| Name | CVE-2026-116309 |
| Description | Type confusion in PostgreSQL plperl may allow an object creator to exe ... |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| postgresql-15 (PTS) | bookworm | 15.18-0+deb12u1 | vulnerable |
| bookworm (security) | 15.19-0+deb12u1 | vulnerable |
| postgresql-17 (PTS) | trixie (security), trixie | 17.11-0+deb13u1 | vulnerable |
| postgresql-18 (PTS) | forky, sid | 18.6-3 | vulnerable |
The information below is based on the following data on fixed versions.
Notes
https://www.postgresql.org/about/news/postgresql-187-1712-1616-1520-1425-and-19-rc-2-released-3442/