A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user could store such rows.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade pg_repackUpgrade postgresql | Dec 27, 2023 | Aug 11, 2023 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql13Upgrade postgresql12Upgrade postgresql14Upgrade postgresql15 | Aug 22, 2024 | Aug 11, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-contribUpgrade postgresql15-pltclUpgrade postgresql15-private-develUpgrade postgresql15-plperlUpgrade postgresql15-upgrade-develUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-plpython3Upgrade postgresql15-contrib-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-testUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-staticUpgrade postgresql15-upgradeUpgrade postgresql15-test-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15Upgrade postgresql15-docsUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-llvmjit | Feb 17, 2025 | Aug 10, 2023 |
| Centos_linux | — | Upgrade postgresql-staticUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-debuginfoUpgrade pgauditUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-private-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-debugsourceUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresql-plperlUpgrade pgaudit-debugsourceUpgrade postgresql-test-debuginfoUpgrade pgaudit-debuginfoUpgrade pg_repackUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docsUpgrade postgresql-docs-debuginfoUpgrade postgresql-serverUpgrade postgresql-pltcl | Dec 14, 2023 | Aug 11, 2023 |
| Debian | — | Upgrade postgresql-15 | Nov 20, 2023 | Aug 11, 2023 |
| Freebsd | — | Upgrade postgresql-server | Aug 11, 2023 | Aug 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade pg_repackUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-private-libsUpgrade pgauditUpgrade postgresql-private-devel | Dec 14, 2023 | Aug 10, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 15.4 | Aug 11, 2023 | Aug 11, 2023 |
| Redhat_linux | — | Upgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-staticUpgrade pgauditUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade pg_repackUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-testUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade pgaudit-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-docs-debuginfo | Dec 14, 2023 | Aug 11, 2023 |
| Rocky_linux | — | Upgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debugsourceUpgrade pgauditUpgrade pgaudit-debuginfoUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repackUpgrade pgaudit-debugsource | Mar 5, 2024 | Aug 11, 2023 |
| Suse | — | Upgrade postgresql15-llvmjit-develUpgrade libpq5Upgrade libecpg6-32bitUpgrade postgresql15-llvmjitUpgrade postgresql15-contribUpgrade libpq5-32bitUpgrade postgresql15Upgrade postgresql15-plpythonUpgrade postgresql15-pltclUpgrade postgresql15-serverUpgrade libecpg6Upgrade postgresql15-develUpgrade postgresql15-server-develUpgrade postgresql15-testUpgrade postgresql15-docsUpgrade postgresql15-plperl | Aug 18, 2023 | Aug 11, 2023 |
| Ubuntu | — | Upgrade postgresql-15Upgrade postgresql-client-15 | Aug 18, 2023 | Aug 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2026 | Aug 11, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub