The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql15Upgrade postgresql | Aug 22, 2024 | Nov 13, 2018 |
| Freebsd | — | Upgrade postgresql96-serverUpgrade postgresql93-serverUpgrade postgresql10-serverUpgrade postgresql94-serverUpgrade postgresql95-server | Nov 9, 2018 | Nov 8, 2018 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Dec 3, 2018 | Nov 13, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-docsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-devel | Nov 28, 2019 | Nov 13, 2018 |
| Postgres | — | Upgrade to PostgreSQL version 11.1 | Jan 7, 2019 | Nov 13, 2018 |
| Suse | — | Upgrade postgresql10-pltclUpgrade libpq5Upgrade postgresql10Upgrade libecpg6-32bitUpgrade postgresql10-testUpgrade libecpg6Upgrade postgresql10-plpythonUpgrade postgresql10-contribUpgrade postgresql10-serverUpgrade postgresql10-plperlUpgrade postgresql10-docsUpgrade postgresql10-develUpgrade libpq5-32bit | Nov 16, 2018 | Nov 8, 2018 |
| Ubuntu | — | Upgrade postgresql-10 | Nov 16, 2018 | Nov 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 13, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub