The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Nov 23, 2020 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresql14Upgrade postgresqlUpgrade postgresql15 | Jan 19, 2021 | Nov 23, 2020 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql96 | Jan 15, 2021 | Nov 17, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 23, 2020 |
| Centos_linux | — | Upgrade postgresql-pltclUpgrade libpqUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgresql-testUpgrade pgaudit-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgresqlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-serverUpgrade postgresql-plperl-debuginfoUpgrade libpq-debugsourceUpgrade libpq-debuginfoUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade libpq-develUpgrade libpq-devel-debuginfoUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debuginfo | Dec 15, 2020 | Nov 23, 2020 |
| Debian | — | Upgrade postgresql-13 | Dec 3, 2020 | Nov 23, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Dec 7, 2020 | Nov 23, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperl | Dec 15, 2020 | Nov 23, 2020 |
| Oracle_linux | — | Upgrade rh-postgresql10-postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-libsUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-plperlUpgrade postgresqlUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade libpqUpgrade postgresql-serverUpgrade libpq-develUpgrade rh-postgresql10-postgresql-develUpgrade rh-postgresql10-postgresql-testUpgrade pgauditUpgrade rh-postgresql10-postgresqlUpgrade postgres-decoderbufsUpgrade rh-postgresql10-postgresql-pltclUpgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-docsUpgrade postgresql-static | Dec 15, 2020 | Nov 12, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 13.1 | Nov 16, 2020 | Nov 16, 2020 |
| Redhat_linux | — | Upgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade libpq-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debugsourceUpgrade libpqUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade libpq-develUpgrade postgresql-plperl-debuginfoUpgrade pgauditUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docs-debuginfoNo solution existsUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufsUpgrade libpq-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debugsourceUpgrade libpq-devel-debuginfoUpgrade postgresql-testUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-debuginfo | Dec 15, 2020 | Nov 23, 2020 |
| Rocky_linux | — | Upgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade pgaudit-debuginfo | Mar 12, 2024 | Nov 23, 2020 |
| Suse | — | Upgrade postgresql12-llvmjitUpgrade postgresql12-testUpgrade postgresql10-plpythonUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql13-plpythonUpgrade postgresql12-contribUpgrade postgresql96Upgrade postgresql10Upgrade postgresql96-serverUpgrade postgresql-pltclUpgrade postgresql12Upgrade postgresqlUpgrade postgresql10-contribUpgrade postgresql-serverUpgrade postgresql13-develUpgrade libpq5Upgrade postgresql10-serverUpgrade postgresql10-testUpgrade libecpg6-32bitUpgrade postgresql96-plpythonUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql13-server-develUpgrade postgresql13-pltclUpgrade postgresql12-plpythonUpgrade postgresql13-serverUpgrade postgresql-develUpgrade postgresql12-server-develUpgrade postgresql12-plperlUpgrade postgresql-llvmjitUpgrade postgresql13-contribUpgrade postgresql12-serverUpgrade postgresql96-pltclUpgrade postgresql13-docsUpgrade postgresql13-testUpgrade postgresql12-pltclUpgrade postgresql13Upgrade postgresql96-docsUpgrade postgresql96-plperlUpgrade postgresql12-docsUpgrade postgresql-contribUpgrade postgresql96-contribUpgrade postgresql13-plperlUpgrade postgresql10-plperlUpgrade libecpg6Upgrade postgresql12-develUpgrade postgresql10-docsUpgrade libpq5-32bitUpgrade postgresql10-develUpgrade postgresql-plpythonUpgrade postgresql10-pltcl | Nov 25, 2020 | Nov 17, 2020 |
| Ubuntu | — | Upgrade postgresql-9.5Upgrade postgresql-12Upgrade postgresql-10 | Nov 18, 2020 | Nov 17, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub