Description
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PostgreSQL | 16 – < 16.4, 15 – < 15.8, 14 – < 14.13, 13 – < 13.16, < 12.20 | 16.4 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | postgresql-15 | 15.8-0+deb12u1 | DSA-5745-1 |
| Debian 11 | postgresql-13 | 13.16-0+deb11u1 | DSA-5746-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | postgresql-16 | 16.4-0ubuntu0.24.04.1 | USN-6968-1 |
| Ubuntu 22.04 LTS | postgresql-14 | 14.13-0ubuntu0.22.04.1 | USN-6968-1 |
| Ubuntu 20.04 LTS | postgresql-12 | 12.20-0ubuntu0.20.04.1 | USN-6968-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | postgresql-10 | 10.23-0ubuntu0.18.04.2+esm2 | USN-6968-3 |
| Ubuntu Pro 16.04 LTS | postgresql-9.5 | 9.5.25-0ubuntu0.16.04.1+esm8 | USN-6968-2 |
| Ubuntu Pro 14.04 LTS | postgresql-9.3 | 9.3.24-0ubuntu0.14.04+esm1 | USN-6968-3 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | pg_repack | 1.4.8-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:6020, RHSA-2024:5929 |
| RHEL 9 | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:6020, RHSA-2024:5929 |
| RHEL 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:6020, RHSA-2024:5929 |
| RHEL 9 | postgresql +13 | 13.16-1.el9_4 | RHSA-2024:6020, RHSA-2024:5999, RHSA-2024:5929 |
| RHEL 9 | postgresql-test-rpm-macros | 15.8-1.module+el9.4.0+22208+cd6b92ff | RHSA-2024:6020, RHSA-2024:5929 |
| RHEL 8 | pg_repack | 1.4.6-3.module+el8.9.0+19330+c97ddbdf | RHSA-2024:6018, RHSA-2024:6001, RHSA-2024:6000 |
| RHEL 8 | pgaudit | 1.4.0-7.module+el8.10.0+22214+9beb89d6 | RHSA-2024:6018, RHSA-2024:6001, RHSA-2024:6000 |
| RHEL 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+19330+c97ddbdf | RHSA-2024:6018, RHSA-2024:6001, RHSA-2024:6000 |
| RHEL 8 | postgresql +12 | 12.20-1.module+el8.10.0+22214+9beb89d6 | RHSA-2024:6018, RHSA-2024:6001, RHSA-2024:6000 |
| RHEL 8 | postgresql-private-libs +1 | 15.8-1.module+el8.10.0+22212+a51fe170 | RHSA-2024:6001, RHSA-2024:5927 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | pg_repack | 1.4.8-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:6140 |
| RHEL 9.2 EUS | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:6140 |
| RHEL 9.2 EUS | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2024:6140 |
| RHEL 9.2 EUS | postgresql +13 | 13.16-1.el9_2 | RHSA-2024:6145, RHSA-2024:6140 |
| RHEL 9.2 EUS | postgresql-test-rpm-macros | 15.8-1.module+el9.2.0+22239+65063c2d.1 | RHSA-2024:6140 |
| RHEL 9.0 E4S | postgresql +7 | 13.16-1.el9_0 | RHSA-2024:6144 |
| RHEL 8.8 EUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:6142, RHSA-2024:6141, RHSA-2024:6137 |
| RHEL 8.8 EUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:6142, RHSA-2024:6141, RHSA-2024:6137 |
| RHEL 8.8 EUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:6142, RHSA-2024:6141, RHSA-2024:6137 |
| RHEL 8.8 EUS | postgresql +12 | 12.20-1.module+el8.8.0+22245+25697bde | RHSA-2024:6142, RHSA-2024:6141, RHSA-2024:6137 |
| RHEL 8.8 EUS | postgresql-private-libs +1 | 15.8-1.module+el8.8.0+22236+c63904f0 | RHSA-2024:6142 |
| RHEL 8.6 TUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 TUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 TUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 TUS | postgresql +12 | 12.20-1.module+el8.6.0+22262+7cfee20c | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 E4S | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 E4S | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 E4S | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 E4S | postgresql +12 | 12.20-1.module+el8.6.0+22262+7cfee20c | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 AUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 AUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.6 AUS | postgresql +12 | 12.20-1.module+el8.6.0+22262+7cfee20c | RHSA-2024:6559, RHSA-2024:6558 |
| RHEL 8.4 TUS | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2024:6557, RHSA-2024:6139 |
| RHEL 8.4 TUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:6557, RHSA-2024:6139 |
| RHEL 8.4 TUS | postgresql +12 | 12.20-1.module+el8.4.0+22243+33bf1bc8 | RHSA-2024:6557, RHSA-2024:6139 |
| RHEL 8.4 E4S | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2024:6557, RHSA-2024:6139 |
| RHEL 8.4 E4S | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:6557, RHSA-2024:6139 |
| RHEL 8.4 E4S | postgresql +12 | 12.20-1.module+el8.4.0+22243+33bf1bc8 | RHSA-2024:6557, RHSA-2024:6139 |
| RHEL 8.4 AUS | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2024:6557, RHSA-2024:6139 |
| RHEL 8.4 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2024:6557, RHSA-2024:6139 |
| RHEL 8.4 AUS | postgresql +12 | 12.20-1.module+el8.4.0+22243+33bf1bc8 | RHSA-2024:6557, RHSA-2024:6139 |
| RHEL 8.2 AUS | pgaudit | 1.4.0-4.module+el8.2.0+9043+1dbb5661 | RHSA-2024:6138 |
| RHEL 8.2 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.2.0+9043+1dbb5661 | RHSA-2024:6138 |
| RHEL 8.2 AUS | postgresql +12 | 12.20-1.module+el8.2.0+22244+976eca25 | RHSA-2024:6138 |
| RHEL 7 ELS | postgresql +11 | 9.2.24-9.el7_9.1 | RHSA-2024:8495 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | pg_repack | 1.4.8-1.module_el9.3.0+52+21733919 | ALSA-2024:6020, ALSA-2024:5929 |
| AlmaLinux 9 | pgaudit | 1.7.0-1.module_el9.3.0+52+21733919 | ALSA-2024:6020, ALSA-2024:5929 |
| AlmaLinux 9 | postgres-decoderbufs | 1.9.7-1.Final.module_el9.3.0+52+21733919 | ALSA-2024:6020, ALSA-2024:5929 |
| AlmaLinux 9 | postgresql +13 | 13.16-1.el9_4 | ALSA-2024:6020, ALSA-2024:5999, ALSA-2024:5929 |
| AlmaLinux 9 | postgresql-test-rpm-macros | 15.8-1.module_el9.4.0+111+667b9e9e | ALSA-2024:6020, ALSA-2024:5929 |
| AlmaLinux 8 | pg_repack | 1.4.6-3.module_el8.6.0+2760+1746ec94 | ALSA-2024:6018, ALSA-2024:6001, ALSA-2024:6000 |
| AlmaLinux 8 | pgaudit | 1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1 | ALSA-2024:6018, ALSA-2024:6001, ALSA-2024:6000 |
| AlmaLinux 8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 | ALSA-2024:6018, ALSA-2024:6001, ALSA-2024:6000 |
| AlmaLinux 8 | postgresql +12 | 12.20-1.module_el8.10.0+3886+1dfe41d7 | ALSA-2024:6018, ALSA-2024:6001, ALSA-2024:6000 |
| AlmaLinux 8 | postgresql-private-libs +1 | 15.8-1.module_el8.10.0+3888+1aead837 | ALSA-2024:6001, ALSA-2024:5927 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | pgaudit | 1.7.0-1.module+el9.5.0+30637+4391fcca | RLSA-2024:6020, RLSA-2024:5929 |
| Rocky Linux 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.5.0+30637+4391fcca | RLSA-2024:6020, RLSA-2024:5929 |
| Rocky Linux 9 | postgresql | 13.16-1.el9_4 | RLSA-2024:5999 |
| Rocky Linux 8 | pg_repack | 1.4.6-3.module+el8.9.0+1594+4a6adae9 | RLSA-2024:6018, RLSA-2024:6001, RLSA-2024:6000 |
| Rocky Linux 8 | pgaudit | 1.4.0-7.module+el8.9.0+1735+a332307b | RLSA-2024:6018, RLSA-2024:6001, RLSA-2024:6000 |
| Rocky Linux 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+1594+4a6adae9 | RLSA-2024:6018, RLSA-2024:6001, RLSA-2024:6000 |
| Rocky Linux 8 | postgresql | 12.20-1.module+el8.10.0+1862+29bef648 | RLSA-2024:6018, RLSA-2024:6001, RLSA-2024:6000 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | postgresql14 | 14.13-150600.16.6.1 | SUSE-SU-2024:3160-1 |
| SLES 15 SP6 | postgresql15 | 15.8-150600.16.6.1 | SUSE-SU-2024:3158-3, SUSE-SU-2024:3158-2, SUSE-SU-2024:3158-1 |
| SLES 15 SP6 | postgresql16 | 16.4-150600.16.5.1 | SUSE-SU-2024:3159-2, SUSE-SU-2024:3159-1 |
| SLES 15 SP5 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SLES 15 SP5 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| SLES 15 SP5 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SLES 15 SP4 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| SLES 15 SP4 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SLES 15 SP4 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| SLES 15 SP4 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SLES 15 SP3 | postgresql12 | 12.20-150200.8.63.1 | SUSE-SU-2024:3153-1 |
| SLES 15 SP3 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| SLES 15 SP3 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SLES 15 SP3 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| SLES 15 SP3 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SLES 15 SP2 | postgresql12 | 12.20-150200.8.63.1 | SUSE-SU-2024:3153-1 |
| SLES 15 SP2 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| SLES 15 SP2 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SLES 15 SP2 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | postgresql12 | 12.20-3.58.1 | SUSE-SU-2024:3191-1 |
| SLES 12 SP5 | postgresql13 | 13.16-3.52.1 | SUSE-SU-2024:3192-1 |
| SLES 12 SP5 | postgresql14 | 14.13-3.44.1 | SUSE-SU-2024:3154-1 |
| SLES 12 SP5 | postgresql15 | 15.8-3.28.1 | SUSE-SU-2024:3224-1 |
| SLES 12 SP5 | postgresql16 | 16.4-3.16.1 | SUSE-SU-2024:3181-1 |
| SLES for SAP 15 SP4 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| SLES for SAP 15 SP4 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SLES for SAP 15 SP4 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| SLES for SAP 15 SP4 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SLES for SAP 15 SP3 | postgresql12 | 12.20-150200.8.63.1 | SUSE-SU-2024:3153-1 |
| SLES for SAP 15 SP3 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| SLES for SAP 15 SP3 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SLES for SAP 15 SP3 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| SLES for SAP 15 SP3 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SLES for SAP 15 SP2 | postgresql12 | 12.20-150200.8.63.1 | SUSE-SU-2024:3153-1 |
| SLES for SAP 15 SP2 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| SLES for SAP 15 SP2 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SLES for SAP 15 SP2 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SLES for SAP 12 SP5 | postgresql12 | 12.20-3.58.1 | SUSE-SU-2024:3191-1 |
| SLES for SAP 12 SP5 | postgresql13 | 13.16-3.52.1 | SUSE-SU-2024:3192-1 |
| SLES for SAP 12 SP5 | postgresql14 | 14.13-3.44.1 | SUSE-SU-2024:3154-1 |
| SLES for SAP 12 SP5 | postgresql15 | 15.8-3.28.1 | SUSE-SU-2024:3224-1 |
| SLES for SAP 12 SP5 | postgresql16 | 16.4-3.16.1 | SUSE-SU-2024:3181-1 |
| SLE HPC 15 SP4 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| SLE HPC 15 SP4 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SLE HPC 15 SP4 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| SLE HPC 15 SP4 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SLE HPC 15 SP3 | postgresql12 | 12.20-150200.8.63.1 | SUSE-SU-2024:3153-1 |
| SLE HPC 15 SP3 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| SLE HPC 15 SP3 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SLE HPC 15 SP3 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| SLE HPC 15 SP3 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SLE HPC 15 SP2 | postgresql12 | 12.20-150200.8.63.1 | SUSE-SU-2024:3153-1 |
| SLE HPC 15 SP2 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| SLE HPC 15 SP2 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SLE HPC 15 SP2 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SUSE Manager Server 4.3 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SUSE Manager Server 4.3 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| SUSE Manager Server 4.3 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SUSE Manager Proxy 4.3 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SUSE Manager Proxy 4.3 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| SUSE Manager Proxy 4.3 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
| SUSE Enterprise Storage 7.1 | postgresql12 | 12.20-150200.8.63.1 | SUSE-SU-2024:3153-1 |
| SUSE Enterprise Storage 7.1 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| SUSE Enterprise Storage 7.1 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| SUSE Enterprise Storage 7.1 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| SUSE Enterprise Storage 7.1 | postgresql16 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | postgresql12 | 12.20-1.1 | openSUSE-SU-2024:14348-1 |
| openSUSE Tumbleweed | postgresql13 | 13.16-1.1 | openSUSE-SU-2024:14349-1 |
| openSUSE Tumbleweed | postgresql14 | 14.13-1.1 | openSUSE-SU-2024:14350-1 |
| openSUSE Tumbleweed | postgresql15 | 15.8-1.1 | openSUSE-SU-2024:14351-1 |
| openSUSE Tumbleweed | postgresql16 | 16.4-1.1 | openSUSE-SU-2024:14360-1 |
| openSUSE Tumbleweed | postgresql17 | 17~rc1-1.1 | openSUSE-SU-2024:14361-1 |
| openSUSE Leap 15.6 | postgresql12 | 12.20-150200.8.63.1 | SUSE-SU-2024:3153-1 |
| openSUSE Leap 15.6 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| openSUSE Leap 15.6 | postgresql14 | 14.13-150600.16.6.1 | SUSE-SU-2024:3160-1 |
| openSUSE Leap 15.6 | postgresql15 | 15.8-150600.16.6.1 | SUSE-SU-2024:3158-1 |
| openSUSE Leap 15.6 | postgresql16 | 16.4-150600.16.5.1 | SUSE-SU-2024:3159-1 |
| openSUSE Leap 15.5 | postgresql12 | 12.20-150200.8.63.1 | SUSE-SU-2024:3153-1 |
| openSUSE Leap 15.5 | postgresql13 | 13.16-150200.5.61.1 | SUSE-SU-2024:3171-1 |
| openSUSE Leap 15.5 | postgresql14 | 14.13-150200.5.47.1 | SUSE-SU-2024:3169-1 |
| openSUSE Leap 15.5 | postgresql15 | 15.8-150200.5.30.1 | SUSE-SU-2024:3168-1 |
| openSUSE Leap 15.5 | postgresql16 +1 | 16.4-150200.5.16.1 | SUSE-SU-2024:3170-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | postgresql16 | 16.4-r0 | — |
| Alpine v3.23 | postgresql16 | 16.4-r0 | — |
| Alpine v3.22 | postgresql15 | 15.8-r0 | — |
| Alpine v3.22 | postgresql16 | 16.4-r0 | — |
| Alpine v3.21 | postgresql15 | 15.8-r0 | — |
| Alpine v3.21 | postgresql16 | 16.4-r0 | — |
| Alpine v3.20 | postgresql14 | 14.13-r0 | — |
| Alpine v3.20 | postgresql15 | 15.8-r0 | — |
| Alpine v3.20 | postgresql16 | 16.4-r0 | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | postgresql13 | 13.16-r0 | — |
| Alpine v3.19 | postgresql14 | 14.13-r0 | — |
| Alpine v3.19 | postgresql15 | 15.8-r0 | — |
| Alpine v3.19 | postgresql16 | 16.4-r0 | — |
| Alpine v3.18 | postgresql12 | 12.20-r0 | — |
| Alpine v3.18 | postgresql13 | 13.16-r0 | — |
| Alpine v3.18 | postgresql14 | 14.13-r0 | — |
| Alpine v3.18 | postgresql15 | 15.8-r0 | — |
| Alpine v3.17 | postgresql12 | 12.20-r0 | — |
| Alpine v3.17 | postgresql13 | 13.16-r0 | — |
| Alpine v3.17 | postgresql14 | 14.13-r0 | — |
| Alpine v3.17 | postgresql15 | 15.8-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | postgresql15 +15 | 15.8-1.amzn2023.0.1 | ALAS2023-2024-702 |
| Amazon Linux 2 | postgresql +11 | 9.2.24-8.amzn2.0.4 | ALAS2-2025-2733 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | postgresql | 16.4-1 | — |
| Azure Linux 2 (CBL-Mariner) | postgresql | 14.13-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | pg_repack | 1.4.8-1.module+el9.2.0+21134+ceb95ed9 | ELSA-2024-6020, ELSA-2024-5929 |
| Oracle Linux 9 | pgaudit | 1.7.0-1.module+el9.2.0+21134+ceb95ed9 | ELSA-2024-6020, ELSA-2024-5929 |
| Oracle Linux 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+21134+ceb95ed9 | ELSA-2024-6020, ELSA-2024-5929 |
| Oracle Linux 9 | postgresql +13 | 13.16-1.0.1.el9_4 | ELSA-2024-6020, ELSA-2024-5999, ELSA-2024-5929 |
| Oracle Linux 9 | postgresql-test-rpm-macros | 15.8-1.module+el9.4.0+90399+63b2ad7b | ELSA-2024-6020, ELSA-2024-5929 |
| Oracle Linux 8 | pg_repack | 1.4.6-3.module+el8.9.0+90098+1560b6c2 | ELSA-2024-6018, ELSA-2024-6001, ELSA-2024-6000 |
| Oracle Linux 8 | pgaudit | 1.4.0-7.module+el8.10.0+90397+67dad74f | ELSA-2024-6018, ELSA-2024-6001, ELSA-2024-6000 |
| Oracle Linux 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+90098+1560b6c2 | ELSA-2024-6018, ELSA-2024-6001, ELSA-2024-6000 |
| Oracle Linux 8 | postgresql +12 | 12.20-1.module+el8.10.0+90397+67dad74f | ELSA-2024-6018, ELSA-2024-6001, ELSA-2024-6000 |
| Oracle Linux 8 | postgresql-private-libs +1 | 15.8-1.module+el8.10.0+90396+38e9dad0 | ELSA-2024-6001, ELSA-2024-5927 |
| Oracle Linux 7 | postgresql +11 | 9.2.24-9.0.1.el7_9 | ELSA-2024-8495 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | postgresql-13 | 13.22-r1 | — |
| Wolfi rolling | postgresql-14 | 14.19-r1 | — |
| Wolfi rolling | postgresql-14-client | 14.24-r2 | — |
| Wolfi rolling | postgresql-15 | 15.14-r0 | — |
| Wolfi rolling | postgresql-15-client | 15.19-r2 | — |
Advisories 50
- ALSA-2024:5999 Important: postgresql security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:5929 Important: postgresql:16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6020 Important: postgresql:15 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:5927 Important: postgresql:16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6000 Important: postgresql:12 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6001 Important: postgresql:15 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6018 Important: postgresql:13 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:6142 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:6020 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:6001 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:5927 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:5929 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- WID-SEC-2025-2329 cPanel/WHM (PostgreSQL, Perl): Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 4, 2026
- USN-6968-3 postgresql-10, postgresql-9.3 vulnerability Ubuntu Security Notices (USN) · Jun 29, 2026
- RHSA-2024:5999 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:6145 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:8495 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- WID-SEC-2024-1800 PostgreSQL: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jun 25, 2026
- USN-6968-2 postgresql-9.5 vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026
- ICSA-26-120-06 ABB Ability Symphony Plus Engineering CISA ICS & IT advisories · Apr 30, 2026
- USN-6968-1 postgresql-12, postgresql-14, postgresql-16 vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- 7PAA017341 PostgreSQL vulnerabilities in ABB Ability™ Symphony® Plus Engineering ABB PSIRT · Apr 13, 2026
- RHSA-2024:6558 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:6559 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:6557 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:6137 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:6138 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:6139 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:6140 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:6141 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:6018 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:6000 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:6144 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- DSA-5746-1 postgresql-13 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-5745-1 postgresql-15 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2024:5927 Important: postgresql:16 security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:5999 Important: postgresql security update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2024:6000 Important: postgresql:12 security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2024:3224-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14351-1 postgresql15-15.8-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3192-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3159-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3158-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14348-1 postgresql12-12.20-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3181-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3171-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14361-1 libecpg6-17~rc1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3170-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14350-1 postgresql14-14.13-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3160-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Feb 4, 2026