Description
Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpose-crafted object name. The same attacks can achieve SQL injection as a superuser of the restore target server. pg_dumpall, pg_restore, and pg_upgrade are also affected. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected. Versions before 11.20 are unaffected. CVE-2012-0868 had fixed this class of problem, but version 11.20 reintroduced it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PostgreSQL | 17 – < 17.6, 16 – < 16.10, 15 – < 15.14, 14 – < 14.19, 11.20 – < 13.22 | 17.6 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | postgresql-17 | 17.6-0+deb13u1 | — |
| Debian 12 | postgresql-15 | 15.14-0+deb12u1 | — |
| Debian 11 | postgresql-13 | 13.22-0+deb11u1 | DLA-4273-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | postgresql-17 | 17.6-1 | — |
| Ubuntu 24.04 LTS | postgresql-16 | 16.10-0ubuntu0.24.04.1 | USN-7741-1 |
| Ubuntu 22.04 LTS | postgresql-14 | 14.19-0ubuntu0.22.04.1 | USN-7741-1 |
| Ubuntu 20.04 LTS | postgresql-12 | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | postgresql-10 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | postgresql-9.5 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | postgresql-9.3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | postgresql +15 | 16.10-1.el10_0 | RHSA-2025:14826 |
| RHEL 9 | pg_repack | 1.4.8-2.module+el9.5.0+22224+f5585c78 | RHSA-2025:14862, RHSA-2025:14827 |
| RHEL 9 | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:14862, RHSA-2025:14827 |
| RHEL 9 | pgvector | 0.6.2-2.module+el9.6.0+22979+c3d78d52 | RHSA-2025:14827 |
| RHEL 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:14862, RHSA-2025:14827 |
| RHEL 9 | postgresql +14 | 13.22-1.el9_6 | RHSA-2025:14878, RHSA-2025:14862, RHSA-2025:14827 |
| RHEL 8 | pg_repack | 1.4.6-3.module+el8.9.0+19330+c97ddbdf | RHSA-2025:15115, RHSA-2025:15022, RHSA-2025:15021 |
| RHEL 8 | pgaudit | 1.4.0-7.module+el8.10.0+22214+9beb89d6 | RHSA-2025:15115, RHSA-2025:15022, RHSA-2025:15021 |
| RHEL 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+19330+c97ddbdf | RHSA-2025:15115, RHSA-2025:15022, RHSA-2025:15021 |
| RHEL 8 | postgresql +12 | 12.22-5.module+el8.10.0+23469+cd66ea30 | RHSA-2025:15115, RHSA-2025:15022, RHSA-2025:15021 |
| RHEL 8 | postgresql-private-libs +1 | 15.14-1.module+el8.10.0+23423+5a199198 | RHSA-2025:15022, RHSA-2025:14899 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | pg_repack | 1.4.8-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:15015, RHSA-2025:15014 |
| RHEL 9.4 EUS | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:15015, RHSA-2025:15014 |
| RHEL 9.4 EUS | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:15015, RHSA-2025:15014 |
| RHEL 9.4 EUS | postgresql +13 | 13.22-1.el9_4 | RHSA-2025:15114, RHSA-2025:15015, RHSA-2025:15014 |
| RHEL 9.4 EUS | postgresql-test-rpm-macros | 15.14-1.module+el9.4.0+23426+8bcd22f5 | RHSA-2025:15015, RHSA-2025:15014 |
| RHEL 9.2 E4S | pg_repack | 1.4.8-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:15062 |
| RHEL 9.2 E4S | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:15062 |
| RHEL 9.2 E4S | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:15062 |
| RHEL 9.2 E4S | postgresql +7 | 13.22-1.el9_2 | RHSA-2025:15062, RHSA-2025:14869 |
| RHEL 9.2 E4S | postgresql-docs +6 | 15.14-1.module+el9.2.0+23414+35f93534 | RHSA-2025:15062 |
| RHEL 9.0 E4S | postgresql +7 | 13.22-1.el9_0 | RHSA-2025:14870 |
| RHEL 8.8 TUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:15031, RHSA-2025:15013, RHSA-2025:15012 |
| RHEL 8.8 TUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:15031, RHSA-2025:15013, RHSA-2025:15012 |
| RHEL 8.8 TUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:15031, RHSA-2025:15013, RHSA-2025:15012 |
| RHEL 8.8 TUS | postgresql +12 | 12.22-1.module+el8.8.0+23434+f5b3cff0.2 | RHSA-2025:15031, RHSA-2025:15013, RHSA-2025:15012 |
| RHEL 8.8 TUS | postgresql-private-libs +1 | 15.14-1.module+el8.8.0+23415+58912bc3 | RHSA-2025:15031 |
| RHEL 8.8 E4S | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:15031, RHSA-2025:15013, RHSA-2025:15012 |
| RHEL 8.8 E4S | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:15031, RHSA-2025:15013, RHSA-2025:15012 |
| RHEL 8.8 E4S | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:15031, RHSA-2025:15013, RHSA-2025:15012 |
| RHEL 8.8 E4S | postgresql +12 | 12.22-1.module+el8.8.0+23434+f5b3cff0.2 | RHSA-2025:15031, RHSA-2025:15013, RHSA-2025:15012 |
| RHEL 8.8 E4S | postgresql-private-libs +1 | 15.14-1.module+el8.8.0+23415+58912bc3 | RHSA-2025:15031 |
| RHEL 8.6 TUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 TUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 TUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 TUS | postgresql +12 | 12.22-1.module+el8.6.0+23437+7ab3a838.2 | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 E4S | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 E4S | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 E4S | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 E4S | postgresql +12 | 12.22-1.module+el8.6.0+23437+7ab3a838.2 | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 AUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 AUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.6 AUS | postgresql +12 | 12.22-1.module+el8.6.0+23437+7ab3a838.2 | RHSA-2025:15359, RHSA-2025:15006 |
| RHEL 8.4 AUS | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2025:15057, RHSA-2025:15034 |
| RHEL 8.4 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:15057, RHSA-2025:15034 |
| RHEL 8.4 AUS | postgresql +12 | 12.22-1.module+el8.4.0+23436+e3f9c044.2 | RHSA-2025:15057, RHSA-2025:15034 |
| RHEL 8.2 AUS | pgaudit | 1.4.0-4.module+el8.2.0+9043+1dbb5661 | RHSA-2025:15361 |
| RHEL 8.2 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.2.0+9043+1dbb5661 | RHSA-2025:15361 |
| RHEL 8.2 AUS | postgresql +12 | 12.22-1.module+el8.2.0+23452+508bd26b.2 | RHSA-2025:15361 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | postgresql-test-rpm-macros | 16.10-1.el10_0 | ALSA-2025:14826 |
| AlmaLinux 9 | pg_repack | 1.4.8-2.module_el9.5.0+119+18833d03 | ALSA-2025:14862, ALSA-2025:14827 |
| AlmaLinux 9 | pgaudit | 1.7.0-1.module_el9.3.0+52+21733919 | ALSA-2025:14862, ALSA-2025:14827 |
| AlmaLinux 9 | pgvector | 0.6.2-2.module_el9.6.0+167+4e561146 | ALSA-2025:14827 |
| AlmaLinux 9 | postgres-decoderbufs | 1.9.7-1.Final.module_el9.3.0+52+21733919 | ALSA-2025:14862, ALSA-2025:14827 |
| AlmaLinux 9 | postgresql +14 | 13.22-1.el9_6 | ALSA-2025:14878, ALSA-2025:14862, ALSA-2025:14827 |
| AlmaLinux 8 | pg_repack | 1.4.6-3.module_el8.6.0+2760+1746ec94 | ALSA-2025:15115, ALSA-2025:15022, ALSA-2025:15021 |
| AlmaLinux 8 | pgaudit | 1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1 | ALSA-2025:15115, ALSA-2025:15022, ALSA-2025:15021 |
| AlmaLinux 8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 | ALSA-2025:15115, ALSA-2025:15022, ALSA-2025:15021 |
| AlmaLinux 8 | postgresql +12 | 12.22-5.module_el8.10.0+4043+6cac3079 | ALSA-2025:15115, ALSA-2025:15022, ALSA-2025:15021 |
| AlmaLinux 8 | postgresql-private-libs +1 | 15.14-1.module_el8.10.0+4041+afd30bb4 | ALSA-2025:15022, ALSA-2025:14899 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | postgresql16 | 16.10-1.el10_0 | RLSA-2025:14826 |
| Rocky Linux 9 | pg_repack | 1.4.8-2.module+el9.5.0+30637+4391fcca | RLSA-2025:14862, RLSA-2025:14827 |
| Rocky Linux 9 | pgaudit | 1.7.0-1.module+el9.5.0+30637+4391fcca | RLSA-2025:14862, RLSA-2025:14827 |
| Rocky Linux 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.5.0+30637+4391fcca | RLSA-2025:14862, RLSA-2025:14827 |
| Rocky Linux 9 | postgresql | 13.22-1.el9_6 | RLSA-2025:14878 |
| Rocky Linux 8 | pg_repack | 1.4.6-3.module+el8.9.0+1594+4a6adae9 | RLSA-2025:15115, RLSA-2025:15022, RLSA-2025:15021 |
| Rocky Linux 8 | pgaudit | 1.4.0-7.module+el8.9.0+1735+a332307b | RLSA-2025:15115, RLSA-2025:15022, RLSA-2025:15021 |
| Rocky Linux 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+1594+4a6adae9 | RLSA-2025:15115, RLSA-2025:15022, RLSA-2025:15021 |
| Rocky Linux 8 | postgresql | 12.22-5.module+el8.10.0+2058+57631455 | RLSA-2025:15115, RLSA-2025:15022, RLSA-2025:15021 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | postgresql14 | 14.19-150600.16.20.1 | SUSE-SU-2025:03019-2, SUSE-SU-2025:03019-1 |
| SLES 15 SP7 | postgresql15 | 15.14-150600.16.20.1 | SUSE-SU-2025:03018-2, SUSE-SU-2025:03018-1 |
| SLES 15 SP7 | postgresql16 | 16.10-150600.16.21.1 | SUSE-SU-2025:03005-2, SUSE-SU-2025:03005-1 |
| SLES 15 SP7 | postgresql17 | 17.6-150600.13.16.1 | SUSE-SU-2025:02986-1 |
| SLES 15 SP6 | postgresql14 | 14.19-150600.16.20.1 | SUSE-SU-2025:03019-1 |
| SLES 15 SP6 | postgresql15 | 15.14-150600.16.20.1 | SUSE-SU-2025:03018-1 |
| SLES 15 SP6 | postgresql16 | 16.10-150600.16.21.1 | SUSE-SU-2025:03005-2, SUSE-SU-2025:03005-1 |
| SLES 15 SP6 | postgresql17 | 17.6-150600.13.16.1 | SUSE-SU-2025:02986-1 |
| SLES 15 SP5 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SLES 15 SP5 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SLES 15 SP5 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SLES 15 SP5 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
| SLES 15 SP4 | postgresql13 | 13.22-150200.5.75.2 | SUSE-SU-2025:02994-1 |
| SLES 15 SP4 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SLES 15 SP4 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SLES 15 SP4 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SLES 15 SP4 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
| SLES 15 SP3 | postgresql13 | 13.22-150200.5.75.2 | SUSE-SU-2025:02994-1 |
| SLES 15 SP3 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SLES 15 SP3 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SLES 15 SP3 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SLES 15 SP3 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | postgresql13 | 13.22-3.66.1 | SUSE-SU-2025:03003-1 |
| SLES 12 SP5 | postgresql14 | 14.19-3.60.1 | SUSE-SU-2025:03020-1 |
| SLES 12 SP5 | postgresql15 | 15.14-3.44.1 | SUSE-SU-2025:03004-1 |
| SLES 12 SP5 | postgresql16 | 16.10-3.32.1 | SUSE-SU-2025:02980-1 |
| SLES 12 SP5 | postgresql17 | 17.6-3.16.1 | SUSE-SU-2025:02987-1 |
| SLES for SAP 15 SP5 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SLES for SAP 15 SP5 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SLES for SAP 15 SP5 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SLES for SAP 15 SP5 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
| SLES for SAP 15 SP4 | postgresql13 | 13.22-150200.5.75.2 | SUSE-SU-2025:02994-1 |
| SLES for SAP 15 SP4 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SLES for SAP 15 SP4 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SLES for SAP 15 SP4 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SLES for SAP 15 SP4 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
| SLES for SAP 15 SP3 | postgresql13 | 13.22-150200.5.75.2 | SUSE-SU-2025:02994-1 |
| SLES for SAP 15 SP3 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SLES for SAP 15 SP3 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SLES for SAP 15 SP3 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SLES for SAP 15 SP3 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
| SLE HPC 15 SP5 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SLE HPC 15 SP5 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SLE HPC 15 SP5 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
| SLE HPC 15 SP4 | postgresql13 | 13.22-150200.5.75.2 | SUSE-SU-2025:02994-1 |
| SLE HPC 15 SP4 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SLE HPC 15 SP4 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SLE HPC 15 SP4 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SLE HPC 15 SP4 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
| SLE HPC 15 SP3 | postgresql13 | 13.22-150200.5.75.2 | SUSE-SU-2025:02994-1 |
| SLE HPC 15 SP3 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SLE HPC 15 SP3 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SLE HPC 15 SP3 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SLE HPC 15 SP3 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
| SUSE Manager Server LTS 4.3 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SUSE Manager Server LTS 4.3 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SUSE Manager Server LTS 4.3 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SUSE Manager Server LTS 4.3 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
| SUSE Manager Proxy LTS 4.3 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SUSE Manager Proxy LTS 4.3 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SUSE Manager Proxy LTS 4.3 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SUSE Manager Proxy LTS 4.3 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
| SUSE Enterprise Storage 7.1 | postgresql13 | 13.22-150200.5.75.2 | SUSE-SU-2025:02994-1 |
| SUSE Enterprise Storage 7.1 | postgresql14 | 14.19-150200.5.61.1 | SUSE-SU-2025:03031-1 |
| SUSE Enterprise Storage 7.1 | postgresql15 | 15.14-150200.5.44.1 | SUSE-SU-2025:03030-1 |
| SUSE Enterprise Storage 7.1 | postgresql16 | 16.10-150200.5.32.1 | SUSE-SU-2025:02981-1 |
| SUSE Enterprise Storage 7.1 | postgresql17 | 17.6-150200.5.16.1 | SUSE-SU-2025:02995-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | postgresql13 | 13.22-1.1 | openSUSE-SU-2025:15450-1 |
| openSUSE Tumbleweed | postgresql14 | 14.19-1.1 | openSUSE-SU-2025:15451-1 |
| openSUSE Tumbleweed | postgresql15 | 15.14-1.1 | openSUSE-SU-2025:15452-1 |
| openSUSE Tumbleweed | postgresql16 | 16.10-1.1 | openSUSE-SU-2025:15453-1 |
| openSUSE Tumbleweed | postgresql17 | 17.6-1.1 | openSUSE-SU-2025:15455-1 |
| openSUSE Leap 15.6 | postgresql13 | 13.22-150600.14.11.1 | SUSE-SU-2025:02842-1 |
| openSUSE Leap 15.6 | postgresql14 | 14.19-150600.16.20.1 | SUSE-SU-2025:03019-1 |
| openSUSE Leap 15.6 | postgresql15 | 15.14-150600.16.20.1 | SUSE-SU-2025:03018-1 |
| openSUSE Leap 15.6 | postgresql16 | 16.10-150600.16.21.1 | SUSE-SU-2025:03005-2, SUSE-SU-2025:03005-1 |
| openSUSE Leap 15.6 | postgresql17 | 17.6-150600.13.16.1 | SUSE-SU-2025:02986-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | postgresql16 | 16.10-r0 | — |
| Alpine v3.24 | postgresql17 | 17.6-r0 | — |
| Alpine v3.23 | postgresql16 | 16.10-r0 | — |
| Alpine v3.23 | postgresql17 | 17.6-r0 | — |
| Alpine v3.22 | postgresql15 | 15.14-r0 | — |
| Alpine v3.22 | postgresql16 | 16.10-r0 | — |
| Alpine v3.22 | postgresql17 | 17.6-r0 | — |
| Alpine v3.21 | postgresql15 | 15.17-r0 | — |
| Alpine v3.21 | postgresql16 | 16.10-r0 | — |
| Alpine v3.21 | postgresql17 | 17.6-r0 | — |
| Alpine v3.20 | postgresql15 | 15.14-r0 | — |
| Alpine v3.20 | postgresql16 | 16.10-r0 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | postgresql15 | 15.14-r0 | — |
| Alpine v3.19 | postgresql16 | 16.10-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | postgresql15 +15 | 15.14-1.amzn2023.0.1 | ALAS2023-2025-1165 |
| Amazon Linux 2023 | postgresql16 +15 | 16.10-1.amzn2023.0.1 | ALAS2023-2025-1177 |
| Amazon Linux 2023 | postgresql17 +15 | 17.6-1.amzn2023.0.1 | ALAS2023-2025-1158 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | postgresql | 16.10-1 | — |
| Azure Linux 2 (CBL-Mariner) | postgresql | 14.19-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | postgresql +14 | 16.10-1.0.1.el10_0 | ELSA-2025-14826 |
| Oracle Linux 9 | pg_repack | 1.4.8-2.module+el9.5.0+90424+300303e9 | ELSA-2025-14862, ELSA-2025-14827 |
| Oracle Linux 9 | pgaudit | 1.7.0-1.module+el9.2.0+21134+ceb95ed9 | ELSA-2025-14862, ELSA-2025-14827 |
| Oracle Linux 9 | pgvector | 0.6.2-2.module+el9.6.0+90592+523cb846 | ELSA-2025-14827 |
| Oracle Linux 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+21134+ceb95ed9 | ELSA-2025-14862, ELSA-2025-14827 |
| Oracle Linux 9 | postgresql +14 | 13.22-1.el9_6 | ELSA-2025-14878, ELSA-2025-14862, ELSA-2025-14827 |
| Oracle Linux 8 | pg_repack | 1.4.6-3.module+el8.9.0+90098+1560b6c2 | ELSA-2025-15115, ELSA-2025-15022, ELSA-2025-15021 |
| Oracle Linux 8 | pgaudit | 1.4.0-7.module+el8.10.0+90397+67dad74f | ELSA-2025-15115, ELSA-2025-15022, ELSA-2025-15021 |
| Oracle Linux 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+90098+1560b6c2 | ELSA-2025-15115, ELSA-2025-15022, ELSA-2025-15021 |
| Oracle Linux 8 | postgresql +12 | 12.22-5.module+el8.10.0+90651+1a81e7f2 | ELSA-2025-15115, ELSA-2025-15022, ELSA-2025-15021 |
| Oracle Linux 8 | postgresql-private-libs +1 | 15.14-1.module+el8.10.0+90649+ea50904a | ELSA-2025-15022, ELSA-2025-14899 |
Advisories 50
- ALSA-2025:14862 Important: postgresql:15 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:14826 Important: postgresql16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:14827 Important: postgresql:16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:14878 Important: postgresql security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:15021 Important: postgresql:13 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:15022 Important: postgresql:15 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:14899 Important: postgresql:16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:15115 Important: postgresql:12 security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2025-1842 PostgreSQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 13, 2026
- RHSA-2025:15361 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15359 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15114 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15115 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15062 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15034 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15057 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15022 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15031 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15021 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15015 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15014 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15013 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15012 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:14899 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:15006 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:14878 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:14869 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:14870 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:14862 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:14827 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- RHSA-2025:14826 Red Hat Security Advisory: postgresql16 security update Red Hat Security Advisories (RHSA) · Sep 28, 2026
- WID-SEC-2026-0351 Dell NetWorker (Third Party Components): Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 31, 2026
- USN-7741-1 postgresql-14, postgresql-16, postgresql-17 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- openSUSE-SU-2025:15452-1 postgresql15-15.14-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15453-1 postgresql16-16.10-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15455-1 libecpg6-17.6-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15450-1 postgresql13-13.22-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15451-1 postgresql14-14.19-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03030-1 Security update for postgresql15 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02994-1 Security update for postgresql13 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02995-1 Security update for postgresql17 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02986-1 Security update for postgresql17 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02980-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02987-1 Security update for postgresql17 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03031-1 Security update for postgresql14 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03004-1 Security update for postgresql15 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02842-1 Security update for postgresql13 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03003-1 Security update for postgresql13 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03018-2 Security update for postgresql15 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02981-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Mar 23, 2026