Among the 13 debian patches available in version 18.6-3 of the package, we noticed the following issues:
commit 3be8da820d46edef2b26a27e5084e2583762f43c
Author: Christoph Berg <myon@debian.org>
Date: Mon Nov 9 22:15:17 2026 +0100
New upstream version 18.7.
* Fixes CVE-2026-6460, CVE-2026-6467, CVE-2026-14661, CVE-2026-16237,
CVE-2026-16240, CVE-2026-18447, CVE-2026-116303, CVE-2026-116304,
CVE-2026-116306, CVE-2026-116307, CVE-2026-116308, CVE-2026-116309,
CVE-2026-116310, CVE-2026-116311, CVE-2026-116312, CVE-2026-116313,
CVE-2026-116314, CVE-2026-116315, CVE-2026-116316, CVE-2026-116317,
CVE-2026-116318, CVE-2026-116319, CVE-2026-116320, CVE-2026-116321,
CVE-2026-116322, CVE-2026-116323, CVE-2026-116325, CVE-2026-116326,
CVE-2026-116327, CVE-2026-116328, CVE-2026-116329, CVE-2026-116330,
CVE-2026-116331, CVE-2026-116332, CVE-2026-116333, CVE-2026-116335,
CVE-2026-116336, CVE-2026-120139, CVE-2026-120141, CVE-2026-120142,
CVE-2026-120143, CVE-2026-120144, CVE-2026-120145, CVE-2026-120146,
CVE-2026-120147, CVE-2026-120148, CVE-2026-120149, CVE-2026-120150,
CVE-2026-120151, CVE-2026-120152, CVE-2026-120153, CVE-2026-120154.
* The fix for CVE-2026-6460 requires recompilation of (almost) all server
extension packages.
commit cd08a4149882f9dd745fed86e4b1a1fc30600098
Author: Christoph Berg <myon@debian.org>
Date: Mon Aug 17 10:20:48 2026 +0200
Add noperl nopython notcl build profiles.
commit fcd42c1801ff51ab3bb5396f9308939e4e460781
Merge: 7d7a94e 835645c
Author: Christoph Berg <myon@debian.org>
Date: Mon Aug 17 09:45:21 2026 +0200
Merge tag 'debian/18.6-3' into 18
tagging postgresql-18 18.6-3
# -----BEGIN PGP SIGNATURE-----
#
# iQIzBAABCAAdFiEEXEj+YVf0kXlZcIfGTFprqxLSp64FAmqAywUACgkQTFprqxLS
# p644/w//ZKxj1MuX3veZfcS2JkyK7IKqRRS9iBcHsgrSVRm+wQv7vr5HaAnnt6DL
# McVGqmzijNc9mo7Zyvskm27dCqpqUpyrT2yZvpYim3kytLc7qartnoR8w80Zy03d
# jla4E7mg4EjcRjPu7XOcrcTnVi0xfCckajJ6CmYXcuxQoepE6VFpt9vAaAAWwnGm
# zO/qb5R4ARod8ZwR2LtuthiGBg2j7zin8ZSfvY9WyB2UFQNNfGZiRHOofz0/Ja2b
# q38AuowVbZzwTJemkVl5QjQk+jb1tXtpuwMHpfAAcUwLoSLauGZ2wp+IfEgYQhUW
# MAqexVgln/hYcIfjje0ivluvPpMj7EmxjkCBqAqAHU8xQBvRL6fgnnr+A2soGdGp
# hLY0QZUjs1xPcXlqK3PzEgK1dEgE9AIjnJKDWmulDWbSMaQAw5taLnoGDBZGnh8m
# h7EmaP/xTfsmQaiIGLCnZt3VARBuExdsy+VhK3YrBPNL5I7ZFw8E4NDlhrNfR5Xk
# lyJo3Al8FaDh11fjzhUeui7a8uuf5ua5IARn9fZ/dnhm44Vc1+CK86JX1dQFnNDg
# gZkanEFBU289/xCyJmNzrNxbiGFzAQyGEj7PioR2xJRXLHH5rx8volURSgKm+4rX
# nfLhslcenComiP9Ser9FK0rm0wpmVXekwzk3i+dOVpmM4pbAzQw=
# =lxyv
# -----END PGP SIGNATURE-----
# gpg: Signatur vom Sa 15 Aug 2026 22:24:37 CEST
# gpg: mittels RSA-Schlüssel 5C48FE6157F49179597087C64C5A6BAB12D2A7AE
# gpg: Korrekte Signatur von "Christoph Berg <cb@df7cb.de>" [ultimativ]
# gpg: alias "Christoph Berg <myon@debian.org>" [ultimativ]
# gpg: alias "Christoph Berg <myon@oftc.net>" [ultimativ]
commit 7d7a94e54c66cdb607ed8417ecb8d12a13acfe85
Author: Christoph Berg <myon@debian.org>
Date: Sat Aug 15 21:38:21 2026 +0200
Actually remove patch
commit f126d3c9c52aea76eee038699ac621cf25815cec
Author: Christoph Berg <myon@debian.org>
Date: Fri Aug 14 23:28:28 2026 +0200
Drop psql-count-every-COPY-FROM-STDIN patch, went upstream