{"id":"CVE-2026-6575","aliases":["ALPINE-CVE-2026-6575","ALSA-2026:26204","ALSA-2026:27742","BELL-CVE-2026-6575","BIT-postgresql-2026-6575","DEBIAN-CVE-2026-6575","EUVD-2026-30287","GHSA-f8xc-gmqx-v9fh","MGASA-2026-0151","RHSA-2026:21182","RHSA-2026:22878","RHSA-2026:26204","RHSA-2026:27742","SUSE-SU-2026:1944-1","SUSE-SU-2026:1945-1","SUSE-SU-2026:1946-1","SUSE-SU-2026:22077-1","UBUNTU-CVE-2026-6575","openSUSE-SU-2026:10828-1","openSUSE-SU-2026:20901-1"],"status":"published","title":"PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array","description":"Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.  This allows a table maintainer to infer memory values past that array end.  Within major version 18, minor versions before PostgreSQL 18.4 are affected.  Versions before PostgreSQL 18 are unaffected.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00208,"percentile":0.10934,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-126"],"published":"2026-05-14T13:00:14Z","modified":"2026-10-29T11:42:24Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"postgresql18","fixed_in":["18.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"postgresql18","fixed_in":["18.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"postgresql18","fixed_in":["18.4-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"postgresql","fixed_in":["18.4.0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"postgresql-18","fixed_in":["18.4-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"postgresql-14","fixed_in":["14.23-0ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"postgresql-16","fixed_in":["16.14-0ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"postgresql-17","fixed_in":["17.10-0ubuntu0.25.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"postgresql-18","fixed_in":["18.4-0ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pg_repack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-1.module_el9.8.0+234+5456f35d"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.0-1.module_el9.8.0+234+5456f35d"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pgvector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1-1.module_el9.8.0+234+5456f35d"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-2.module_el9.8.0+239+6fb51d38"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgis-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-2.module_el9.8.0+239+6fb51d38"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgis-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-2.module_el9.8.0+239+6fb51d38"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgis-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-2.module_el9.8.0+239+6fb51d38"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgis-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-2.module_el9.8.0+239+6fb51d38"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-1.Final.module_el9.8.0+234+5456f35d"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-private-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"postgresql-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-2.module_el9.8.0+280+5ad12178"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-private-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"postgresql18-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Alpaquita:stream","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.0-r0"},{"fixed":"18.4-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"postgresql","ranges":[{"type":"SEMVER","events":[{"introduced":"18.0.0"},{"fixed":"18.4.0"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"postgresql-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1"}]}],"versions":["18.0-1","18.1-1","18.1-2","18.2-1","18.3-1","18~beta1+20250612-1","18~beta1+20250624-1","18~beta1+20250701-1","18~beta1-1","18~beta2-1","18~beta3-1","18~rc1-1","18~rc1-2","18~rc1-3","18~~devel.20250318+g4078da6c478-1","18~~devel.20250331-1","18~~devel.20250405-1","18~~devel.20250421-1","18~~devel.20250502-1"]},{"source":"osv","ecosystem":"Mageia:9","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.18-1.mga9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-private-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql17-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.10-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-private-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-0.1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pg_repack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pg_repack-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pg_repack-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0-1.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pgaudit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0-1.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pgaudit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0-1.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pgvector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.1-1.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pgvector-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.1-1.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pgvector-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.1-1.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-2.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgis-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-2.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgis-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-2.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-2.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-2.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgis-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-2.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgis-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-2.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgis-upgrade-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-2.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgis-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-2.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgres-decoderbufs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgres-decoderbufs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-contrib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-docs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-plperl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-plpython3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-pltcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-private-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-private-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-server-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-upgrade-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"postgresql-upgrade-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-2.module+el9.8.0+24359+da7fad50"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-contrib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-docs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-plperl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-plpython3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-pltcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-private-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-private-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-server-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-upgrade-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-upgrade-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"postgresql18-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.4-1.el10_2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-160000.1.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-160000.1.1"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04","9.3.7-0ubuntu0.14.04","9.3.8-0ubuntu0.4.04","9.3.9-0ubuntu0.14.04","9.3.10-0ubuntu0.14.04","9.3.11-0ubuntu0.14.04","9.3.12-0ubuntu0.14.04","9.3.13-0ubuntu0.14.04","9.3.14-0ubuntu0.14.04","9.3.15-0ubuntu0.14.04","9.3.16-0ubuntu0.14.04","9.3.17-0ubuntu0.14.04","9.3.18-0ubuntu0.14.04.1","9.3.19-0ubuntu0.14.04","9.3.20-0ubuntu0.14.04","9.3.21-0ubuntu0.14.04","9.3.22-0ubuntu0.14.04","9.3.23-0ubuntu0.14.04","9.3.24-0ubuntu0.14.04","9.3.24-0ubuntu0.14.04+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"postgresql-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.5.0-1","9.5.0-2","9.5.0-3","9.5.1-1","9.5.2-1","9.5.3-0ubuntu0.16.04","9.5.4-0ubuntu0.16.04","9.5.5-0ubuntu0.16.04","9.5.6-0ubuntu0.16.04","9.5.7-0ubuntu0.16.04","9.5.8-0ubuntu0.16.04.1","9.5.9-0ubuntu0.16.04","9.5.10-0ubuntu0.16.04","9.5.11-0ubuntu0.16.04","9.5.12-0ubuntu0.16.04","9.5.13-0ubuntu0.16.04","9.5.14-0ubuntu0.16.04","9.5.16-0ubuntu0.16.04.1","9.5.17-0ubuntu0.16.04.1","9.5.18-0ubuntu0.16.04.1","9.5.19-0ubuntu0.16.04.1","9.5.21-0ubuntu0.16.04.1","9.5.23-0ubuntu0.16.04.1","9.5.24-0ubuntu0.16.04.1","9.5.25-0ubuntu0.16.04.1","9.5.25-0ubuntu0.16.04.1+esm1","9.5.25-0ubuntu0.16.04.1+esm2","9.5.25-0ubuntu0.16.04.1+esm3","9.5.25-0ubuntu0.16.04.1+esm4","9.5.25-0ubuntu0.16.04.1+esm5","9.5.25-0ubuntu0.16.04.1+esm6","9.5.25-0ubuntu0.16.04.1+esm7","9.5.25-0ubuntu0.16.04.1+esm8","9.5.25-0ubuntu0.16.04.1+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"postgresql-10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.1-1","10.1-2","10.2-1","10.3-1","10.4-0ubuntu0.18.04","10.5-0ubuntu0.18.04","10.6-0ubuntu0.18.04.1","10.7-0ubuntu0.18.04.1","10.8-0ubuntu0.18.04.1","10.9-0ubuntu0.18.04.1","10.10-0ubuntu0.18.04.1","10.12-0ubuntu0.18.04.1","10.14-0ubuntu0.18.04.1","10.15-0ubuntu0.18.04.1","10.16-0ubuntu0.18.04.1","10.17-0ubuntu0.18.04.1","10.18-0ubuntu0.18.04.1","10.19-0ubuntu0.18.04.1","10.20-0ubuntu0.18.04.1","10.21-0ubuntu0.18.04.1","10.22-0ubuntu0.18.04.1","10.23-0ubuntu0.18.04.1","10.23-0ubuntu0.18.04.2","10.23-0ubuntu0.18.04.2+esm1","10.23-0ubuntu0.18.04.2+esm2","10.23-0ubuntu0.18.04.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"postgresql-12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["12.0-1","12.1-1","12.1-2build1","12.2-1","12.2-1ubuntu2","12.2-4","12.4-0ubuntu0.20.04.1","12.5-0ubuntu0.20.04.1","12.6-0ubuntu0.20.04.1","12.7-0ubuntu0.20.04.1","12.8-0ubuntu0.20.04.1","12.9-0ubuntu0.20.04.1","12.10-0ubuntu0.20.04.1","12.11-0ubuntu0.20.04.1","12.12-0ubuntu0.20.04.1","12.13-0ubuntu0.20.04.1","12.14-0ubuntu0.20.04.1","12.15-0ubuntu0.20.04.1","12.16-0ubuntu0.20.04.1","12.17-0ubuntu0.20.04.1","12.18-0ubuntu0.20.04.1","12.19-0ubuntu0.20.04.1","12.20-0ubuntu0.20.04.1","12.22-0ubuntu0.20.04.1","12.22-0ubuntu0.20.04.2","12.22-0ubuntu0.20.04.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"postgresql-14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.23-0ubuntu0.22.04.1"}]}],"versions":["14.1-1ubuntu1","14.2-1","14.2-1ubuntu1","14.3-0ubuntu0.22.04.1","14.4-0ubuntu0.22.04.1","14.5-0ubuntu0.22.04.1","14.6-0ubuntu0.22.04.1","14.7-0ubuntu0.22.04.1","14.8-0ubuntu0.22.04.1","14.9-0ubuntu0.22.04.1","14.10-0ubuntu0.22.04.1","14.11-0ubuntu0.22.04.1","14.12-0ubuntu0.22.04.1","14.13-0ubuntu0.22.04.1","14.15-0ubuntu0.22.04.1","14.17-0ubuntu0.22.04.1","14.18-0ubuntu0.22.04.1","14.19-0ubuntu0.22.04.1","14.20-0ubuntu0.22.04.1","14.22-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"postgresql-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.14-0ubuntu0.24.04.1"}]}],"versions":["16.0-2","16.1-1","16.1-1build1","16.1-1build3","16.2-1","16.2-1ubuntu2","16.2-1ubuntu3","16.2-1ubuntu4","16.3-0ubuntu0.24.04.1","16.4-0ubuntu0.24.04.1","16.4-0ubuntu0.24.04.2","16.6-0ubuntu0.24.04.1","16.8-0ubuntu0.24.04.1","16.9-0ubuntu0.24.04.1","16.10-0ubuntu0.24.04.1","16.11-0ubuntu0.24.04.1","16.13-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"postgresql-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.10-0ubuntu0.25.10.1"}]}],"versions":["17.4-1","17.4-2","17.5-1","17.5-1build1","17.6-1","17.6-1build1","17.7-0ubuntu0.25.10.1","17.9-0ubuntu0.25.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"postgresql-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-0ubuntu0.26.04.1"}]}],"versions":["18.0-1","18.1-1","18.1-1ubuntu1","18.1-1ubuntu2","18.1-2","18.3-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4-1.1"}]}],"bundled":11}],"products":[{"vendor":"postgresql","product":"postgresql"}],"references":[{"url":"https://www.postgresql.org/support/security/CVE-2026-6575/","tags":["Patch","Vendor Advisory","advisory","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6575","tags":["web","advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6575"},{"url":"https://github.com/advisories/GHSA-f8xc-gmqx-v9fh"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-6575","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26204","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6473","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6475","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6477","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6478","tags":["report"]},{"url":"https://bugzilla.redhat.com/2477439","tags":["report"]},{"url":"https://bugzilla.redhat.com/2477442","tags":["report"]},{"url":"https://bugzilla.redhat.com/2477447","tags":["report"]},{"url":"https://bugzilla.redhat.com/2477448","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-26204.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-6472.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-6474.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-6476.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-6479.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-6575.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-6637.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-6638.html","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27742","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-27742.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-6575","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-6575","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0151.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35534","tags":["report"]},{"url":"https://www.postgresql.org/about/news/postgresql-184-1710-1614-1518-and-1423-released-3297/","tags":["web","report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:21182","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6575","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6472","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6479","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6637","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6638","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_21182.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6472","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6472/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6475","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6475","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6475/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477442","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6477","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6477","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6477/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477447","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6478","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6478","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6478/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477445","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6479","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6479/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477440","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6575","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477443","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6637","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6637/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6638","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6638/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22878","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6474","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6476","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22878.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6473","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6473","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6473/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477441","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6474","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6474","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6474/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6476","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6476","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2026-6476/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26204.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27742.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261944-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263804","tags":["report"]},{"url":"https://bugzilla.suse.com/1265172","tags":["report"]},{"url":"https://bugzilla.suse.com/1265173","tags":["report"]},{"url":"https://bugzilla.suse.com/1265174","tags":["report"]},{"url":"https://bugzilla.suse.com/1265175","tags":["report"]},{"url":"https://bugzilla.suse.com/1265176","tags":["report"]},{"url":"https://bugzilla.suse.com/1265177","tags":["report"]},{"url":"https://bugzilla.suse.com/1265178","tags":["report"]},{"url":"https://bugzilla.suse.com/1265179","tags":["report"]},{"url":"https://bugzilla.suse.com/1265180","tags":["report"]},{"url":"https://bugzilla.suse.com/1265181","tags":["report"]},{"url":"https://bugzilla.suse.com/1265182","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6638","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261945-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261946-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622077-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-6575","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8294-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-6575","title":"PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array","description":"Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.  This allows a table maintainer to infer memory values past that array end.  Within major version 18, minor versions before PostgreSQL 18.4 are affected.  Versions before PostgreSQL 18 are unaffected.","status":"published","published":"2026-05-14T13:00:14.542Z","modified":"2026-05-14T15:26:40.715Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T13:50:04.986624Z"}],"euvd":[{"id":"EUVD-2026-30287","description":"Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.  This allows a table maintainer to infer memory values past that array end.  Within major version 18, minor versions before PostgreSQL 18.4 are affected.  Versions before PostgreSQL 18 are unaffected.","status":"published","published":"2026-05-14T13:00:14Z","modified":"2026-05-14T15:26:40Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:04:31.113278Z"}],"ghsa":[{"id":"GHSA-f8xc-gmqx-v9fh","title":"Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of...","description":"Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.  This allows a table maintainer to infer memory values past that array end.  Within major version 18, minor versions before PostgreSQL 18.4 are affected.  Versions before PostgreSQL 18 are unaffected.","status":"published","published":"2026-05-14T15:31:58Z","modified":"2026-05-14T15:31:59Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T15:08:08.953643Z"}],"nvd":[{"id":"CVE-2026-6575","description":"Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.  This allows a table maintainer to infer memory values past that array end.  Within major version 18, minor versions before PostgreSQL 18.4 are affected.  Versions before PostgreSQL 18 are unaffected.","status":"published","published":"2026-05-14T14:16:25.693Z","modified":"2026-06-17T11:01:00.267Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T14:12:19.020465Z"}],"osv":[{"id":"ALPINE-CVE-2026-6575","description":"Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.  This allows a table maintainer to infer memory values past that array end.  Within major version 18, minor versions before PostgreSQL 18.4 are affected.  Versions before PostgreSQL 18 are unaffected.","status":"published","published":"2026-05-14T14:16:25.693Z","modified":"2026-10-01T02:17:49.389086704Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-6575","status":"published","published":"2026-05-18T10:53:08.532835Z","modified":"2026-05-20T07:15:09.838959077Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:25.231222Z"},{"id":"DEBIAN-CVE-2026-6575","description":"Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.  This allows a table maintainer to infer memory values past that array end.  Within major version 18, minor versions before PostgreSQL 18.4 are affected.  Versions before PostgreSQL 18 are unaffected.","status":"published","published":"2026-05-14T14:16:25.693Z","modified":"2026-10-01T03:03:48.148128141Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:58.699079Z"},{"id":"RHSA-2026:21182","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-05-29T10:10:40Z","modified":"2026-10-06T10:31:21.526061743Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22878","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-06-04T10:08:07Z","modified":"2026-10-06T10:30:46.400154743Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:26204","title":"Red Hat Security Advisory: postgresql:18 security update","status":"published","published":"2026-06-17T10:08:35Z","modified":"2026-10-14T10:16:24Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:27742","title":"Red Hat Security Advisory: postgresql18 security update","status":"published","published":"2026-06-22T10:06:50Z","modified":"2026-10-14T10:16:45Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"UBUNTU-CVE-2026-6575","description":"Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.  This allows a table maintainer to infer memory values past that array end.  Within major version 18, minor versions before PostgreSQL 18.4 are affected.  Versions before PostgreSQL 18 are unaffected.","status":"published","published":"2026-05-14T14:16:00Z","modified":"2026-05-21T23:15:06.495582559Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:53.710209Z"},{"id":"ALSA-2026:26204","title":"Important: postgresql:18 security update","description":"PostgreSQL is an advanced object-relational database management system (DBMS).  \n\nSecurity Fix(es):  \n\n  * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)\n  * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)\n  * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)\n  * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-16T00:00:00Z","modified":"2026-10-29T11:42:22.213410203Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:27742","title":"Important: postgresql18 security update","description":"PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.  \n\nSecurity Fix(es):  \n\n  * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)\n  * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)\n  * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)\n  * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-22T00:00:00Z","modified":"2026-10-29T11:42:24.192103521Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"BIT-postgresql-2026-6575","title":"PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array","description":"Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.  This allows a table maintainer to infer memory values past that array end.  Within major version 18, minor versions before PostgreSQL 18.4 are affected.  Versions before PostgreSQL 18 are unaffected.","status":"published","published":"2026-05-18T05:53:09.191Z","modified":"2026-09-08T08:48:18.51661756Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"MGASA-2026-0151","title":"Updated postgresql15 packages fix security vulnerabilities","description":"PostgreSQL CREATE TYPE does not check multirange schema CREATE\nprivilege. (CVE-2026-6472)\nPostgreSQL server undersizes allocations, via integer wraparound.\n(CVE-2026-6473)\nPostgreSQL timeofday() can disclose portions of server memory.\n(CVE-2026-6474)\nPostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of\norigin superuser choice. (CVE-2026-6475)\nPostgreSQL libpq lo_* functions let server superuser overwrite client\nstack memory. (CVE-2026-6477)\nPostgreSQL discloses MD5-hashed passwords via covert timing channel.\n(CVE-2026-6478)\nPostgreSQL SSL/GSS init causes denial of service, via uncontrolled\nrecursion. (CVE-2026-6479)\nPostgreSQL refint allows stack buffer overflow and SQL injection.\n(CVE-2026-6637)\n","status":"published","published":"2026-05-19T02:46:11Z","modified":"2026-05-19T03:00:06.84299Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10828-1","title":"libecpg6-18.4-1.1 on GA media","description":"These are all security issues fixed in the libecpg6-18.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-20T00:00:00Z","modified":"2026-05-21T08:15:10.316419595Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20901-1","title":"Security update for postgresql18","description":"This update for postgresql18 fixes the following issues\n\nSecurity issues:\n\n- CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172).\n- CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173).\n- CVE-2026-6474: Guard against malicious time zone names (bsc#1265174).\n- CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175).\n- CVE-2026-6476: Properly quote subscription names in pg_createsubscriber (bsc#1265176).\n- CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177).\n- CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178).\n- CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179).\n- CVE-2026-6575: Detect faulty input when restoring attribute MCV statistics (bsc#1265180).\n- CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181).\n- CVE-2026-6638: Properly quote object names in logical replication origin checks (bsc#1265182).\n\nNon security issue:\n\n- Update to version 18.4.\n- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer\n to support immutable systems and transactional updates (jsc#PED-14820).\n","status":"published","published":"2026-06-04T07:37:46Z","modified":"2026-06-06T07:30:31.847287818Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:1944-1","title":"Security update for postgresql18","description":"This update for postgresql18 fixes the following issues\n\nUpdate to version 18.4.\n\nSecurity issues:\n\n- CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172).\n- CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173).\n- CVE-2026-6474: Guard against malicious time zone names (bsc#1265174).\n- CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175).\n- CVE-2026-6476: Properly quote subscription names in pg_createsubscriber (bsc#1265176).\n- CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177).\n- CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178).\n- CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179).\n- CVE-2026-6575: Detect faulty input when restoring attribute MCV statistics (bsc#1265180).\n- CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181).\n- CVE-2026-6638: Properly quote object names in logical replication origin checks (bsc#1265182).\n\nNon security issue:\n\n- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional\n  updates (jsc#PED-14820).\n- /usr/bin/pg_config is missing after migrating away from update-alternatives (bsc#1263804).\n","status":"published","published":"2026-05-18T07:47:49Z","modified":"2026-05-19T08:45:08.219552998Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1945-1","title":"Security update for postgresql18","description":"This update for postgresql18 fixes the following issues\n\nUpdate to version 18.4.\n\nSecurity issues:\n\n- CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172).\n- CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173).\n- CVE-2026-6474: Guard against malicious time zone names (bsc#1265174).\n- CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175).\n- CVE-2026-6476: Properly quote subscription names in pg_createsubscriber (bsc#1265176).\n- CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177).\n- CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178).\n- CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179).\n- CVE-2026-6575: Detect faulty input when restoring attribute MCV statistics (bsc#1265180).\n- CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181).\n- CVE-2026-6638: Properly quote object names in logical replication origin checks (bsc#1265182).\n\nNon security issue:\n\n- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional\n  updates (jsc#PED-14820).\n- /usr/bin/pg_config is missing after migrating away from update-alternatives (bsc#1263804).\n","status":"published","published":"2026-05-18T07:48:44Z","modified":"2026-05-19T08:45:08.820585077Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1946-1","title":"Security update for postgresql18","description":"This update for postgresql18 fixes the following issues\n\nUpdate to version 18.4.\n\nSecurity issues:\n\n- CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172).\n- CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173).\n- CVE-2026-6474: Guard against malicious time zone names (bsc#1265174).\n- CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175).\n- CVE-2026-6476: Properly quote subscription names in pg_createsubscriber (bsc#1265176).\n- CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177).\n- CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178).\n- CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179).\n- CVE-2026-6575: Detect faulty input when restoring attribute MCV statistics (bsc#1265180).\n- CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181).\n- CVE-2026-6638: Properly quote object names in logical replication origin checks (bsc#1265182).\n\nNon security issue:\n\n- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional\n  updates (jsc#PED-14820).\n- /usr/bin/pg_config is missing after migrating away from update-alternatives (bsc#1263804).\n","status":"published","published":"2026-05-18T07:48:58Z","modified":"2026-05-19T08:45:08.266065773Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:22077-1","title":"Security update for postgresql18","description":"This update for postgresql18 fixes the following issues\n\nSecurity issues:\n\n- CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172).\n- CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173).\n- CVE-2026-6474: Guard against malicious time zone names (bsc#1265174).\n- CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175).\n- CVE-2026-6476: Properly quote subscription names in pg_createsubscriber (bsc#1265176).\n- CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177).\n- CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178).\n- CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179).\n- CVE-2026-6575: Detect faulty input when restoring attribute MCV statistics (bsc#1265180).\n- CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181).\n- CVE-2026-6638: Properly quote object names in logical replication origin checks (bsc#1265182).\n\nNon security issue:\n\n- Update to version 18.4.\n- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer\n to support immutable systems and transactional updates (jsc#PED-14820).\n","status":"published","published":"2026-06-04T07:40:40Z","modified":"2026-06-16T18:24:35.09959604Z","updated_at":"2026-11-02T15:54:02.654057Z"}]}}