8000 Update postgres to 18.6 by gominimal-pkgmgr-mgr[bot] · Pull Request #625 · gominimal/pkgs · GitHub
[go: up one dir, main page]

Skip to content

Update postgres to 18.6 - #625

Merged
twitchyliquid64 merged 1 commit into
mainfrom
update-postgres-18.6
Aug 19, 2026
Merged

twitchyliquid64 merged 1 commit into
mainfrom
update-postgres-18.6

Conversation

@gominimal-pkgmgr-mgr
Copy link
Copy Markdown
Contributor

Update postgres 18.4 → 18.6

Source: github:postgres/postgres:tag
Release: https://github.com/postgres/postgres/releases/tag/REL_18_6
Changelog: postgres/postgres@18.4...REL_18_6
Released: 7 days ago (2026-08-11)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 18.6 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

  • 8 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (8)

This update clears 8 vulnerabilities affecting 18.4:

CVE / GHSA CPE Severity Fixed in
CVE-2026-14676 (postgresql, postgresql) HIGH 18.5
CVE-2026-14677 (postgresql, postgresql) HIGH 14.24
CVE-2026-14679 (postgresql, postgresql) HIGH 14.24
CVE-2026-14680 (postgresql, postgresql) HIGH 14.24
CVE-2026-6471 (postgresql, postgresql) HIGH 14.24
CVE-2026-14678 (postgresql, postgresql) MEDIUM 14.24
CVE-2026-14681 (postgresql, postgresql) MEDIUM 17.11
CVE-2026-14673 (postgresql, postgresql) LOW 14.24

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ postgres 18.4 18.6
~ postgres-upstream 18.4 18.6

Changes

Old New
Version 18.4 18.6
SHA256 450aa8f2da06c46f... 983ee554ec53dbeb...
Size 29.5 MB 29.6 MB
Source gs://minimal-staging-archives/postgresql-18.4.tar.gz gs://minimal-staging-archives/postgresql-18.6.tar.gz

Quality suggestions

  • Missing tests block. This package has no standalone tests, so the buildbot will only verify compilation — not functional correctness. Consider adding a minimal smoke test (e.g., a --version or small round-trip invocation) as part of this PR so future bumps catch regressions. See packages/python/build.ncl for a simple example.

Created by pkgmgr

@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot added the auto-update Opened autonomously by pkgmgr auto-update label Aug 19, 2026
@twitchyliquid64
twitchyliquid64 added this pull request to the merge queue Aug 19, 2026
Merged via the queue into main with commit 96d3629 Aug 19, 2026
9 checks passed
@twitchyliquid64
twitchyliquid64 deleted the update-postgres-18.6 branch August 19, 2026 17:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-update Opened autonomously by pkgmgr auto-update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

0