ALPINE-CVE-2026-116329: High severity alpine/postgresql15 vulnerability

Q: Are the listed Alpine PostgreSQL 15, 16, and 17 packages affected?

No. PostgreSQL versions before major version 18 are stated to be unaffected, despite those packages appearing in the software list.

Q: What does the severity assessment indicate about exploit conditions and impact?

The vulnerability is rated high with a CVSS score of 8.8. The vector indicates network reachability, low attack complexity, low required privileges, no user interaction, and high impact to confidentiality, integrity, and availability.

Published Nov 12, 2026

Updated

Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.

Affected Software

12 affected componentsFixes available

alpine/postgresql15<15.20-r0

15.20-r0

alpine/postgresql15<15.20-r0

15.20-r0

alpine/postgresql16<16.16-r0

16.16-r0

alpine/postgresql16<16.16-r0

16.16-r0

alpine/postgresql16<16.16-r0

16.16-r0

alpine/postgresql16<16.16-r0

16.16-r0

alpine/postgresql17<17.12-r0

17.12-r0

alpine/postgresql17<17.12-r0

17.12-r0

alpine/postgresql17<17.12-r0

17.12-r0

alpine/postgresql17<17.12-r0

17.12-r0

alpine/postgresql18<18.7-r0

18.7-r0

alpine/postgresql18<18.7-r0

18.7-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade alpine/postgresql15 to a version that resolves this vulnerability.
Fixed in 15.20-r0
Upgrade
Upgrade alpine/postgresql16 to a version that resolves this vulnerability.
Fixed in 16.16-r0
Upgrade
Upgrade alpine/postgresql17 to a version that resolves this vulnerability.
Fixed in 17.12-r0
Upgrade
Upgrade alpine/postgresql18 to a version that resolves this vulnerability.
Fixed in 18.7-r0
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 18.7

Event History

Nov 12, 2026

CVE Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Are the listed Alpine PostgreSQL 15, 16, and 17 packages affected?

No. PostgreSQL versions before major version 18 are stated to be unaffected, despite those packages appearing in the software list.

What does the severity assessment indicate about exploit conditions and impact?

The vulnerability is rated high with a CVSS score of 8.8. The vector indicates network reachability, low attack complexity, low required privileges, no user interaction, and high impact to confidentiality, integrity, and availability.

ALPINE-CVE-2026-116329: High severity alpine/postgresql15 vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Are the listed Alpine PostgreSQL 15, 16, and 17 packages affected?

What does the severity assessment indicate about exploit conditions and impact?

Company

Resources

Contact

Frequently Asked Questions

Are the listed Alpine PostgreSQL 15, 16, and 17 packages affected?

What does the severity assessment indicate about exploit conditions and impact?