The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pgauditUpgrade pg_repackUpgrade postgresql-upgrade-develUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgresql-contrib | May 4, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresqlUpgrade postgresql12Upgrade postgresql14Upgrade postgresql15 | Aug 22, 2024 | Mar 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-plpython2Upgrade postgresql-test-rpm-macrosUpgrade postgresql-llvmjitUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-test | Aug 29, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade postgresql-plpython3Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade pg_repack-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-staticUpgrade pgaudit-debuginfoUpgrade postgresql-server-debuginfoUpgrade pg_repackUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plperl | Dec 22, 2021 | Dec 21, 2021 |
| Debian | — | Upgrade postgresql-13 | Jul 30, 2024 | Mar 2, 2022 |
| Freebsd | — | Upgrade postgresql13-serverUpgrade postgresql12-serverUpgrade postgresql11-server | Nov 4, 2022 | Aug 12, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 2, 2022 |
| Oracle_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade pg_repackUpgrade postgresql-plpython3 | Dec 23, 2021 | Aug 12, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.4 | Aug 13, 2021 | Aug 13, 2021 |
| Redhat_linux | — | Upgrade postgresql-upgrade-develUpgrade postgresql-test-debuginfoUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-testUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-plperlUpgrade pg_repack-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresqlUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgradeUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debuginfo | Dec 22, 2021 | Dec 21, 2021 |
| Rocky_linux | — | Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3Upgrade pg_repack-debugsourceUpgrade postgresql-serverUpgrade postgresql-plperl-debuginfoUpgrade pgauditUpgrade postgresql-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-debuginfoUpgrade postgresqlUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repackUpgrade postgresql-static | Mar 12, 2024 | Mar 2, 2022 |
| Suse | — | Upgrade postgresql13-llvmjitUpgrade libpq5Upgrade postgresql12-serverUpgrade postgresql12-plperlUpgrade libpq5-32bitUpgrade postgresql12Upgrade postgresql12-develUpgrade postgresql13-server-develUpgrade postgresql12-plpythonUpgrade postgresql12-docsUpgrade postgresql12-server-develUpgrade postgresql13-docsUpgrade postgresql13-contribUpgrade libecpg6-32bitUpgrade postgresql13Upgrade postgresql13-develUpgrade postgresql12-llvmjitUpgrade postgresql13-pltclUpgrade postgresql12-pltclUpgrade postgresql13-llvmjit-develUpgrade postgresql13-serverUpgrade postgresql13-testUpgrade libecpg6Upgrade postgresql12-testUpgrade postgresql13-plperlUpgrade postgresql12-contribUpgrade postgresql13-plpython | Sep 17, 2021 | Aug 12, 2021 |
| Ubuntu | — | Upgrade postgresql-13Upgrade postgresql-12 | Aug 14, 2021 | Aug 12, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub