CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
CVE details

CVE-2026-16238

Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before PostgreSQL 18 are unaffected.

Score
8.8 high
Published
2026-08-13
Links
NVD · cve.org

Matched ports (28)

PortPackageVersionStatusMaintainer
databases/postgresql14-clientpostgresql14-client14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-contribpostgresql14-contrib14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-docspostgresql14-docs14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-plperlpostgresql14-plperl14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-plpythonpostgresql14-plpython14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-pltclpostgresql14-pltcl14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-serverpostgresql14-server14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql15-clientpostgresql15-client15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-contribpostgresql15-contrib15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-docspostgresql15-docs15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-plperlpostgresql15-plperl15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-plpythonpostgresql15-plpython15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-pltclpostgresql15-pltcl15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-serverpostgresql15-server15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql16-clientpostgresql16-client16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-contribpostgresql16-contrib16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-docspostgresql16-docs16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-plperlpostgresql16-plperl16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-plpythonpostgresql16-plpython16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-pltclpostgresql16-pltcl16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-serverpostgresql16-server16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql17-clientpostgresql17-client17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-contribpostgresql17-contrib17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-docspostgresql17-docs17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-plperlpostgresql17-plperl17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-plpythonpostgresql17-plpython17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-pltclpostgresql17-pltcl17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-serverpostgresql17-server17.11fixed by updatepgsql@FreeBSD.org

VuXML