The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresqlUpgrade postgresql14 | Aug 22, 2024 | May 10, 2018 |
| Amazon_linux | — | Upgrade postgresql96 | Dec 7, 2018 | May 10, 2018 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 31, 2018 | May 10, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-plperl | Aug 31, 2020 | May 10, 2018 |
| Postgres | — | Upgrade to PostgreSQL version 10.4 | Jan 7, 2019 | May 10, 2018 |
| Suse | — | Upgrade postgresql-llvmjitUpgrade postgresql10-pltclUpgrade postgresql12-server-develUpgrade postgresql12-testUpgrade postgresql10-contribUpgrade libecpg6Upgrade postgresql12-plperlUpgrade postgresql-server-develUpgrade postgresql96-contribUpgrade postgresql-plpythonUpgrade postgresql96-plpythonUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql96-develUpgrade postgresql-develUpgrade postgresql96-pltclUpgrade postgresql96-docsUpgrade postgresql12-pltclUpgrade postgresql10-docsUpgrade postgresql10-plpythonUpgrade postgresql12-develUpgrade postgresql12-plpythonUpgrade postgresql10-develUpgrade postgresql10-plperlUpgrade postgresql96-serverUpgrade postgresql12-llvmjitUpgrade postgresql96-plperlUpgrade postgresql12-contribUpgrade libpq5-32bitUpgrade postgresql96-testUpgrade postgresql-serverUpgrade postgresql12-docsUpgrade libecpg6-32bitUpgrade postgresql10-serverUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql10-testUpgrade libpq5Upgrade postgresql10Upgrade postgresql96Upgrade postgresql-testUpgrade postgresql12Upgrade postgresql12-serverUpgrade postgresql-plperl | Jun 16, 2018 | May 10, 2018 |
| Ubuntu | — | Upgrade postgresql-10 | Nov 19, 2024 | May 10, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub