A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user could store such rows.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade pgauditUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-libs | Dec 27, 2023 | Aug 11, 2023 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresqlUpgrade postgresql13Upgrade postgresql14Upgrade postgresql15 | Aug 22, 2024 | Aug 11, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-server-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-plperlUpgrade postgresql15-private-libsUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-pltclUpgrade postgresql15-plpython3Upgrade postgresql15-testUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-private-develUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-upgradeUpgrade postgresql15Upgrade postgresql15-test-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-serverUpgrade postgresql15-llvmjitUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-staticUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-pltcl-debuginfo | Feb 17, 2025 | Aug 10, 2023 |
| Centos_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-plpython3Upgrade pg_repack-debugsourceUpgrade postgresql-private-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade pgauditUpgrade pgaudit-debugsourceUpgrade postgresql-debugsourceUpgrade pg_repackUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresqlUpgrade postgresql-serverUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-docsUpgrade postgresql-server-debuginfoUpgrade postgresql-plpython3-debuginfo | Dec 14, 2023 | Aug 11, 2023 |
| Debian | — | Upgrade postgresql-15 | Nov 20, 2023 | Aug 11, 2023 |
| Freebsd | — | Upgrade postgresql-server | Aug 11, 2023 | Aug 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-private-libsUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-contrib | Dec 14, 2023 | Aug 10, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 15.4 | Aug 11, 2023 | Aug 11, 2023 |
| Redhat_linux | — | Upgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufsUpgrade pg_repackUpgrade pgauditUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-develUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgresql-docsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-staticUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-private-libsUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debugsourceUpgrade postgresql-testUpgrade postgres-decoderbufs-debugsource | Dec 14, 2023 | Aug 11, 2023 |
| Rocky_linux | — | Upgrade postgres-decoderbufsUpgrade pgauditUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debugsourceUpgrade pgaudit-debugsourceUpgrade pg_repack | Mar 5, 2024 | Aug 11, 2023 |
| Suse | — | Upgrade postgresql15Upgrade postgresql15-plpythonUpgrade libpq5-32bitUpgrade postgresql15-pltclUpgrade postgresql15-llvmjit-develUpgrade postgresql15-contribUpgrade libpq5Upgrade libecpg6-32bitUpgrade postgresql15-llvmjitUpgrade postgresql15-docsUpgrade postgresql15-develUpgrade postgresql15-server-develUpgrade postgresql15-plperlUpgrade postgresql15-serverUpgrade libecpg6Upgrade postgresql15-test | Aug 18, 2023 | Aug 11, 2023 |
| Ubuntu | — | Upgrade postgresql-client-15Upgrade postgresql-15 | Aug 18, 2023 | Aug 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2026 | Aug 11, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub