The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An active Man-in-the-Middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql15Upgrade postgresql14 | Aug 30, 2017 | May 12, 2017 |
| Amazon_linux | — | Upgrade postgresql94Upgrade postgresql93Upgrade postgresql95 | Jun 7, 2017 | May 12, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 12, 2017 |
| Debian | — | Upgrade postgresql-9.6 | May 13, 2017 | May 12, 2017 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | May 12, 2017 |
| Postgres | — | Upgrade to PostgreSQL version 9.4.12Upgrade to PostgreSQL version 9.3.17Upgrade to PostgreSQL version 9.5.7Upgrade to PostgreSQL version 9.6.3 | May 15, 2017 | May 12, 2017 |
| Suse | — | Upgrade postgresql10Upgrade postgresql94-serverUpgrade postgresql10-contribUpgrade postgresql93-serverUpgrade libpq5Upgrade postgresql10-serverUpgrade postgresql93-contribUpgrade postgresql94Upgrade postgresql10-docsUpgrade postgresql96-serverUpgrade postgresql96-docsUpgrade postgresql93-docsUpgrade postgresql94-docsUpgrade postgresql96Upgrade postgresql10-pltclUpgrade postgresql96-develUpgrade postgresql10-develUpgrade libpq5-32bitUpgrade postgresql96-contribUpgrade postgresql94-contribUpgrade postgresql10-plpythonUpgrade postgresql10-plperlUpgrade postgresql94-develUpgrade postgresql93Upgrade libecpg6 | May 31, 2017 | May 12, 2017 |
| Ubuntu | — | Upgrade postgresql-9.3Upgrade postgresql-9.5Upgrade postgresql-9.6 | Nov 19, 2024 | May 12, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub