ROOT-OS-DEBIAN-11-CVE-2026-16239 CVE-2026-16239 in postgresql-13 - Patched by Root

Root has patched CVE-2026-16239 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-16239 affecting package postgresql for versions less than 16.15-1

CVE-2026-16239 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-16239

creationtimestamp| type| source ---|---|--- 2026-08-20 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtjl7gm3h42m...

BELL-CVE-2026-16239

Bulletin has no description...

SUSE CVE-2026-16239

Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

DEBIAN-CVE-2026-16239

Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

Vulnerability in core server (CVE-2026-16239)

PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions...