PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Feb 17, 2016 |
| Debian | — | Upgrade postgresql-9.1Upgrade postgresql-9.4 | Feb 17, 2016 | Feb 13, 2016 |
| Freebsd | — | Upgrade postgresql91-serverUpgrade postgresql92-serverUpgrade postgresql94-serverUpgrade postgresql93-serverUpgrade postgresql95-server | Dec 10, 2025 | Feb 12, 2016 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Feb 17, 2016 |
| Postgres | — | Upgrade to PostgreSQL version 9.1.20Upgrade to PostgreSQL version 9.3.11Upgrade to PostgreSQL version 9.2.15Upgrade to PostgreSQL version 9.4.6Upgrade to PostgreSQL version 9.5.1 | Feb 12, 2016 | Feb 12, 2016 |
| Suse | — | Upgrade postgresql94-develUpgrade postgresql94-docsUpgrade postgresql94-contribUpgrade postgresql96-contribUpgrade postgresql96Upgrade postgresql96-serverUpgrade postgresql96-docsUpgrade postgresql93-docsUpgrade postgresql10-plperlUpgrade postgresql94Upgrade postgresql93Upgrade postgresql10-pltclUpgrade postgresql10-plpythonUpgrade libecpg6Upgrade postgresql10-docsUpgrade postgresql10Upgrade postgresql93-develUpgrade postgresql93-serverUpgrade postgresql94-serverUpgrade postgresql10-develUpgrade postgresql10-contribUpgrade postgresql93-contribUpgrade libpq5Upgrade postgresql10-serverUpgrade libpq5-32bitUpgrade postgresql96-devel | Feb 22, 2016 | Feb 17, 2016 |
| Ubuntu | — | Upgrade postgresql-9.1Upgrade postgresql-9.4Upgrade postgresql-9.3 | Feb 17, 2016 | Feb 11, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub