Home / mailings [SECURITY] [DSA 6625-1] postgresql-17 security update
Posted on 13 November 2026
Debian Security Advisory- -------------------------------------------------------------------------
Debian Security Advisory DSA-6625-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
November 13, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : postgresql-17
CVE ID : CVE-2026-6460 CVE-2026-6467 CVE-2026-14661 CVE-2026-16237
CVE-2026-16240 CVE-2026-18447 CVE-2026-116303 CVE-2026-116304
CVE-2026-116306 CVE-2026-116307 CVE-2026-116308 CVE-2026-116309
CVE-2026-116310 CVE-2026-116311 CVE-2026-116312 CVE-2026-116314
CVE-2026-116315 CVE-2026-116316 CVE-2026-116317 CVE-2026-116319
CVE-2026-116320 CVE-2026-116321 CVE-2026-116323 CVE-2026-116325
CVE-2026-116326 CVE-2026-116327 CVE-2026-116328 CVE-2026-116330
CVE-2026-116331 CVE-2026-116332 CVE-2026-116333 CVE-2026-116335
CVE-2026-116336 CVE-2026-120139 CVE-2026-120141 CVE-2026-120142
CVE-2026-120143 CVE-2026-120145 CVE-2026-120146 CVE-2026-120147
CVE-2026-120148 CVE-2026-120149 CVE-2026-120150 CVE-2026-120151
CVE-2026-120152 CVE-2026-120153 CVE-2026-120154
Multiple security issues were discovered in PostgreSQL, which may result
in execution of arbitrary code, incorrect authentication, information
disclosure, denial of service or privilege escalation.
To completely fix CVE-2026-6460 some extensions will require
re-compilation against this released version, which will be scheduled
through upcoming trixie point releases.
For the stable distribution (trixie), these problems have been fixed in
version 17.11-0+deb13u1.
We recommend that you upgrade your postgresql-17 packages.
For the detailed security status of postgresql-17 please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/postgresql-17
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
