The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Nov 16, 2020 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql14Upgrade postgresqlUpgrade postgresql12 | Jan 19, 2021 | Nov 16, 2020 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-libs | Jun 24, 2021 | Nov 16, 2020 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql96Upgrade postgresql92 | Jan 15, 2021 | Nov 16, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 16, 2020 |
| Centos_linux | — | Upgrade pgauditUpgrade libpq-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-staticUpgrade libpq-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade libpq-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpythonUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresqlUpgrade postgresql-testUpgrade pgaudit-debuginfoUpgrade libpq-debuginfoUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfoUpgrade libpqUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsource | Dec 15, 2020 | Nov 16, 2020 |
| Debian | — | Upgrade postgresql-13 | Dec 3, 2020 | Nov 16, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Dec 7, 2020 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plperl | Feb 24, 2022 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-testUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-docs | Mar 2, 2022 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-contrib | Dec 15, 2020 | Nov 16, 2020 |
| Oracle_linux | — | Upgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresqlUpgrade postgresql-plpythonUpgrade rh-postgresql10-postgresql-docsUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-testUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade rh-postgresql10-postgresql-contribUpgrade libpq-develUpgrade postgresql-staticUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-libsUpgrade postgresql-develUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade rh-postgresql10-postgresql-plpythonUpgrade pgauditUpgrade rh-postgresql10-postgresql-staticUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade libpqUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql | Dec 15, 2020 | Nov 12, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 13.1 | Nov 16, 2020 | Nov 16, 2020 |
| Redhat_linux | — | Upgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-debuginfoUpgrade libpq-develUpgrade postgresql-pltcl-debuginfoUpgrade libpq-debuginfoUpgrade postgresqlUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade pgauditUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade libpq-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade libpq-devel-debuginfoUpgrade libpqUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debugsourceNo solution exists | Dec 15, 2020 | Nov 16, 2020 |
| Rocky_linux | — | Upgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade pgaudit | Mar 12, 2024 | Nov 16, 2020 |
| Suse | — | Upgrade postgresql12-serverUpgrade postgresql96-pltclUpgrade postgresql12-plperlUpgrade postgresql12-plpythonUpgrade postgresql13-docsUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql12Upgrade postgresql12-develUpgrade postgresql13Upgrade postgresql10-plperlUpgrade postgresql-llvmjitUpgrade postgresql10-docsUpgrade postgresql96-plpythonUpgrade postgresql10-serverUpgrade postgresql-develUpgrade postgresql12-server-develUpgrade postgresql12-docsUpgrade postgresql13-plperlUpgrade libpq5-32bitUpgrade postgresql10-develUpgrade postgresql13-serverUpgrade postgresql13-testUpgrade postgresql96-serverUpgrade postgresql96-plperlUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql10-contribUpgrade postgresql13-develUpgrade postgresql10-testUpgrade postgresql10-pltclUpgrade libecpg6Upgrade postgresql96Upgrade postgresql10Upgrade libpq5Upgrade postgresql13-server-develUpgrade postgresql13-pltclUpgrade postgresql-server-develUpgrade postgresql12-testUpgrade postgresql10-plpythonUpgrade postgresql96-docsUpgrade postgresqlUpgrade postgresql13-contribUpgrade postgresql-testUpgrade postgresql12-llvmjitUpgrade libecpg6-32bitUpgrade postgresql12-pltclUpgrade postgresql12-contribUpgrade postgresql13-plpythonUpgrade postgresql-serverUpgrade postgresql96-contrib | Dec 11, 2020 | Nov 16, 2020 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-9.5 | Mar 22, 2023 | Nov 16, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 16, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub