The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade pg_repackUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-static | May 4, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresqlUpgrade postgresql13Upgrade postgresql12Upgrade postgresql15 | Aug 22, 2024 | Mar 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-llvmjitUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-plpython2Upgrade postgresql-private-develUpgrade postgresql-pltcl | Aug 29, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade postgresql-upgradeUpgrade pg_repack-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade pgauditUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade pg_repackUpgrade postgresql-testUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-contribUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-pltcl | Dec 22, 2021 | Dec 21, 2021 |
| Debian | — | Upgrade postgresql-13 | Jul 30, 2024 | Mar 2, 2022 |
| Freebsd | — | Upgrade postgresql12-serverUpgrade postgresql13-serverUpgrade postgresql11-server | Nov 4, 2022 | Aug 12, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 2, 2022 |
| Oracle_linux | — | Upgrade pg_repackUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade pgaudit | Dec 23, 2021 | Aug 12, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.4 | Aug 13, 2021 | Aug 13, 2021 |
| Redhat_linux | — | Upgrade postgresql-testUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-serverUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-staticUpgrade postgresql-test-debuginfo | Dec 22, 2021 | Dec 21, 2021 |
| Rocky_linux | — | Upgrade postgresql-testUpgrade postgres-decoderbufsUpgrade pg_repackUpgrade pg_repack-debugsourceUpgrade postgresql-staticUpgrade postgresql-upgrade-debuginfoUpgrade pgauditUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgradeUpgrade pgaudit-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-devel | Mar 12, 2024 | Mar 2, 2022 |
| Suse | — | Upgrade libpq5Upgrade postgresql12Upgrade postgresql13-llvmjitUpgrade postgresql12-serverUpgrade libpq5-32bitUpgrade postgresql12-plperlUpgrade postgresql12-testUpgrade postgresql12-develUpgrade postgresql13-contribUpgrade postgresql13-serverUpgrade postgresql13-llvmjit-develUpgrade postgresql12-pltclUpgrade postgresql13-docsUpgrade postgresql12-plpythonUpgrade postgresql12-contribUpgrade postgresql13-server-develUpgrade postgresql12-llvmjitUpgrade libecpg6Upgrade postgresql12-server-develUpgrade postgresql13-plpythonUpgrade postgresql13-pltclUpgrade postgresql13-plperlUpgrade postgresql12-docsUpgrade postgresql13-develUpgrade libecpg6-32bitUpgrade postgresql13Upgrade postgresql13-test | Sep 17, 2021 | Aug 12, 2021 |
| Ubuntu | — | Upgrade postgresql-13Upgrade postgresql-12 | Aug 14, 2021 | Aug 12, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub