PostgreSQL: Multiple Vulnerabilities — GLSA 202608-15

{
  "id": "4576af903e0b133dfa00ecfe0a9fd31f18321353586ac55e2fe3596ca6378893",
  "url": "https://security.gentoo.org/glsa/202608-15",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "PostgreSQL: Multiple Vulnerabilities — GLSA 202608-15",
    "summary": "Gentoo reports multiple PostgreSQL vulnerabilities, with potential for arbitrary code execution. Upgrade to the listed fixed versions.",
    "evidence": "Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in arbitrary code execution.",
    "products": [
      {
        "name": {
          "value": "dev-db/postgresql",
          "evidence": "Package dev-db/postgresql on all architectures"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "14.23-r1",
            "evidence": "All PostgreSQL 14 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose \">=dev-db/postgresql-14.23-r1:14\""
          },
          {
            "value": "15.18-r1",
            "evidence": "All PostgreSQL 15 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose \">=dev-db/postgresql-15.18-r1:15\""
          },
          {
            "value": "16.14-r1",
            "evidence": "All PostgreSQL 16 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose \">=dev-db/postgresql-16.14-r1:16\""
          },
          {
            "value": "17.10",
            "evidence": "All PostgreSQL 17 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose \">=dev-db/postgresql-17.10:17\""
          },
          {
            "value": "18.4",
            "evidence": "All PostgreSQL 18 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose \">=dev-db/postgresql-18.4:18\""
          }
        ],
        "affected_versions": [
          {
            "value": "< 14.23-r1",
            "evidence": "< 14.23-r1"
          },
          {
            "value": "< 15.18-r1",
            "evidence": "< 15.18-r1"
          },
          {
            "value": "< 16.14-r1",
            "evidence": "< 16.14-r1"
          },
          {
            "value": "< 17.10",
            "evidence": "< 17.10"
          },
          {
            "value": "< 18.4",
            "evidence": "< 18.4"
          }
        ]
      }
    ],
    "severity": "high",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2025-1094",
        "evidence": "CVE-2025-1094"
      },
      {
        "value": "CVE-2025-4207",
        "evidence": "CVE-2025-4207"
      },
      {
        "value": "CVE-2025-8713",
        "evidence": "CVE-2025-8713"
      },
      {
        "value": "CVE-2025-8714",
        "evidence": "CVE-2025-8714"
      },
      {
        "value": "CVE-2025-8715",
        "evidence": "CVE-2025-8715"
      },
      {
        "value": "CVE-2025-12817",
        "evidence": "CVE-2025-12817"
      },
      {
        "value": "CVE-2026-2003",
        "evidence": "CVE-2026-2003"
      },
      {
        "value": "CVE-2026-2004",
        "evidence": "CVE-2026-2004"
      },
      {
        "value": "CVE-2026-2005",
        "evidence": "CVE-2026-2005"
      },
      {
        "value": "CVE-2026-2006",
        "evidence": "CVE-2026-2006"
      },
      {
        "value": "CVE-2026-2007",
        "evidence": "CVE-2026-2007"
      },
      {
        "value": "CVE-2026-6472",
        "evidence": "CVE-2026-6472"
      },
      {
        "value": "CVE-2026-6473",
        "evidence": "CVE-2026-6473"
      },
      {
        "value": "CVE-2026-6474",
        "evidence": "CVE-2026-6474"
      },
      {
        "value": "CVE-2026-6475",
        "evidence": "CVE-2026-6475"
      },
      {
        "value": "CVE-2026-6476",
        "evidence": "CVE-2026-6476"
      },
      {
        "value": "CVE-2026-6477",
        "evidence": "CVE-2026-6477"
      },
      {
        "value": "CVE-2026-6478",
        "evidence": "CVE-2026-6478"
      },
      {
        "value": "CVE-2026-6479",
        "evidence": "CVE-2026-6479"
      },
      {
        "value": "CVE-2026-6575",
        "evidence": "CVE-2026-6575"
      },
      {
        "value": "CVE-2026-6637",
        "evidence": "CVE-2026-6637"
      },
      {
        "value": "CVE-2026-6638",
        "evidence": "CVE-2026-6638"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "Severity high"
  },
  "source_id": "official-gentoo-glsa",
  "document_id": 23662,
  "published_at": "2026-08-17T00:00:00+00:00"
}