The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3 | Nov 4, 2022 | Aug 18, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql13Upgrade postgresqlUpgrade postgresql12Upgrade postgresql15 | Mar 26, 2024 | Aug 18, 2022 |
| Centos_linux | — | Upgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresqlUpgrade postgresql-debugsourceUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade pgauditUpgrade postgresql-docsUpgrade pgaudit-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-staticUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfo | Oct 26, 2022 | Aug 18, 2022 |
| Debian | — | Upgrade postgresql-13 | Aug 17, 2022 | Aug 17, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Aug 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-develUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-pltcl | Dec 9, 2022 | Aug 18, 2022 |
| Oracle_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade postgresql-private-develUpgrade postgresqlUpgrade postgresql-contribUpgrade pg_repackUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-docsUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-plperl | Oct 27, 2022 | Aug 11, 2022 |
| Postgres | — | Upgrade to PostgreSQL version 10.22Upgrade to PostgreSQL version 14.5Upgrade to PostgreSQL version 12.12Upgrade to PostgreSQL version 13.8Upgrade to PostgreSQL version 11.17 | Aug 18, 2022 | Aug 18, 2022 |
| Redhat_linux | — | Upgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufsUpgrade pg_repack-debuginfoUpgrade postgresql-upgradeUpgrade pg_repack-debugsourceUpgrade pgauditUpgrade pgaudit-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlNo solution existsUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-debugsourceUpgrade pg_repack | Oct 26, 2022 | Aug 18, 2022 |
| Rocky_linux | — | Upgrade pgaudit-debuginfoUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade postgresql-plperl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-contribUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade pg_repack-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repackUpgrade pgauditUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-server-devel-debuginfo | Mar 12, 2024 | Aug 18, 2022 |
| Suse | — | Upgrade postgresql12-pltclUpgrade postgresql-server-develUpgrade postgresql14-docsUpgrade postgresql10-llvmjit-develUpgrade postgresql13-serverUpgrade postgresql13-server-develUpgrade postgresql14-pltclUpgrade postgresql13-develUpgrade postgresql14-llvmjitUpgrade postgresql12-server-develUpgrade postgresql13-plpythonUpgrade libpq5Upgrade postgresql14Upgrade postgresql10-testUpgrade postgresql10Upgrade postgresql-serverUpgrade postgresql10-serverUpgrade postgresql14-testUpgrade postgresql14-serverUpgrade postgresqlUpgrade postgresql10-plpythonUpgrade libecpg6-32bitUpgrade postgresql12-contribUpgrade postgresql12-llvmjitUpgrade postgresql13Upgrade postgresql13-llvmjit-develUpgrade postgresql12-plpythonUpgrade libecpg6Upgrade postgresql13-pltclUpgrade postgresql14-llvmjit-develUpgrade postgresql13-testUpgrade postgresql10-pltclUpgrade postgresql14-server-develUpgrade postgresql-plperlUpgrade postgresql13-plperlUpgrade postgresql14-plpythonUpgrade postgresql10-plperlUpgrade postgresql10-develUpgrade postgresql14-contribUpgrade postgresql12-llvmjit-develUpgrade postgresql12-develUpgrade postgresql-contribUpgrade postgresql10-contribUpgrade postgresql-plpythonUpgrade postgresql12-serverUpgrade postgresql12-docsUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql12Upgrade postgresql14-develUpgrade postgresql14-plperlUpgrade postgresql12-plperlUpgrade postgresql-develUpgrade postgresql10-docsUpgrade libpq5-32bitUpgrade postgresql13-llvmjitUpgrade postgresql12-testUpgrade postgresql13-contribUpgrade postgresql13-docs | Oct 26, 2022 | Aug 18, 2022 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-12Upgrade postgresql-10 | Aug 19, 2022 | Aug 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub