Skip to content
Heist/ feed
Medium

pg_partman disable maintenance for all partition sets

Type: advisorySource: Official CVE List1 source record

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance() handles exceptions outside the loop that processes rows from part_config, so an exception for one partition set immediately terminates the loop and skips every later set. A role with partman_user access can insert or update a row that reliably fails and assign it a low maintenance_order value so it is processed before legitimate rows. Repeated maintenance ticks then abort before legitimate partition sets are maintained, causing database-wide loss of automated partition maintenance. This issue is fixed in version 5.5.0.

Announced Group revision 1
Original source ↗

CVE-2026-61822

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-61822

pg_partman

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "pgpartman",
    "product": "pg_partman",
    "versions": [
      {
        "status": "affected",
        "version": "< 5.5.0"
      }
    ]
  }
]
Related CVEs
CVE-2026-61822

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#1920 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement