Description
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PostgreSQL | 16 – < 16.2, 15 – < 15.6, 14 – < 14.11, 13 – < 13.14, < 12.18 | 16.2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | postgresql-15 | 15.6-0+deb12u1 | DSA-5623-1 |
| Debian 11 | postgresql-13 | 13.14-0+deb11u1 | DSA-5622-1 |
| Debian 10 | postgresql-11 | 11.22-0+deb10u2 | DLA-3764-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | postgresql-16 | 16.2-1 | — |
| Ubuntu 22.04 LTS | postgresql-14 | 14.11-0ubuntu0.22.04.1 | USN-6656-1 |
| Ubuntu 20.04 LTS | postgresql-12 | 12.18-0ubuntu0.20.04.1 | USN-6656-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | postgresql-10 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | postgresql-9.5 | 9.5.25-0ubuntu0.16.04.1+esm7 | USN-6656-2 |
| Ubuntu Pro 14.04 LTS | postgresql-9.3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | pg_repack | 1.4.8-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:0950 |
| RHEL 9 | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:0950 |
| RHEL 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:0950 |
| RHEL 9 | postgresql +13 | 13.14-1.el9_3 | RHSA-2024:0951, RHSA-2024:0950 |
| RHEL 9 | postgresql-test-rpm-macros | 15.6-1.module+el9.3.0+21283+b0ea34b6 | RHSA-2024:0950 |
| RHEL 8 | pg_repack | 1.4.6-3.module+el8.9.0+19330+c97ddbdf | RHSA-2024:0975, RHSA-2024:0974, RHSA-2024:0973 |
| RHEL 8 | pgaudit | 1.4.0-7.module+el8.9.0+21289+7c796f9d | RHSA-2024:0975, RHSA-2024:0974, RHSA-2024:0973 |
| RHEL 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+19330+c97ddbdf | RHSA-2024:0975, RHSA-2024:0974, RHSA-2024:0973 |
| RHEL 8 | postgresql +12 | 10.23-4.module+el8.9.0+21317+d2c6bf8a | RHSA-2024:0975, RHSA-2024:0974, RHSA-2024:0973 |
| RHEL 8 | postgresql-private-libs +1 | 15.6-1.module+el8.9.0+21287+d0eecfe6 | RHSA-2024:0973 |
| RHEL 3 | rh-postgresql10-postgresql +13 | 10.23-3.el7 | RHSA-2024:0992 |
| RHEL 3 | rh-postgresql12-postgresql +13 | 12.18-1.el7 | RHSA-2024:0990 |
| RHEL 3 | rh-postgresql13-postgresql +14 | 13.14-1.el7 | RHSA-2024:0988 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | pg_repack | 1.4.8-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:1314 |
| RHEL 9.2 EUS | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:1314 |
| RHEL 9.2 EUS | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:1314 |
| RHEL 9.2 EUS | postgresql +13 | 13.14-1.el9_2 | RHSA-2024:1314, RHSA-2024:1241 |
| RHEL 9.2 EUS | postgresql-test-rpm-macros | 15.6-1.module+el9.2.0+21314+f2361d6d | RHSA-2024:1314 |
| RHEL 9.0 EUS | postgresql +10 | 13.14-1.el9_0 | RHSA-2024:1240 |
| RHEL 8.8 EUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:1426, RHSA-2024:1069, RHSA-2024:1017 |
| RHEL 8.8 EUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:1426, RHSA-2024:1069, RHSA-2024:1017 |
| RHEL 8.8 EUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:1426, RHSA-2024:1069, RHSA-2024:1017 |
| RHEL 8.8 EUS | postgresql +12 | 10.23-4.module+el8.8.0+21372+7f1ca650 | RHSA-2024:1428, RHSA-2024:1426, RHSA-2024:1069 |
| RHEL 8.8 EUS | postgresql-private-libs +1 | 15.6-1.module+el8.8.0+21343+fedbca97 | RHSA-2024:1017 |
| RHEL 8.6 EUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:1315, RHSA-2024:1070 |
| RHEL 8.6 EUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:1315, RHSA-2024:1070 |
| RHEL 8.6 EUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:1315, RHSA-2024:1070 |
| RHEL 8.6 EUS | postgresql +12 | 10.21-4.module+el8.6.0+21345+167dd12c | RHSA-2024:1348, RHSA-2024:1315, RHSA-2024:1070 |
| RHEL 8.4 TUS | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2024:1437, RHSA-2024:1195 |
| RHEL 8.4 TUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:1437, RHSA-2024:1195 |
| RHEL 8.4 TUS | postgresql +12 | 10.21-4.module+el8.4.0+21369+5e83297f | RHSA-2024:1437, RHSA-2024:1429, RHSA-2024:1195 |
| RHEL 8.4 E4S | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2024:1437, RHSA-2024:1195 |
| RHEL 8.4 E4S | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:1437, RHSA-2024:1195 |
| RHEL 8.4 E4S | postgresql +12 | 10.21-4.module+el8.4.0+21369+5e83297f | RHSA-2024:1437, RHSA-2024:1429, RHSA-2024:1195 |
| RHEL 8.4 AUS | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2024:1437, RHSA-2024:1195 |
| RHEL 8.4 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:1437, RHSA-2024:1195 |
| RHEL 8.4 AUS | postgresql +12 | 10.21-4.module+el8.4.0+21369+5e83297f | RHSA-2024:1437, RHSA-2024:1429, RHSA-2024:1195 |
| RHEL 8.2 TUS | pgaudit | 1.4.0-4.module+el8.2.0+9043+1dbb5661 | RHSA-2024:1071 |
| RHEL 8.2 TUS | postgres-decoderbufs | 0.10.0-2.module+el8.2.0+9043+1dbb5661 | RHSA-2024:1071 |
| RHEL 8.2 TUS | postgresql +12 | 10.21-4.module+el8.2.0+21384+f73fb27d | RHSA-2024:1422, RHSA-2024:1071 |
| RHEL 8.2 E4S | pgaudit | 1.4.0-4.module+el8.2.0+9043+1dbb5661 | RHSA-2024:1071 |
| RHEL 8.2 E4S | postgres-decoderbufs | 0.10.0-2.module+el8.2.0+9043+1dbb5661 | RHSA-2024:1071 |
| RHEL 8.2 E4S | postgresql +12 | 10.21-4.module+el8.2.0+21384+f73fb27d | RHSA-2024:1422, RHSA-2024:1071 |
| RHEL 8.2 AUS | pgaudit | 1.4.0-4.module+el8.2.0+9043+1dbb5661 | RHSA-2024:1071 |
| RHEL 8.2 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.2.0+9043+1dbb5661 | RHSA-2024:1071 |
| RHEL 8.2 AUS | postgresql +12 | 10.21-4.module+el8.2.0+21384+f73fb27d | RHSA-2024:1422, RHSA-2024:1071 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | pg_repack | 1.4.8-1.module_el9.2.0+22+09653793 | ALSA-2024:0950 |
| AlmaLinux 9 | pgaudit | 1.7.0-1.module_el9.2.0+22+09653793 | ALSA-2024:0950 |
| AlmaLinux 9 | postgres-decoderbufs | 1.9.7-1.Final.module_el9.2.0+22+09653793 | ALSA-2024:0950 |
| AlmaLinux 9 | postgresql +13 | 13.14-1.el9_3 | ALSA-2024:0951, ALSA-2024:0950 |
| AlmaLinux 9 | postgresql-test-rpm-macros | 15.6-1.module_el9.3.0+55+d62f4779 | ALSA-2024:0950 |
| AlmaLinux 8 | pg_repack | 1.4.6-3.module_el8.6.0+2758+4f4474df | ALSA-2024:0975, ALSA-2024:0974, ALSA-2024:0973 |
| AlmaLinux 8 | pgaudit | 1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1 | ALSA-2024:0975, ALSA-2024:0974, ALSA-2024:0973 |
| AlmaLinux 8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2758+4f4474df | ALSA-2024:0975, ALSA-2024:0974, ALSA-2024:0973 |
| AlmaLinux 8 | postgresql +12 | 10.23-4.module_el8.9.0+3736+952d0ed7.alma.1 | ALSA-2024:0975, ALSA-2024:0974, ALSA-2024:0973 |
| AlmaLinux 8 | postgresql-private-libs +1 | 15.6-1.module_el8.9.0+3739+514705ed.alma.1 | ALSA-2024:0973 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | pgaudit | 1.7.0-1.module+el9.5.0+30637+4391fcca | RLSA-2024:0950 |
| Rocky Linux 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.5.0+30637+4391fcca | RLSA-2024:0950 |
| Rocky Linux 9 | postgresql | 13.14-1.el9_3 | RLSA-2024:0951 |
| Rocky Linux 8 | pg_repack | 1.4.6-3.module+el8.9.0+1594+4a6adae9 | RLSA-2024:0975, RLSA-2024:0974, RLSA-2024:0973 |
| Rocky Linux 8 | pgaudit | 1.4.0-7.module+el8.9.0+1735+a332307b | RLSA-2024:0975, RLSA-2024:0974, RLSA-2024:0973 |
| Rocky Linux 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+1594+4a6adae9 | RLSA-2024:0975, RLSA-2024:0974, RLSA-2024:0973 |
| Rocky Linux 8 | postgresql | 10.23-4.module+el8.9.0+1734+74bd286c | RLSA-2024:0975, RLSA-2024:0974, RLSA-2024:0973 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SLES 15 SP5 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| SLES 15 SP5 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SLES 15 SP4 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| SLES 15 SP4 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SLES 15 SP4 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| SLES 15 SP4 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SLES 15 SP3 | postgresql12 | 12.18-150200.8.57.1 | SUSE-SU-2024:0523-1 |
| SLES 15 SP3 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| SLES 15 SP3 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SLES 15 SP3 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| SLES 15 SP3 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SLES 15 SP2 | postgresql12 | 12.18-150200.8.57.1 | SUSE-SU-2024:0523-1 |
| SLES 15 SP2 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| SLES 15 SP2 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SLES 15 SP2 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SLES 12 SP5 | postgresql12 | 12.18-3.52.1 | SUSE-SU-2024:0542-1 |
| SLES 12 SP5 | postgresql13 | 13.14-3.46.1 | SUSE-SU-2024:0541-1 |
| SLES 12 SP5 | postgresql14 | 14.11-3.36.1 | SUSE-SU-2024:0540-1 |
| SLES 12 SP5 | postgresql15 | 15.6-3.22.1 | SUSE-SU-2024:0520-1 |
| SLES 12 SP5 | postgresql16 | 16.2-3.10.1 | SUSE-SU-2024:0546-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP4 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| SLES for SAP 15 SP4 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SLES for SAP 15 SP4 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| SLES for SAP 15 SP4 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SLES for SAP 15 SP3 | postgresql12 | 12.18-150200.8.57.1 | SUSE-SU-2024:0523-1 |
| SLES for SAP 15 SP3 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| SLES for SAP 15 SP3 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SLES for SAP 15 SP3 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| SLES for SAP 15 SP3 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SLES for SAP 15 SP2 | postgresql12 | 12.18-150200.8.57.1 | SUSE-SU-2024:0523-1 |
| SLES for SAP 15 SP2 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| SLES for SAP 15 SP2 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SLES for SAP 15 SP2 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SLES for SAP 12 SP5 | postgresql12 | 12.18-3.52.1 | SUSE-SU-2024:0542-1 |
| SLES for SAP 12 SP5 | postgresql13 | 13.14-3.46.1 | SUSE-SU-2024:0541-1 |
| SLES for SAP 12 SP5 | postgresql14 | 14.11-3.36.1 | SUSE-SU-2024:0540-1 |
| SLES for SAP 12 SP5 | postgresql15 | 15.6-3.22.1 | SUSE-SU-2024:0520-1 |
| SLES for SAP 12 SP5 | postgresql16 | 16.2-3.10.1 | SUSE-SU-2024:0546-1 |
| SLE HPC 15 SP4 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| SLE HPC 15 SP4 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SLE HPC 15 SP4 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| SLE HPC 15 SP4 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SLE HPC 15 SP3 | postgresql12 | 12.18-150200.8.57.1 | SUSE-SU-2024:0523-1 |
| SLE HPC 15 SP3 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| SLE HPC 15 SP3 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SLE HPC 15 SP3 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| SLE HPC 15 SP3 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SLE HPC 15 SP2 | postgresql12 | 12.18-150200.8.57.1 | SUSE-SU-2024:0523-1 |
| SLE HPC 15 SP2 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| SLE HPC 15 SP2 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SLE HPC 15 SP2 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SUSE Manager Server 4.3 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SUSE Manager Server 4.3 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| SUSE Manager Server 4.3 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SUSE Manager Proxy 4.3 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SUSE Manager Proxy 4.3 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| SUSE Manager Proxy 4.3 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
| SUSE Enterprise Storage 7.1 | postgresql12 | 12.18-150200.8.57.1 | SUSE-SU-2024:0523-1 |
| SUSE Enterprise Storage 7.1 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| SUSE Enterprise Storage 7.1 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| SUSE Enterprise Storage 7.1 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| SUSE Enterprise Storage 7.1 | postgresql16 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | postgresql12 | 12.18-1.1 | openSUSE-SU-2024:13668-1 |
| openSUSE Tumbleweed | postgresql13 | 13.14-1.1 | openSUSE-SU-2024:13669-1 |
| openSUSE Tumbleweed | postgresql14 | 14.11-1.1 | openSUSE-SU-2024:13670-1 |
| openSUSE Tumbleweed | postgresql15 | 15.6-1.1 | openSUSE-SU-2024:13671-1 |
| openSUSE Tumbleweed | postgresql16 | 16.2-1.1 | openSUSE-SU-2024:13672-1 |
| openSUSE Tumbleweed | postgresql17 | 17.6-2.1 | openSUSE-SU-2025:15580-1 |
| openSUSE Leap 15.5 | postgresql12 | 12.18-150200.8.57.1 | SUSE-SU-2024:0523-1 |
| openSUSE Leap 15.5 | postgresql13 | 13.14-150200.5.53.1 | SUSE-SU-2024:0522-1 |
| openSUSE Leap 15.5 | postgresql14 | 14.11-150200.5.39.1 | SUSE-SU-2024:0552-1 |
| openSUSE Leap 15.5 | postgresql15 | 15.6-150200.5.22.1 | SUSE-SU-2024:0551-1 |
| openSUSE Leap 15.5 | postgresql16 +1 | 16.2-150200.5.10.1 | SUSE-SU-2024:0550-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | postgresql16 | 16.2-r0 | — |
| Alpine v3.23 | postgresql16 | 16.2-r0 | — |
| Alpine v3.22 | postgresql15 | 15.6-r0 | — |
| Alpine v3.22 | postgresql16 | 16.2-r0 | — |
| Alpine v3.21 | postgresql15 | 15.6-r0 | — |
| Alpine v3.21 | postgresql16 | 16.2-r0 | — |
| Alpine v3.20 | postgresql14 | 14.11-r0 | — |
| Alpine v3.20 | postgresql15 | 15.6-r0 | — |
| Alpine v3.20 | postgresql16 | 16.2-r0 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | postgresql13 | 13.14-r0 | — |
| Alpine v3.19 | postgresql14 | 14.11-r0 | — |
| Alpine v3.19 | postgresql15 | 15.6-r0 | — |
| Alpine v3.19 | postgresql16 | 16.2-r0 | — |
| Alpine v3.18 | postgresql12 | 12.18-r0 | — |
| Alpine v3.18 | postgresql13 | 13.14-r0 | — |
| Alpine v3.18 | postgresql14 | 14.11-r0 | — |
| Alpine v3.18 | postgresql15 | 15.6-r0 | — |
| Alpine v3.17 | postgresql12 | 12.18-r0 | — |
| Alpine v3.17 | postgresql13 | 13.14-r0 | — |
| Alpine v3.17 | postgresql14 | 14.11-r0 | — |
| Alpine v3.17 | postgresql15 | 15.6-r0 | — |
| Alpine v3.16 | postgresql12 | 12.18-r0 | — |
| Alpine v3.16 | postgresql13 | 13.14-r0 | — |
| Alpine v3.16 | postgresql14 | 14.11-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | postgresql15 +15 | 15.6-1.amzn2023.0.1 | ALAS2023-2024-547 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | postgresql | 16.3-1 | — |
| Azure Linux 2 (CBL-Mariner) | postgresql | 14.11-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | pg_repack | 1.4.8-1.module+el9.2.0+21134+ceb95ed9 | ELSA-2024-0950 |
| Oracle Linux 9 | pgaudit | 1.7.0-1.module+el9.2.0+21134+ceb95ed9 | ELSA-2024-0950 |
| Oracle Linux 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+21134+ceb95ed9 | ELSA-2024-0950 |
| Oracle Linux 9 | postgresql +13 | 13.14-1.0.1.el9_3 | ELSA-2024-0951, ELSA-2024-0950 |
| Oracle Linux 9 | postgresql-test-rpm-macros | 15.6-1.module+el9.3.0+90158+dfcdadd2 | ELSA-2024-0950 |
| Oracle Linux 8 | pg_repack | 1.4.6-3.module+el8.9.0+90098+1560b6c2 | ELSA-2024-0975, ELSA-2024-0974, ELSA-2024-0973 |
| Oracle Linux 8 | pgaudit | 1.4.0-7.module+el8.9.0+90163+ce4271a0 | ELSA-2024-0975, ELSA-2024-0974, ELSA-2024-0973 |
| Oracle Linux 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+90098+1560b6c2 | ELSA-2024-0975, ELSA-2024-0974, ELSA-2024-0973 |
| Oracle Linux 8 | postgresql +12 | 10.23-4.0.1.module+el8.9.0+90164+87901204 | ELSA-2024-0975, ELSA-2024-0974, ELSA-2024-0973 |
| Oracle Linux 8 | postgresql-private-libs +1 | 15.6-1.module+el8.9.0+90160+417c9f54 | ELSA-2024-0973 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | postgresql-12 | 12.18-r0 | — |
| Wolfi rolling | postgresql-13 | 13.14-r0 | — |
| Wolfi rolling | postgresql-14 | 14.11-r0 | — |
| Wolfi rolling | postgresql-15 | 15.6-r0 | — |
Advisories 50
- ALSA-2024:0950 Important: postgresql:15 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0951 Important: postgresql security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0956 Important: postgresql:10 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0973 Important: postgresql:15 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0974 Important: postgresql:12 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0975 Important: postgresql:13 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:1437 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1429 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1426 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1428 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1348 Red Hat Security Advisory: postgresql:10 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1422 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1314 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1315 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1240 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1241 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1195 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1071 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1070 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1069 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:1017 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:0990 Red Hat Security Advisory: rh-postgresql12-postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:0992 Red Hat Security Advisory: rh-postgresql10-postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:0975 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:0988 Red Hat Security Advisory: rh-postgresql13-postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:0973 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:0974 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:0956 Red Hat Security Advisory: postgresql:10 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:0950 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:0951 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- WID-SEC-2024-0335 PostgreSQL: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jun 25, 2026
- USN-6656-2 postgresql-9.5 vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026
- ICSA-26-120-06 ABB Ability Symphony Plus Engineering CISA ICS & IT advisories · Apr 30, 2026
- USN-6656-1 postgresql-12, postgresql-14, postgresql-15 vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- 7PAA017341 PostgreSQL vulnerabilities in ABB Ability™ Symphony® Plus Engineering ABB PSIRT · Apr 13, 2026
- openSUSE-SU-2025:15580-1 postgresql17-17.6-2.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-5623-1 postgresql-15 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-5622-1 postgresql-13 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3764-1 postgresql-11 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2024:0956 Important: postgresql:10 security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:0951 Important: postgresql security update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2024:13670-1 postgresql14-14.11-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0523-1 Security update for postgresql12 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0542-1 Security update for postgresql12 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0522-1 Security update for postgresql13 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13671-1 postgresql15-15.6-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0520-1 Security update for postgresql15 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13672-1 libecpg6-16.2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13668-1 postgresql12-12.18-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0550-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Feb 4, 2026