PostgreSQL Users Should Update Now

Ubuntu security alert Canonical released fixes for 30 PostgreSQL vulnerabilities across three Ubuntu LTS versions. Published 20 August 2026 · Canonical USN-8653-1

Security flaws addressed

30 The notice covers SQL injection, information exposure, privilege problems, memory-safety bugs and possible code execution. Impact differs by vulnerability and Ubuntu release.

22.04, 24.04 and 26.04

Affected Ubuntu LTS releases PostgreSQL 14 PostgreSQL 16 PostgreSQL 18 Canonical supplied corrected packages for each supported release.

Some flaws could allow code execution

Serious outcomes Other issues could enable SQL injection, leak information or bypass intended row-security restrictions. These are possible outcomes—not proof that every server has been attacked.

Many attacks require database access

Important context Canonical describes many issues as requiring an authenticated user. That still matters on shared, exposed or poorly restricted systems.

Internet-facing servers deserve priority

Check your exposure Review who can connect, restrict port 5432, remove unnecessary accounts and confirm least-privilege permissions. Network controls reduce exposure but do not replace the update.

Update, restart, verify

What administrators should do 1 Install Ubuntu’s PostgreSQL updates 2 Restart PostgreSQL as instructed 3 Confirm the service and applications recover

Do not delay this database update

The takeaway Ubuntu 22.04, 24.04 and 26.04 administrators should apply the corrected PostgreSQL packages and verify their services. Read Canonical’s full notice Primary source: Canonical USN-8653-1