A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Mar 17, 2020 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql12Upgrade postgresqlUpgrade postgresql15 | Aug 22, 2024 | Mar 17, 2020 |
| Amazon_linux | — | Upgrade postgresql96 | Oct 28, 2020 | Feb 18, 2020 |
| Centos_linux | — | Upgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresqlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltclUpgrade postgresql-test-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-test | Sep 9, 2020 | Mar 17, 2020 |
| Debian | — | Upgrade postgresql-11 | Feb 18, 2020 | Feb 18, 2020 |
| Freebsd | — | Upgrade postgresql12-serverUpgrade postgresql11-serverUpgrade postgresql96-serverUpgrade postgresql10-server | Mar 30, 2020 | Mar 29, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Mar 13, 2020 | Mar 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-contrib | May 27, 2020 | Mar 17, 2020 |
| Oracle_linux | — | Upgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-pltclUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresqlUpgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade rh-postgresql10-postgresql-docsUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-plperlUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade rh-postgresql10-postgresql-testUpgrade postgresql-serverUpgrade pgauditUpgrade postgresqlUpgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-docs | Sep 10, 2020 | Feb 13, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 12.2 | Feb 14, 2020 | Feb 14, 2020 |
| Redhat_linux | — | Upgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-docsUpgrade pgaudit-debuginfoUpgrade pgaudit | Sep 9, 2020 | Mar 17, 2020 |
| Rocky_linux | — | Upgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgauditUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade pgaudit-debugsource | Mar 12, 2024 | Mar 17, 2020 |
| Suse | — | Upgrade postgresql10-develUpgrade postgresql96-develUpgrade postgresql12Upgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade postgresql-plpythonUpgrade postgresql96-pltclUpgrade python3-psycopg2Upgrade libecpg6Upgrade postgresql12-testUpgrade postgresql96-plpythonUpgrade postgresql12-plpythonUpgrade postgresql12-develUpgrade postgresql-llvmjitUpgrade postgresql10-contribUpgrade postgresql-develUpgrade postgresql96-contribUpgrade postgresql10-plpythonUpgrade postgresql96-docsUpgrade postgresql-plperlUpgrade postgresql12-plperlUpgrade postgresql10-pltclUpgrade postgresql10-docsUpgrade libecpg6-32bitUpgrade postgresql10-plperlUpgrade postgresql12-llvmjitUpgrade postgresql12-contribUpgrade postgresql96-serverUpgrade postgresql12-pltclUpgrade postgresql-docsUpgrade postgresql96-testUpgrade postgresql10Upgrade postgresql96-plperlUpgrade libpq5Upgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql12-docsUpgrade postgresql96Upgrade postgresql12-server-develUpgrade postgresql10-testUpgrade postgresql12-serverUpgrade libpq5-32bitUpgrade postgresql10-serverUpgrade postgresql | Mar 5, 2020 | Feb 18, 2020 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-11 | Feb 19, 2020 | Feb 18, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub