The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privileges via a function that is (1) defined in another language or (2) not allowed to be directly called by the user due to permissions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Sep 20, 2017 | Mar 31, 2014 |
| Centos_linux | — | Upgrade postgresql84-develUpgrade postgresql-contribUpgrade postgresql84-tclUpgrade postgresql-pltclUpgrade postgresql-plUpgrade postgresql84-testUpgrade postgresql84-contribUpgrade postgresql84-serverUpgrade postgresql-pythonUpgrade postgresql-plpythonUpgrade postgresql84-docsUpgrade postgresql-develUpgrade postgresql84-pltclUpgrade postgresql84-pythonUpgrade postgresql84-plpythonUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql84-libsUpgrade postgresqlUpgrade postgresql84Upgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql84-plperlUpgrade postgresql-tcl | Dec 1, 2016 | Mar 31, 2014 |
| Debian | — | Upgrade postgresql-9.1Upgrade postgresql-8.4Upgrade postgresql-plsh | Jul 30, 2024 | Mar 31, 2014 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Feb 20, 2014 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Mar 31, 2014 |
| Oracle_linux | — | Upgrade postgresql84-libsUpgrade postgresql84-pythonUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql84-serverUpgrade postgresql-serverUpgrade postgresql84-develUpgrade postgresql-pltclUpgrade postgresql84-tclUpgrade postgresql84-contribUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql84-pltclUpgrade postgresql-testUpgrade postgresql84Upgrade postgresql-docsUpgrade postgresql84-plperlUpgrade postgresql84-plpythonUpgrade postgresql84-testUpgrade postgresqlUpgrade postgresql84-docs | Oct 16, 2024 | Mar 28, 2014 |
| Postgres | — | Upgrade to PostgreSQL version 9.3.3 | Apr 1, 2014 | Mar 31, 2014 |
| Suse | — | Upgrade postgresql10Upgrade postgresql94-docsUpgrade postgresql94Upgrade postgresql10-serverUpgrade postgresql91-serverUpgrade postgresql93-contribUpgrade postgresql10-contribUpgrade libpq5Upgrade postgresql94-contribUpgrade postgresql91-docsUpgrade postgresql10-docsUpgrade postgresql96Upgrade postgresql10-develUpgrade postgresql96-develUpgrade libecpg6Upgrade postgresql91Upgrade postgresql10-plpythonUpgrade postgresql91-develUpgrade postgresql94-develUpgrade postgresql91-contribUpgrade postgresql96-contribUpgrade postgresql96-docsUpgrade postgresql10-pltclUpgrade postgresql93-develUpgrade postgresql96-serverUpgrade postgresql93-docsUpgrade libpq5-32bitUpgrade postgresql94-serverUpgrade postgresql93Upgrade postgresql93-serverUpgrade postgresql10-plperl | Dec 18, 2015 | Mar 28, 2014 |
| Ubuntu | — | Upgrade postgresql-8.4Upgrade postgresql-9.1 | Nov 8, 2024 | Mar 31, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub