A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3 | May 4, 2022 | Oct 29, 2019 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql15Upgrade postgresql14 | Nov 8, 2019 | Oct 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-staticUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-docs | Jun 24, 2021 | Oct 29, 2019 |
| Amazon_linux | — | Upgrade postgresql96Upgrade postgresql95Upgrade postgresql94Upgrade postgresql92 | Oct 28, 2020 | Aug 8, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 29, 2019 |
| Centos_linux | — | Upgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-debugsourceUpgrade postgresql-plpythonUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-docs-debuginfoUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-libsUpgrade postgresql-upgrade-debuginfo | Sep 9, 2020 | Oct 29, 2019 |
| Debian | — | Upgrade postgresql-11 | Aug 13, 2019 | Aug 13, 2019 |
| Freebsd | — | Upgrade postgresql10-serverUpgrade postgresql11-serverUpgrade postgresql95-serverUpgrade postgresql94-serverUpgrade postgresql96-server | Aug 9, 2019 | Aug 8, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-testUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-plperl | Sep 30, 2019 | Aug 8, 2019 |
| Oracle_linux | — | Upgrade postgresql-server-develUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresqlUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-libsUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-contribUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-syspathsUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-develUpgrade postgresql-testUpgrade rh-postgresql10-postgresql-testUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-libsUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-plpython | Sep 10, 2020 | Aug 8, 2019 |
| Postgres | — | Upgrade to PostgreSQL version 11.5 | Aug 9, 2019 | Aug 9, 2019 |
| Redhat_linux | — | Upgrade postgresql-pltclNo solution existsUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-debugsourceUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-debuginfoUpgrade postgresql-testUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql | Sep 9, 2020 | Oct 29, 2019 |
| Suse | — | Upgrade postgresql10-pltclUpgrade postgresql96-develUpgrade postgresql94-serverUpgrade postgresql12-plperlUpgrade postgresql96-docsUpgrade postgresql12-llvmjitUpgrade postgresql-plperlUpgrade postgresql-llvmjitUpgrade postgresql96-contribUpgrade postgresql96Upgrade libecpg6Upgrade postgresql94-plperlUpgrade postgresql94Upgrade postgresql-plpythonUpgrade postgresql10-contribUpgrade postgresql94-plpythonUpgrade postgresql10-testUpgrade postgresql-pltclUpgrade postgresql10-docsUpgrade postgresql10-plpythonUpgrade postgresql96-pltclUpgrade postgresql-server-develUpgrade postgresql10-develUpgrade postgresql12-develUpgrade postgresql12Upgrade postgresql-contribUpgrade postgresql12-docsUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql96-testUpgrade postgresql12-plpythonUpgrade postgresql96-plperlUpgrade postgresql96-serverUpgrade postgresql12-server-develUpgrade postgresql12-contribUpgrade postgresql94-contribUpgrade postgresql94-docsUpgrade postgresql96-plpythonUpgrade postgresql12-pltclUpgrade libpq5-32bitUpgrade postgresql10Upgrade postgresql-serverUpgrade postgresqlUpgrade libpq5Upgrade postgresql10-serverUpgrade postgresql94-pltclUpgrade postgresql10-plperlUpgrade postgresql-testUpgrade libecpg6-32bitUpgrade postgresql12-testUpgrade postgresql12-server | Aug 22, 2019 | Aug 8, 2019 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-9.5Upgrade postgresql-11 | Aug 10, 2019 | Aug 8, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub