The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade postgresql84-libsUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql84-plpythonUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql84-plperlUpgrade postgresql84-docsUpgrade postgresql84-serverUpgrade postgresql84-tclUpgrade postgresql84-contribUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql84Upgrade postgresql84-pythonUpgrade postgresql-contribUpgrade postgresql84-pltclUpgrade postgresql84-develUpgrade postgresql-pltclUpgrade postgresql84-test | Dec 1, 2016 | Jul 18, 2012 |
| Freebsd | — | Upgrade postgresql-client | Dec 10, 2025 | Feb 28, 2012 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Jul 18, 2012 |
| Oracle_linux | — | Upgrade postgresql-develUpgrade postgresql84Upgrade postgresql84-contribUpgrade postgresql84-docsUpgrade postgresql-docsUpgrade postgresql84-tclUpgrade postgresql84-testUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql84-pltclUpgrade postgresql84-develUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql84-libsUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql84-plperlUpgrade postgresql-testUpgrade postgresql84-plpythonUpgrade postgresql84-serverUpgrade postgresql-libsUpgrade postgresql84-python | Oct 16, 2024 | Jul 18, 2012 |
| Postgres | — | Upgrade to PostgreSQL version 9.1.3Upgrade to PostgreSQL version 8.4.11Upgrade to PostgreSQL version 9.0.7 | Feb 24, 2013 | Jul 18, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2012 |
| Suse | — | Upgrade postgresql10-plperlUpgrade postgresql94-serverUpgrade libpq5-32bitUpgrade postgresql96-serverUpgrade postgresql93-serverUpgrade postgresql10-docsUpgrade postgresql10-pltclUpgrade postgresql96-contribUpgrade postgresql94-develUpgrade postgresql93-develUpgrade postgresql94Upgrade postgresql93-docsUpgrade postgresql93Upgrade postgresql10-plpythonUpgrade postgresql96-docsUpgrade postgresql96Upgrade postgresql96-develUpgrade postgresql94-contribUpgrade postgresql10-develUpgrade libpq5Upgrade postgresql94-docsUpgrade postgresql10-serverUpgrade postgresql93-contribUpgrade libecpg6Upgrade postgresql10-contribUpgrade postgresql10 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade postgresql-9.1Upgrade postgresql-8.4Upgrade postgresql-8.3 | Nov 8, 2024 | Jul 18, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub