The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pg_repackUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-testUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-upgrade | May 4, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql13Upgrade postgresql12Upgrade postgresql14Upgrade postgresql | Aug 22, 2024 | Mar 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-docsUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-plpython2Upgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-llvmjitUpgrade postgresql-debuginfoUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-plperl | Aug 29, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-testUpgrade pg_repack-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-debugsourceUpgrade pgauditUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade pg_repack-debugsourceUpgrade pg_repack | Dec 22, 2021 | Dec 21, 2021 |
| Debian | — | Upgrade postgresql-13 | Jul 30, 2024 | Mar 2, 2022 |
| Freebsd | — | Upgrade postgresql13-serverUpgrade postgresql12-serverUpgrade postgresql11-server | Nov 4, 2022 | Aug 12, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 2, 2022 |
| Oracle_linux | — | Upgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade pg_repackUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-pltcl | Dec 23, 2021 | Aug 12, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.4 | Aug 13, 2021 | Aug 13, 2021 |
| Redhat_linux | — | Upgrade pgaudit-debugsourceUpgrade postgresql-docsUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contribUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade postgresql-testUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-debugsourceUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade pgaudit-debuginfo | Dec 22, 2021 | Dec 21, 2021 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltclUpgrade postgresql-test-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade pg_repackUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgres-decoderbufs-debuginfoUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade pgaudit | Mar 12, 2024 | Mar 2, 2022 |
| Suse | — | Upgrade postgresql12-serverUpgrade libpq5-32bitUpgrade postgresql12Upgrade postgresql13-llvmjitUpgrade libpq5Upgrade postgresql12-plperlUpgrade postgresql13-server-develUpgrade postgresql12-server-develUpgrade postgresql13-plpythonUpgrade libecpg6Upgrade postgresql12-plpythonUpgrade libecpg6-32bitUpgrade postgresql12-docsUpgrade postgresql13-pltclUpgrade postgresql12-develUpgrade postgresql12-pltclUpgrade postgresql13-docsUpgrade postgresql13-llvmjit-develUpgrade postgresql13Upgrade postgresql13-develUpgrade postgresql12-testUpgrade postgresql12-contribUpgrade postgresql13-plperlUpgrade postgresql13-contribUpgrade postgresql13-serverUpgrade postgresql13-testUpgrade postgresql12-llvmjit | Sep 17, 2021 | Aug 12, 2021 |
| Ubuntu | — | Upgrade postgresql-13Upgrade postgresql-12 | Aug 14, 2021 | Aug 12, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub