The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly enforce the ADMIN OPTION restriction, which allows remote authenticated members of a role to add or remove arbitrary users to that role by calling the SET ROLE command before the associated GRANT command.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Sep 20, 2017 | Mar 31, 2014 |
| Centos_linux | — | Upgrade postgresql-contribUpgrade postgresql84Upgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql84-plperlUpgrade postgresql84-tclUpgrade postgresql-testUpgrade postgresql84-pltclUpgrade postgresql84-contribUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql84-testUpgrade postgresql-tclUpgrade postgresql84-docsUpgrade postgresql-pythonUpgrade postgresql84-pythonUpgrade postgresql84-plpythonUpgrade postgresql-plUpgrade postgresql84-develUpgrade postgresql84-libsUpgrade postgresql-plpythonUpgrade postgresql84-server | Dec 1, 2016 | Mar 31, 2014 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Feb 20, 2014 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Mar 31, 2014 |
| Oracle_linux | — | Upgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql84-plpythonUpgrade postgresql84-serverUpgrade postgresql84-pythonUpgrade postgresqlUpgrade postgresql84-pltclUpgrade postgresql84-plperlUpgrade postgresql84-docsUpgrade postgresql84Upgrade postgresql84-testUpgrade postgresql84-tclUpgrade postgresql84-contribUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql84-develUpgrade postgresql84-libsUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-contrib | Oct 16, 2024 | Mar 28, 2014 |
| Postgres | — | Upgrade to PostgreSQL version 9.3.3 | Apr 1, 2014 | Mar 31, 2014 |
| Suse | — | Upgrade postgresql94-docsUpgrade postgresql10-docsUpgrade postgresql93Upgrade postgresql91-serverUpgrade postgresql94-contribUpgrade postgresql10-develUpgrade libpq5-32bitUpgrade postgresql91-contribUpgrade postgresql91-develUpgrade postgresql10Upgrade postgresql91-docsUpgrade postgresql93-develUpgrade postgresql96-serverUpgrade postgresql10-serverUpgrade postgresql94-develUpgrade postgresql96Upgrade postgresql10-plpythonUpgrade postgresql10-plperlUpgrade postgresql96-docsUpgrade postgresql94Upgrade postgresql91Upgrade libpq5Upgrade postgresql93-serverUpgrade postgresql96-develUpgrade libecpg6Upgrade postgresql94-serverUpgrade postgresql96-contribUpgrade postgresql10-pltclUpgrade postgresql93-docsUpgrade postgresql10-contribUpgrade postgresql93-contrib | Dec 18, 2015 | Mar 28, 2014 |
| Ubuntu | — | Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Mar 31, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub