The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade postgresql-serverUpgrade postgresql | Dec 10, 2025 | Apr 24, 2008 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Jan 9, 2008 |
| Oracle_linux | — | Upgrade postgresql-plUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-pythonUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-tcl | Oct 16, 2024 | Jan 9, 2008 |
| Suse | — | Upgrade postgresql91-contribUpgrade postgresql-docsUpgrade postgresql93-docsUpgrade postgresql93Upgrade postgresql10-serverUpgrade postgresql96Upgrade postgresql-libs-32bitUpgrade postgresql96-serverUpgrade postgresql94Upgrade postgresql10-plperlUpgrade postgresql-libs-x86Upgrade postgresql94-contribUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql10-develUpgrade postgresql91-serverUpgrade postgresql10-pltclUpgrade libecpg6Upgrade postgresql94-develUpgrade postgresql94-docsUpgrade postgresql96-develUpgrade postgresql10-plpythonUpgrade postgresql10-docsUpgrade postgresql10-contribUpgrade postgresql10Upgrade postgresql96-contribUpgrade postgresql-contribUpgrade libpq5-32bitUpgrade libpq5Upgrade postgresql96-docsUpgrade postgresql93-serverUpgrade postgresql93-develUpgrade postgresql91Upgrade postgresql93-contribUpgrade postgresql-develUpgrade postgresql91-docsUpgrade postgresql-serverUpgrade postgresql94-server | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade postgresql-pltcl-8.1Upgrade postgresql-8.1Upgrade postgresql-pltcl-8.2Upgrade postgresql-8.2 | Nov 8, 2024 | Jan 9, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub