CVE catalog

CVE-2024-10978

PostgreSQL vulnerabilities

Severity: Medium · CVSS 4.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Published: Nov 14, 2024, 1:00:07 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.69% · Oct 25, 2026

Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. The problem arises when an application query uses parameters from the attacker or conveys query results to the attacker. If that query reacts to current_setting('role') or the current user ID, it may modify or return data as though the session had not used SET ROLE or SET SESSION AUTHORIZATION. The attacker does not control which incorrect user ID applies. Query text from less-privileged sources is not a concern here, because SET ROLE and SET SESSION AUTHORIZATION are not sandboxes for unvetted queries. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	postgresql-15	bookworm	`15.18-0+deb12u1`	fixed
Debian	postgresql-15	bookworm-security	`15.19-0+deb12u1`	fixed
Ubuntu	postgresql-16	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	libecpg-compat3	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	libecpg-dev	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	libecpg6	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	libpgtypes3	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	libpq-dev	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	libpq5	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	postgresql-client-16	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	postgresql-doc-16	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	postgresql-plperl-16	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	postgresql-plpython3-16	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	postgresql-pltcl-16	noble	`16.6-0ubuntu0.24.04.1`	fixed
Ubuntu	postgresql-server-dev-16	noble	`16.6-0ubuntu0.24.04.1`	fixed
Alpine	postgresql14	3.17	`14.14-r0`	fixed
Alpine	postgresql14	3.18	`14.14-r0`	fixed
Alpine	postgresql15	3.17	`15.9-r0`	fixed
Alpine	postgresql15	3.18	`15.9-r0`	fixed
Alpine	postgresql15	3.19	`15.9-r0`	fixed
Alpine	postgresql15	3.20	`15.9-r0`	fixed
Alpine	postgresql16	3.19	`16.5-r0`	fixed
Alpine	postgresql16	3.20	`16.5-r0`	fixed
Alpine	postgresql16	3.21	`16.5-r0`	fixed
Alpine	postgresql16	3.22	`16.5-r0`	fixed
Alpine	postgresql17	3.21	`17.1-r0`	fixed
Alpine	postgresql17	3.22	`17.1-r0`	fixed
Alpine	postgresql17	3.23	`17.1-r0`	fixed
Alpine	postgresql17	3.24	`17.1-r0`	fixed
Ubuntu	postgresql-9.3	pro	`9.3.1-1`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.2-1`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.2-1ubuntu1`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.2-1ubuntu2`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.3-1`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.3-1bzr1`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.3-1bzr2`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.4-1`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.5-0ubuntu0.14.04.1`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.6-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.7-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.8-0ubuntu0.4.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.9-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.10-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.11-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.12-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.13-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.14-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.15-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.16-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.17-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.18-0ubuntu0.14.04.1`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.19-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.20-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.21-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.22-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.23-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.24-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	pro	`9.3.24-0ubuntu0.14.04+esm1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.0-1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.0-2`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.0-3`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.1-1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.2-1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.3-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.4-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.5-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.6-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.7-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.8-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.9-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.10-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.11-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.12-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.13-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.14-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.16-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.17-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.18-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.19-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.21-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.23-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.24-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.25-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.25-0ubuntu0.16.04.1+esm1`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.25-0ubuntu0.16.04.1+esm2`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.25-0ubuntu0.16.04.1+esm3`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.25-0ubuntu0.16.04.1+esm4`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.25-0ubuntu0.16.04.1+esm5`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.25-0ubuntu0.16.04.1+esm6`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.25-0ubuntu0.16.04.1+esm7`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.25-0ubuntu0.16.04.1+esm8`	vulnerable
Ubuntu	postgresql-9.5	pro	`9.5.25-0ubuntu0.16.04.1+esm10`	fixed
Ubuntu	postgresql-10	pro	`10.1-1`	vulnerable
Ubuntu	postgresql-10	pro	`10.1-2`	vulnerable
Ubuntu	postgresql-10	pro	`10.2-1`	vulnerable
Ubuntu	postgresql-10	pro	`10.3-1`	vulnerable
Ubuntu	postgresql-10	pro	`10.4-0ubuntu0.18.04`	vulnerable
Ubuntu	postgresql-10	pro	`10.5-0ubuntu0.18.04`	vulnerable
Ubuntu	postgresql-10	pro	`10.6-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.7-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.8-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.9-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.10-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.12-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.14-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.15-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.16-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.17-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.18-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.19-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.20-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.21-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.22-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.23-0ubuntu0.18.04.1`	vulnerable
Ubuntu	postgresql-10	pro	`10.23-0ubuntu0.18.04.2`	vulnerable
Ubuntu	postgresql-10	pro	`10.23-0ubuntu0.18.04.2+esm1`	vulnerable
Ubuntu	postgresql-10	pro	`10.23-0ubuntu0.18.04.2+esm2`	vulnerable
Ubuntu	postgresql-10	pro	`10.23-0ubuntu0.18.04.2+esm3`	vulnerable
Ubuntu	postgresql-12	20.04	`12.0-1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.1-1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.1-2build1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.2-1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.2-1ubuntu2`	vulnerable
Ubuntu	postgresql-12	20.04	`12.2-4`	vulnerable
Ubuntu	postgresql-12	20.04	`12.4-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.5-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.6-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.7-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.8-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.9-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.10-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.11-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.12-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.13-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.14-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.15-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.16-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.17-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.18-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.19-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.20-0ubuntu0.20.04.1`	vulnerable
Ubuntu	postgresql-12	20.04	`12.22-0ubuntu0.20.04.1`	fixed
Ubuntu	postgresql-14	22.04	`14.1-1ubuntu1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.2-1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.2-1ubuntu1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.3-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.4-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.5-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.6-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.7-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.8-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.9-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.10-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.11-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.12-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.13-0ubuntu0.22.04.1`	vulnerable
Ubuntu	postgresql-14	22.04	`14.15-0ubuntu0.22.04.1`	fixed
Ubuntu	postgresql-16	24.04	`16.0-2`	vulnerable
Ubuntu	postgresql-16	24.04	`16.1-1`	vulnerable
Ubuntu	postgresql-16	24.04	`16.1-1build1`	vulnerable
Ubuntu	postgresql-16	24.04	`16.1-1build3`	vulnerable
Ubuntu	postgresql-16	24.04	`16.2-1`	vulnerable
Ubuntu	postgresql-16	24.04	`16.2-1ubuntu2`	vulnerable
Ubuntu	postgresql-16	24.04	`16.2-1ubuntu3`	vulnerable
Ubuntu	postgresql-16	24.04	`16.2-1ubuntu4`	vulnerable
Ubuntu	postgresql-16	24.04	`16.3-0ubuntu0.24.04.1`	vulnerable
Ubuntu	postgresql-16	24.04	`16.4-0ubuntu0.24.04.1`	vulnerable
Ubuntu	postgresql-16	24.04	`16.4-0ubuntu0.24.04.2`	vulnerable
Ubuntu	postgresql-16	24.04	`16.6-0ubuntu0.24.04.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	postgresql-15	source	bookworm	`15.9-0+deb12u1`	not yet assigned	Not reported	Not reported
Ubuntu	postgresql-16	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libecpg-compat3	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libecpg-dev	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libecpg6	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libpgtypes3	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libpq-dev	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libpq5	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	postgresql-client-16	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	postgresql-doc-16	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	postgresql-plperl-16	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	postgresql-plpython3-16	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	postgresql-pltcl-16	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	postgresql-server-dev-16	deb	noble	`16.6-0ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Alpine	postgresql14	apk	3.17	`14.14-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql14	apk	3.18	`14.14-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql15	apk	3.17	`15.9-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql15	apk	3.18	`15.9-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql15	apk	3.19	`15.9-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql15	apk	3.20	`15.9-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql16	apk	3.19	`16.5-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql16	apk	3.20	`16.5-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql16	apk	3.21	`16.5-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql16	apk	3.22	`16.5-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql17	apk	3.21	`17.1-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql17	apk	3.22	`17.1-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql17	apk	3.23	`17.1-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Alpine	postgresql17	apk	3.24	`17.1-r0`	Not reported	ALPINE-CVE-2024-10978	Not reported
Ubuntu	postgresql-9.5	deb	pro	`9.5.25-0ubuntu0.16.04.1+esm10`	Not reported	UBUNTU-CVE-2024-10978	Not reported
Ubuntu	postgresql-12	deb	20.04	`12.22-0ubuntu0.20.04.1`	Not reported	UBUNTU-CVE-2024-10978	Not reported
Ubuntu	postgresql-14	deb	22.04	`14.15-0ubuntu0.22.04.1`	Not reported	UBUNTU-CVE-2024-10978	Not reported
Ubuntu	postgresql-16	deb	24.04	`16.6-0ubuntu0.24.04.1`	Not reported	UBUNTU-CVE-2024-10978	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libecpg6]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[libecpg-compat3]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[libecpg-dev]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[libpgtypes3]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[libpq5]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[libpq-dev]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[postgresql-15]Fixed
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[postgresql-client-15]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[postgresql-doc-15]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · all · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · all · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[postgresql-plperl-15]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[postgresql-plpython3-15]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[postgresql-pltcl-15]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
[postgresql-server-dev-15]Fixed
Source package: [postgresql-15]
Details (4)
- 15.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12
- 15.19-0+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 15.9-0+deb12u1
  usn · postgresql-15 · debian · bookworm; usn · postgresql-15 · debian · 12

[Debian 13 (Trixie)]

[libecpg6]Fixed
Source package: [postgresql-17]
Details (5)
- 17.10-0+deb13u1 · amd64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · arm64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
[libecpg-compat3]Fixed
Source package: [postgresql-17]
Details (5)
- 17.10-0+deb13u1 · amd64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · arm64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
[libecpg-dev]Fixed
Source package: [postgresql-17]
Details (5)
- 17.10-0+deb13u1 · amd64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · arm64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
[libpgtypes3]Fixed
Source package: [postgresql-17]
Details (5)
- 17.10-0+deb13u1 · amd64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · arm64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
[libpq5]Fixed
Source package: [postgresql-17]
Details (5)
- 17.10-0+deb13u1 · amd64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · arm64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
[libpq-dev]Fixed
Source package: [postgresql-17]
Details (5)
- 17.10-0+deb13u1 · amd64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · arm64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
[postgresql-17]Fixed
Details (5)
- 17.10-0+deb13u1 · amd64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · arm64 · trixie
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.10-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13
- 17.11-0+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 17.1-1
  usn · postgresql-17 · debian · 13

Next results

Observed: Oct 27, 2026, 6:49:00 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]