An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Apr 1, 2021 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresql15Upgrade postgresql14Upgrade postgresql | Jun 17, 2022 | Apr 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-plpython2Upgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docs | Sep 28, 2023 | Apr 1, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 1, 2021 |
| Centos_linux | — | Upgrade postgresql-contrib-debuginfoUpgrade postgresql-server-develUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-contribUpgrade pgaudit-debugsourceUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server | Jun 11, 2021 | Apr 1, 2021 |
| Debian | — | Upgrade postgresql-13 | Jul 30, 2024 | Apr 1, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | May 28, 2021 | Apr 1, 2021 |
| Oracle_linux | — | Upgrade pgauditUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-docs | Jun 12, 2021 | Feb 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.2 | Feb 12, 2021 | Feb 12, 2021 |
| Redhat_linux | — | Upgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-serverUpgrade postgresql-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-testUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresqlUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-debuginfo | Jun 11, 2021 | Apr 1, 2021 |
| Rocky_linux | — | Upgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufsUpgrade pgaudit-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-docs-debuginfoUpgrade postgresql-static | May 5, 2022 | Apr 1, 2021 |
| Suse | — | Upgrade postgresql14-server-develUpgrade postgresql13-llvmjitUpgrade postgresql14-contribUpgrade postgresql12-plperlUpgrade postgresql12-serverUpgrade postgresql12-docsUpgrade libpq5-32bitUpgrade postgresql12-develUpgrade postgresql13-docsUpgrade postgresql12Upgrade postgresql13-contribUpgrade postgresql14-plpythonUpgrade postgresql13-testUpgrade postgresql13-pltclUpgrade postgresql13-plperlUpgrade postgresql13-server-develUpgrade libpq5Upgrade libecpg6-32bitUpgrade postgresql12-pltclUpgrade postgresql15Upgrade postgresql13-serverUpgrade postgresql13-llvmjit-develUpgrade postgresql14Upgrade postgresql14-serverUpgrade postgresql14-plperlUpgrade postgresql12-llvmjitUpgrade postgresql12-server-develUpgrade postgresql12-testUpgrade postgresql14-develUpgrade postgresql13-plpythonUpgrade postgresql12-plpythonUpgrade postgresql14-pltclUpgrade postgresql13-develUpgrade postgresql13Upgrade postgresql14-llvmjit-develUpgrade postgresql14-llvmjitUpgrade postgresql14-docsUpgrade postgresql12-contribUpgrade libecpg6 | Feb 23, 2021 | Feb 15, 2021 |
| Ubuntu | — | Upgrade postgresql-12 | Feb 16, 2021 | Feb 15, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub