ELSA-2026-4110: postgresql:16 security update (IMPORTANT)

ELSA-2026-19010: postgresql16 security update (IMPORTANT)

Security update for postgresql18

Security update for postgresql18

Security update for postgresql18

Security update for postgresql18

Important: postgresql18 security update

ELSA-2026-19009: postgresql18 security update (IMPORTANT)

Security update for postgresql15

Security update for postgresql14

Important: postgresql:12 security update

Important: postgresql:13 security update

ELSA-2026-4064: postgresql:12 security update (IMPORTANT)

ELSA-2026-4063: postgresql:16 security update (IMPORTANT)

ELSA-2026-4059: postgresql:15 security update (IMPORTANT)

ELSA-2026-4024: postgresql:13 security update (IMPORTANT)

ELSA-2026-3896: postgresql:15 security update (IMPORTANT)

ELSA-2026-3887: postgresql16 security update (IMPORTANT)

ELSA-2026-3730: postgresql security update (IMPORTANT)

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.