A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit this to read the most common values of certain columns. Affected columns are those for which the attacker has SELECT privilege and for which, in an ordinary query, row-level security prunes the set of rows visible to the attacker.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-server-develUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-plpython3 | May 4, 2022 | Jul 30, 2019 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql15Upgrade postgresql14 | Aug 22, 2024 | Jul 30, 2019 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql96 | Oct 28, 2020 | May 9, 2019 |
| Centos_linux | — | Upgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-upgrade | Sep 9, 2020 | Jul 30, 2019 |
| Debian | — | Upgrade postgresql-11 | May 10, 2019 | May 10, 2019 |
| Freebsd | — | Upgrade postgresql11-serverUpgrade postgresql96-serverUpgrade postgresql10-serverUpgrade postgresql95-server | May 11, 2019 | May 9, 2019 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Mar 13, 2020 | Jul 30, 2019 |
| Oracle_linux | — | Upgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresqlUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-testUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-plperlUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresqlUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-pltclUpgrade rh-postgresql10-postgresql-libsUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql-server | Sep 10, 2020 | May 9, 2019 |
| Postgres | — | Upgrade to PostgreSQL version 11.3Upgrade to PostgreSQL version 9.5.17Upgrade to PostgreSQL version 9.6.13Upgrade to PostgreSQL version 10.8 | Jun 26, 2019 | Jun 26, 2019 |
| Redhat_linux | — | Upgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-plpython3-debuginfo | Sep 9, 2020 | Jul 30, 2019 |
| Suse | — | Upgrade postgresql-testUpgrade libecpg6-32bitUpgrade postgresql-docsUpgrade libpq5Upgrade postgresql-plperlUpgrade postgresql12-serverUpgrade postgresql-develUpgrade postgresql12-contribUpgrade postgresqlUpgrade libpq5-32bitUpgrade postgresql96-serverUpgrade postgresql12Upgrade postgresql10-serverUpgrade postgresql-serverUpgrade postgresql10Upgrade postgresql96-testUpgrade postgresql12-docsUpgrade postgresql12-server-develUpgrade postgresql96-plpythonUpgrade postgresql12-plpythonUpgrade postgresql-pltclUpgrade postgresql96-contribUpgrade postgresql-plpythonUpgrade postgresql10-contribUpgrade postgresql12-llvmjitUpgrade postgresql10-develUpgrade postgresql96-pltclUpgrade postgresql10-plpythonUpgrade postgresql12-pltclUpgrade postgresql-server-develUpgrade postgresql10-testUpgrade postgresql12-develUpgrade postgresql10-docsUpgrade postgresql10-pltclUpgrade postgresql12-testUpgrade libecpg6Upgrade postgresql10-plperlUpgrade postgresql-contribUpgrade postgresql96-docsUpgrade postgresql96-develUpgrade postgresql12-plperlUpgrade postgresql96Upgrade postgresql96-plperlUpgrade postgresql-llvmjit | Jun 15, 2019 | May 9, 2019 |
| Ubuntu | — | Upgrade postgresql-9.5Upgrade postgresql-10Upgrade postgresql-11 | May 14, 2019 | May 9, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub