Debian/postgresql-17: high 8.8
Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database
Action: Upgrade postgresql-17 to 17.8-0+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 17.8-0+deb13u1 | - |
Fixed versions
| 17.8-0+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-2004#Debian:13/postgresql-17
- https://security-tracker.debian.org/tracker/CVE-2026-2004
published · modified · JSON