGASA-2026-0041","title":"Updated postgresql15 packages fix security vulnerabilities","description":"PostgreSQL oidvector discloses a few bytes of memory. (CVE-2026-2003)\nPostgreSQL intarray missing validation of type of input to selectivity\nestimator executes arbitrary code. (CVE-2026-2004)\nPostgreSQL pgcrypto heap buffer overflow executes arbitrary code.\n(CVE-2026-2005)\nPostgreSQL missing validation of multibyte character length executes\narbitrary code. (CVE-2026-2006)\nPostgreSQL pg_trgm heap buffer overflow writes pattern onto server\nmemory. (CVE-2026-2007\n","status":"published","published":"2026-02-17T17:47:08Z","modified":"2026-04-16T04:40:56.580366495Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10197-1","title":"libecpg6-18.2-1.1 on GA media","description":"These are all security issues fixed in the libecpg6-18.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-02-13T00:00:00Z","modified":"2026-03-23T04:54:34.173268Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20408-1","title":"Security update for postgresql18","description":"This update for postgresql18 fixes the following issues:\n\n- Update to version 18.3. (bsc#1258754)\n- CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008)\n- CVE-2026-2004: Harden selectivity estimators against being attached to operators that accept unexpected data types. (bsc#1258009)\n- CVE-2026-2005: Fix buffer overrun in contrib/pgcrypto's PGP decryption functions. (bsc#1258010)\n- CVE-2026-2006: Fix inadequate validation of multibyte character lengths. (bsc#1258011)\n- CVE-2026-2007: Harden contrib/pg_trgm against changes in string lowercasing behavior. (bsc#1258012)\n","status":"published","published":"2026-03-20T14:50:43Z","modified":"2026-03-29T17:23:50.868426Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:0584-1","title":"Security update for postgresql18","description":"This update for postgresql18 fixes the following issues:\n\nUpdate to version 18.2.\n\nSecurity issues fixed:\n\n- CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008).\n- CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code\n  execution (bsc#1258009).\n- CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution\n  (bsc#1258010).\n- CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution\n  (bsc#1258011).\n- CVE-2026-2007: pg_trgm heap buffer overflow can cause to write pattern onto server memory (bsc#1258012).\n","status":"published","published":"2026-02-20T10:03:22Z","modified":"2026-03-23T04:52:22.166063Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0585-1","title":"Security update for postgresql18","description":"This update for postgresql18 fixes the following issues:\n\nUpdate to version 18.2.\n\nSecurity issues fixed:\n\n- CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008).\n- CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code\n  execution (bsc#1258009).\n- CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution\n  (bsc#1258010).\n- CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution\n  (bsc#1258011).\n- CVE-2026-2007: pg_trgm heap buffer overflow can cause to write pattern onto server memory (bsc#1258012).\n","status":"published","published":"2026-02-20T10:03:34Z","modified":"2026-03-23T04:52:22.492516Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0881-1","title":"Security update for postgresql18","description":"This update for postgresql18 fixes the following issues:\n\nUpdate to version 18.3 (bsc#1258754).\n\nSecurity issues fixed:\n\n- CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008).\n- CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code\n  execution (bsc#1258009).\n- CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution\n  (bsc#1258010).\n- CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution\n  (bsc#1258011).\n- CVE-2026-2007: pg_trgm heap buffer overflow can cause to write pattern onto server memory (bsc#1258012).\n    \nRegression fixes:\n\n  - the substring() function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the\n    source of that value is a database column (caused by CVE-2026-2006 fix).\n  - a standby may halt and return an error 'could not access status of transaction'.\n","status":"published","published":"2026-03-12T10:18:52Z","modified":"2026-03-13T08:51:12.084121Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:20921-1","title":"Security update for postgresql18","description":"This update for postgresql18 fixes the following issues:\n\n- Update to version 18.3. (bsc#1258754)\n- CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008)\n- CVE-2026-2004: Harden selectivity estimators against being attached to operators that accept unexpected data types. (bsc#1258009)\n- CVE-2026-2005: Fix buffer overrun in contrib/pgcrypto's PGP decryption functions. (bsc#1258010)\n- CVE-2026-2006: Fix inadequate validation of multibyte character lengths. (bsc#1258011)\n- CVE-2026-2007: Harden contrib/pg_trgm against changes in string lowercasing behavior. (bsc#1258012)\n","status":"published","published":"2026-03-20T14:50:46Z","modified":"2026-04-02T17:24:16.91709Z","updated_at":"2026-11-02T15:54:01.953589Z"}]}}