The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade postgresql-contribUpgrade postgresql84-serverUpgrade postgresql84-tclUpgrade postgresql84-testUpgrade postgresql-develUpgrade postgresql84-pythonUpgrade postgresql-pltclUpgrade postgresql84-develUpgrade postgresql84Upgrade postgresql-plpythonUpgrade postgresql84-pltclUpgrade postgresql84-docsUpgrade postgresql84-contribUpgrade postgresql-testUpgrade postgresql84-plpythonUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql84-plperlUpgrade postgresql-docsUpgrade postgresql84-libsUpgrade postgresqlUpgrade postgresql-server | Dec 1, 2016 | Jul 18, 2012 |
| Freebsd | — | Upgrade postgresql-client | Dec 10, 2025 | Feb 28, 2012 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Jul 18, 2012 |
| Oracle_linux | — | Upgrade postgresql84-pltclUpgrade postgresql84-docsUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql84Upgrade postgresql84-tclUpgrade postgresql-docsUpgrade postgresql84-contribUpgrade postgresql-develUpgrade postgresql84-develUpgrade postgresql84-testUpgrade postgresql84-pythonUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql84-plperlUpgrade postgresql84-serverUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql84-libsUpgrade postgresql84-plpythonUpgrade postgresql-plperlUpgrade postgresql-server | Oct 16, 2024 | Jul 18, 2012 |
| Postgres | — | Upgrade to PostgreSQL version 8.4.11Upgrade to PostgreSQL version 9.1.3Upgrade to PostgreSQL version 9.0.7 | Feb 24, 2013 | Jul 18, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2012 |
| Suse | — | Upgrade postgresql94-docsUpgrade postgresql96Upgrade postgresql10-contribUpgrade postgresql96-develUpgrade postgresql10-serverUpgrade libecpg6Upgrade postgresql93-contribUpgrade postgresql10Upgrade libpq5Upgrade postgresql94-contribUpgrade postgresql10-develUpgrade postgresql96-docsUpgrade postgresql10-pltclUpgrade postgresql10-plpythonUpgrade postgresql93-develUpgrade libpq5-32bitUpgrade postgresql94-develUpgrade postgresql94-serverUpgrade postgresql93-docsUpgrade postgresql96-contribUpgrade postgresql93-serverUpgrade postgresql10-plperlUpgrade postgresql94Upgrade postgresql96-serverUpgrade postgresql93Upgrade postgresql10-docs | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade postgresql-8.3Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Jul 18, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub