A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pgauditUpgrade postgresqlUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade pg_repackUpgrade postgresql-plpython3 | Jun 7, 2022 | May 30, 2022 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql14Upgrade postgresql12Upgrade postgresql13Upgrade postgresql15 | Aug 22, 2024 | Aug 31, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-llvmjitUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython2Upgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade libpq-debuginfoUpgrade postgresql-private-develUpgrade postgresqlUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade libpqUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-testUpgrade libpq-devel | Sep 30, 2022 | Aug 31, 2022 |
| Centos_linux | — | Upgrade postgresql-test-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-libsUpgrade pg_repackUpgrade postgresql-plpythonUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufsUpgrade pg_repack-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-develUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-plpython3-debuginfo | May 31, 2022 | May 30, 2022 |
| Debian | — | Upgrade postgresql-13 | May 16, 2022 | May 16, 2022 |
| Freebsd | — | Upgrade postgresql10-serverUpgrade postgresql11-serverUpgrade postgresql13-serverUpgrade postgresql12-serverUpgrade postgresql14-server | Nov 4, 2022 | May 11, 2022 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-contrib | Oct 28, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-libs | Aug 18, 2022 | Aug 16, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-devel | Aug 18, 2022 | Aug 16, 2022 |
| Oracle_linux | — | Upgrade postgresql-staticUpgrade postgresql-plpythonUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-upgradeUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-plpython3Upgrade postgresql-pltcl | Jun 2, 2022 | May 12, 2022 |
| Postgres | — | Upgrade to PostgreSQL version 10.21Upgrade to PostgreSQL version 14.3Upgrade to PostgreSQL version 11.16Upgrade to PostgreSQL version 13.7Upgrade to PostgreSQL version 12.11 | Aug 31, 2022 | Aug 31, 2022 |
| Redhat_linux | — | Upgrade pg_repackUpgrade postgresql-plpython3Upgrade postgresql-private-develUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-private-libsUpgrade postgresql-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-pltclUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-plperlUpgrade pgaudit-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-upgrade-devel-debuginfoNo solution existsUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-upgrade-debuginfoUpgrade pg_repack-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debugsourceUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-plperl-debuginfoUpgrade postgresql-devel | May 31, 2022 | May 30, 2022 |
| Rocky_linux | — | Upgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade pg_repackUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade pg_repack-debugsourceUpgrade postgresql-private-develUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresql-test-debuginfo | Mar 12, 2024 | Aug 31, 2022 |
| Suse | — | Upgrade postgresql10-llvmjit-develUpgrade libecpg6Upgrade postgresql12Upgrade postgresql14-serverUpgrade postgresql12-plpythonUpgrade postgresql12-plperlUpgrade postgresql13-contribUpgrade postgresql12-llvmjitUpgrade postgresql10-plpythonUpgrade postgresql14-server-develUpgrade libecpg6-32bitUpgrade libpq5Upgrade postgresql12-server-develUpgrade postgresql-plperlUpgrade postgresql14-llvmjit-develUpgrade postgresql-plpythonUpgrade postgresql10-plperlUpgrade postgresql13-llvmjit-develUpgrade postgresql13-pltclUpgrade postgresql12-develUpgrade postgresql13-server-develUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql10-pltclUpgrade postgresql14-docsUpgrade postgresql10-contribUpgrade postgresql13-develUpgrade postgresql14-testUpgrade postgresqlUpgrade postgresql10-testUpgrade postgresql14-pltclUpgrade postgresql12-llvmjit-develUpgrade postgresql12-testUpgrade postgresql12-pltclUpgrade postgresql15Upgrade postgresql13-llvmjitUpgrade postgresql-docsUpgrade postgresql10-docsUpgrade postgresql10Upgrade postgresql14-contribUpgrade postgresql13-serverUpgrade postgresql-contribUpgrade postgresql14-llvmjitUpgrade postgresql13-plpythonUpgrade postgresql14-plperlUpgrade postgresql14-devel-miniUpgrade postgresql13-testUpgrade postgresql13-plperlUpgrade postgresql10-serverUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql14Upgrade postgresql14-plpythonUpgrade postgresql10-develUpgrade libpq5-32bitUpgrade postgresql12-serverUpgrade postgresql12-contribUpgrade postgresql14-develUpgrade postgresql12-docsUpgrade postgresql13-docsUpgrade postgresql13 | Oct 26, 2022 | Aug 31, 2022 |
| Ubuntu | — | Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-10Upgrade postgresql-13Upgrade postgresql-12Upgrade postgresql-14 | May 25, 2022 | May 23, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub