A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Nov 23, 2020 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql14Upgrade postgresqlUpgrade postgresql12 | Jan 19, 2021 | Nov 23, 2020 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql96 | Jan 15, 2021 | Nov 17, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 23, 2020 |
| Centos_linux | — | Upgrade libpq-debuginfoUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-docs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade pgaudit-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-develUpgrade libpqUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgres-decoderbufs-debugsourceUpgrade libpq-debugsourceUpgrade pgauditUpgrade postgresql-debugsourceUpgrade libpq-devel-debuginfoUpgrade postgresql-docsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade libpq-develUpgrade postgresql-upgrade-devel | Dec 15, 2020 | Nov 23, 2020 |
| Debian | — | Upgrade postgresql-13 | Dec 3, 2020 | Nov 23, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Dec 7, 2020 | Nov 23, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-contrib | Dec 15, 2020 | Nov 23, 2020 |
| Oracle_linux | — | Upgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-plperlUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade rh-postgresql10-postgresql-serverUpgrade postgresqlUpgrade rh-postgresql10-postgresql-contribUpgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade rh-postgresql10-postgresql-staticUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgres-decoderbufsUpgrade libpqUpgrade rh-postgresql10-postgresql-syspathsUpgrade libpq-develUpgrade pgauditUpgrade rh-postgresql10-postgresql-develUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql | Dec 15, 2020 | Nov 12, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 13.1 | Nov 16, 2020 | Nov 16, 2020 |
| Redhat_linux | — | Upgrade libpq-debugsourceUpgrade libpq-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debuginfoNo solution existsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-pltclUpgrade libpq-debuginfoUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-staticUpgrade pgauditUpgrade libpqUpgrade postgresql-serverUpgrade libpq-develUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debugsourceUpgrade postgresql-plperl | Dec 15, 2020 | Nov 23, 2020 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgres-decoderbufsUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsource | Mar 12, 2024 | Nov 23, 2020 |
| Suse | — | Upgrade postgresql12-serverUpgrade postgresql10-plperlUpgrade libecpg6Upgrade postgresql96-plperlUpgrade postgresql12-plpythonUpgrade postgresql13-plperlUpgrade postgresql96-pltclUpgrade postgresql13-testUpgrade postgresql13-contribUpgrade postgresql13-serverUpgrade postgresql96-contribUpgrade postgresql-contribUpgrade postgresql-llvmjitUpgrade postgresql96-docsUpgrade postgresql13-pltclUpgrade postgresql12-pltclUpgrade postgresql12-plperlUpgrade postgresql13Upgrade postgresql12-docsUpgrade postgresql10-pltclUpgrade postgresql-develUpgrade postgresql10-develUpgrade postgresql12-server-develUpgrade postgresql12-develUpgrade postgresql-plpythonUpgrade postgresql13-docsUpgrade postgresql10-docsUpgrade libpq5-32bitUpgrade libpq5Upgrade postgresql96Upgrade postgresql10-contribUpgrade postgresql13-develUpgrade postgresql13-plpythonUpgrade libecpg6-32bitUpgrade postgresql13-server-develUpgrade postgresql-serverUpgrade postgresql10Upgrade postgresql96-serverUpgrade postgresql12-testUpgrade postgresql-docsUpgrade postgresql-server-develUpgrade postgresql12-contribUpgrade postgresql10-plpythonUpgrade postgresql10-serverUpgrade postgresqlUpgrade postgresql96-plpythonUpgrade postgresql10-testUpgrade postgresql12Upgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql12-llvmjitUpgrade postgresql-pltcl | Nov 25, 2020 | Nov 17, 2020 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-9.5 | Nov 18, 2020 | Nov 17, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub