PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Feb 17, 2016 |
| Debian | — | Upgrade postgresql-9.1Upgrade postgresql-9.4 | Feb 17, 2016 | Feb 13, 2016 |
| Freebsd | — | Upgrade postgresql93-serverUpgrade postgresql95-serverUpgrade postgresql94-serverUpgrade postgresql92-serverUpgrade postgresql91-server | Dec 10, 2025 | Feb 12, 2016 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Feb 17, 2016 |
| Postgres | — | Upgrade to PostgreSQL version 9.5.1Upgrade to PostgreSQL version 9.3.11Upgrade to PostgreSQL version 9.4.6Upgrade to PostgreSQL version 9.1.20Upgrade to PostgreSQL version 9.2.15 | Feb 12, 2016 | Feb 12, 2016 |
| Suse | — | Upgrade libpq5Upgrade postgresql10-develUpgrade postgresql93-contribUpgrade postgresql94-serverUpgrade postgresql93-develUpgrade postgresql10Upgrade postgresql10-contribUpgrade postgresql96-develUpgrade postgresql10-serverUpgrade postgresql93-serverUpgrade libpq5-32bitUpgrade postgresql96Upgrade postgresql10-pltclUpgrade postgresql93Upgrade postgresql10-plpythonUpgrade postgresql94Upgrade postgresql96-docsUpgrade postgresql94-contribUpgrade postgresql94-develUpgrade postgresql94-docsUpgrade postgresql10-docsUpgrade postgresql93-docsUpgrade libecpg6Upgrade postgresql10-plperlUpgrade postgresql96-serverUpgrade postgresql96-contrib | Feb 22, 2016 | Feb 17, 2016 |
| Ubuntu | — | Upgrade postgresql-9.3Upgrade postgresql-9.4Upgrade postgresql-9.1 | Feb 17, 2016 | Feb 11, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub