A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade pg_repackUpgrade postgresql-plpython3Upgrade postgresql-upgrade-devel | Jun 7, 2022 | May 30, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql12Upgrade postgresqlUpgrade postgresql13Upgrade postgresql15 | Aug 22, 2024 | Aug 31, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpython2Upgrade postgresql-contribUpgrade postgresql-llvmjitUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade libpq-develUpgrade libpq-debuginfoUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-plpython3Upgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-serverUpgrade libpqUpgrade postgresql-libs | Sep 30, 2022 | Aug 31, 2022 |
| Centos_linux | — | Upgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-staticUpgrade pg_repackUpgrade pgaudit-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-test-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-private-libs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-develUpgrade postgresql-contrib | May 31, 2022 | May 30, 2022 |
| Debian | — | Upgrade postgresql-13 | May 16, 2022 | May 16, 2022 |
| Freebsd | — | Upgrade postgresql12-serverUpgrade postgresql14-serverUpgrade postgresql11-serverUpgrade postgresql13-serverUpgrade postgresql10-server | Nov 4, 2022 | May 11, 2022 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-contrib | Oct 28, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-server | Aug 18, 2022 | Aug 16, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-contribUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-plpython | Aug 18, 2022 | Aug 16, 2022 |
| Oracle_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-develUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-private-libsUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresql-plperlUpgrade postgresql-server-devel | Jun 2, 2022 | May 12, 2022 |
| Postgres | — | Upgrade to PostgreSQL version 10.21Upgrade to PostgreSQL version 14.3Upgrade to PostgreSQL version 11.16Upgrade to PostgreSQL version 13.7Upgrade to PostgreSQL version 12.11 | Aug 31, 2022 | Aug 31, 2022 |
| Redhat_linux | — | Upgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql-upgrade-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-testUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgradeNo solution existsUpgrade postgresql-docs-debuginfoUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-server-debuginfoUpgrade pg_repackUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-test-rpm-macros | May 31, 2022 | May 30, 2022 |
| Rocky_linux | — | Upgrade postgresql-private-develUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-staticUpgrade pgauditUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-testUpgrade postgresql-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-test-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-private-libsUpgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperlUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repackUpgrade pgaudit-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-contribUpgrade pg_repack-debuginfoUpgrade postgresql-plperl-debuginfo | Mar 12, 2024 | Aug 31, 2022 |
| Suse | — | Upgrade postgresql13-pltclUpgrade postgresql12-develUpgrade postgresql-server-develUpgrade postgresql13-llvmjit-develUpgrade postgresql13-server-develUpgrade postgresql10-plpythonUpgrade postgresql14-serverUpgrade postgresql10-pltclUpgrade postgresql12-llvmjitUpgrade postgresql10-plperlUpgrade postgresql12-plperlUpgrade postgresql12Upgrade postgresql14-docsUpgrade postgresql13-contribUpgrade libpq5Upgrade postgresql12-server-develUpgrade postgresql-plperlUpgrade postgresql14-server-develUpgrade postgresql10-testUpgrade postgresql-serverUpgrade postgresql10-contribUpgrade postgresql14-testUpgrade postgresqlUpgrade postgresql14-pltclUpgrade postgresql13-develUpgrade postgresql12-plpythonUpgrade libecpg6Upgrade postgresql10-llvmjit-develUpgrade postgresql14-llvmjit-develUpgrade postgresql-plpythonUpgrade postgresql12-llvmjit-develUpgrade postgresql12-testUpgrade libecpg6-32bitUpgrade postgresql13-docsUpgrade postgresql-pltclUpgrade libpq5-32bitUpgrade postgresql13-plperlUpgrade postgresql10Upgrade postgresql10-docsUpgrade postgresql-docsUpgrade postgresql13-serverUpgrade postgresql14-devel-miniUpgrade postgresql13Upgrade postgresql14-develUpgrade postgresql12-pltclUpgrade postgresql12-docsUpgrade postgresql13-plpythonUpgrade postgresql14-plperlUpgrade postgresql14-llvmjitUpgrade postgresql13-testUpgrade postgresql14-contribUpgrade postgresql14-plpythonUpgrade postgresql13-llvmjitUpgrade postgresql10-develUpgrade postgresql14Upgrade postgresql15Upgrade postgresql10-serverUpgrade postgresql-develUpgrade postgresql12-serverUpgrade postgresql12-contribUpgrade postgresql-contrib | Oct 26, 2022 | Aug 31, 2022 |
| Ubuntu | — | Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-13Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-14 | May 25, 2022 | May 23, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub