{"id":"CVE-2021-23222","aliases":["ALPINE-CVE-2021-23222","ALSA-2022:1891","AZL-8901","BELL-CVE-2021-23222","BIT-postgresql-2021-23222","CLSA-2022-1671124508","DEBIAN-CVE-2021-23222","DLA-2817-1","DSA-5006-1","DSA-5007-1","EUVD-2021-10324","GHSA-735f-7qx4-jqq5","JLSEC-2026-30","MGASA-2021-0523","OESA-2022-1575","OESA-2022-1598","OESA-2022-1706","OESA-2022-2061","RHSA-2021:5179","RHSA-2021:5197","RHSA-2022:1891","RLSA-2022:1891","SUSE-SU-2021:3755-1","SUSE-SU-2021:3757-1","SUSE-SU-2021:3758-1","SUSE-SU-2021:3759-1","SUSE-SU-2021:3760-1","SUSE-SU-2021:3761-1","SUSE-SU-2021:3762-1","SUSE-SU-2021:4058-1","SUSE-SU-2022:2893-1","SUSE-SU-2022:2958-1","UBUNTU-CVE-2021-23222","USN-5145-1","USN-5765-1","openSUSE-SU-2021:1584-1","openSUSE-SU-2021:3758-1","openSUSE-SU-2021:3759-1","openSUSE-SU-2021:3762-1","openSUSE-SU-2021:4058-1","openSUSE-SU-2024:11625-1","openSUSE-SU-2024:11626-1","openSUSE-SU-2024:11627-1","openSUSE-SU-2024:11628-1","openSUSE-SU-2024:11629-1","openSUSE-SU-2024:13243-1","openSUSE-SU-2024:14360-1","openSUSE-SU-2025:15580-1"],"status":"published","title":"A man-in-the-middle attacker can inject false responses to the client's first few queries,...","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01501,"percentile":0.74657,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-522"],"published":"2021-11-11T00:00:00Z","modified":"2026-11-03T06:32:27Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"postgresql","fixed_in":["12.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"postgresql","fixed_in":["12.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"postgresql","fixed_in":["13.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"postgresql","fixed_in":["13.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"postgresql12","fixed_in":["12.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"postgresql12","fixed_in":["12.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql12","fixed_in":["12.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql12","fixed_in":["12.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"postgresql13","fixed_in":["13.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"postgresql13","fixed_in":["13.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql13","fixed_in":["13.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql13","fixed_in":["13.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql13","fixed_in":["13.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"postgresql14","fixed_in":["14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"postgresql14","fixed_in":["14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql14","fixed_in":["14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql14","fixed_in":["14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql14","fixed_in":["14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql14","fixed_in":["14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql15","fixed_in":["14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql15","fixed_in":["14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql15","fixed_in":["14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql15","fixed_in":["14.1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libpq","fixed_in":["13.5-1.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libpq-devel","fixed_in":["13.5-1.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"postgresql","fixed_in":["14.2-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"postgresql","fixed_in":["9.6.24","10.19.0","11.14.0","12.9.0","13.5.0","14.0.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libecpg-compat3","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libecpg-dev","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libecpg6","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpgtypes3","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpq-dev","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpq5","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-9.5","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-client-9.5","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-contrib-9.5","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-doc-9.5","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-plperl-9.5","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-plpython-9.5","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-plpython3-9.5","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-pltcl-9.5","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-server-dev-9.5","fixed_in":["9.5.25-0ubuntu0.16.04.1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"postgresql-13","fixed_in":["13.5-0+deb11u1"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibPQ_jll","fixed_in":["14.1.0+0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libpq","fixed_in":["0:13.5-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libpq-debuginfo","fixed_in":["0:13.5-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libpq-debugsource","fixed_in":["0:13.5-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libpq-devel","fixed_in":["0:13.5-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libpq-devel-debuginfo","fixed_in":["0:13.5-1.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libpq","fixed_in":["0:13.5-1.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"postgresql-9.5","fixed_in":["9.5.25-0ubuntu0.16.04.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"postgresql-10","fixed_in":["10.19-0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"postgresql-12","fixed_in":["12.9-0ubuntu0.20.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.6"},{"fixed":"12.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.6"},{"fixed":"12.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.6"},{"fixed":"13.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.6"},{"fixed":"13.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libpq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-1.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libpq-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-1.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"postgresql","ranges":[{"type":"SEMVER","events":[{"introduced":"9.6.0"},{"fixed":"9.6.24"},{"introduced":"10.0.0"},{"fixed":"10.19.0"},{"introduced":"11.0.0"},{"fixed":"11.14.0"},{"introduced":"12.0.0"},{"fixed":"12.9.0"},{"introduced":"13.0.0"},{"fixed":"13.5.0"},{"introduced":"14.0.0"},{"fixed":"14.0.1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libecpg-compat3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libecpg-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libecpg6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpgtypes3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpq-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpq5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-client-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-contrib-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-doc-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-plperl-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-plpython-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-plpython3-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-pltcl-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"postgresql-server-dev-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"postgresql-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-0+deb11u1"}]}],"versions":["13.3-1","13.4-0+deb11u1","13.4-1","13.4-2","13.4-3"]},{"source":"osv","ecosystem":"Debian:9","package":"postgresql-9.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.24-0+deb9u1"}]}],"versions":["9.6.10-0+deb9u1","9.6.11-0+deb9u1","9.6.12-0+deb9u1","9.6.13-0+deb9u1","9.6.15-0+deb9u1","9.6.16-0+deb9u1","9.6.17-0+deb9u1","9.6.19-0+deb9u1","9.6.20-0+deb9u1","9.6.22-0+deb9u1","9.6.23-0+deb9u1","9.6.3-3","9.6.3-4","9.6.4-0+deb9u1","9.6.4-1","9.6.5-0+deb9u1","9.6.5-0+deb9u1~bpo8+1","9.6.5-1","9.6.6-0+deb9u1","9.6.6-0+deb9u1~bpo8+1","9.6.7-0+deb9u1","9.6.8-0+deb9u1","9.6.9-0+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"postgresql-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.14-0+deb10u1"}]}],"versions":["11.10-0+deb10u1","11.11-0+deb10u1","11.12-0+deb10u1","11.13-0+deb10u1","11.4-1","11.5-1","11.5-1+deb10u1","11.5-2","11.5-3sid1","11.5-3sid2","11.6-0+deb10u1","11.6-2~sid1","11.7-0+deb10u1","11.9-0+deb10u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"postgresql-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-0+deb11u1"}]}],"versions":["13.3-1","13.4-0+deb11u1","13.4-1","13.4-2","13.4-3"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"LibPQ_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"14.1.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"postgresql11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.14-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.5-23.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.5-23.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.5-23.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"postgresql-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-2.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"postgresql-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-2.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"postgresql-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-2.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libpq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.16-1.oe2203"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-7.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-contrib-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-server-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-contrib-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-server-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libpq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libpq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libpq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libpq-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libpq-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libpq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.5-1.el8"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-3.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-3.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-3.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.24-6.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.24-6.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.24-6.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.24-6.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.24-6.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.24-6.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.24-6.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-8.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP3","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-8.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-8.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-8.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-8.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-3.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-3.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-3.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-4.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-5.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-5.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-5.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-5.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-5.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-5.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-8.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP3","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-8.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-8.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-8.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-8.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-8.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-8.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-8.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-8.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-150000.8.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.22-150000.4.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-150000.8.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.22-150000.4.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-150000.8.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-150000.8.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-150000.8.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.22-150000.4.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-150000.8.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-150000.8.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-150000.8.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.22-150000.4.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-150000.8.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-150000.8.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04","9.3.7-0ubuntu0.14.04","9.3.8-0ubuntu0.4.04","9.3.9-0ubuntu0.14.04","9.3.10-0ubuntu0.14.04","9.3.11-0ubuntu0.14.04","9.3.12-0ubuntu0.14.04","9.3.13-0ubuntu0.14.04","9.3.14-0ubuntu0.14.04","9.3.15-0ubuntu0.14.04","9.3.16-0ubuntu0.14.04","9.3.17-0ubuntu0.14.04","9.3.18-0ubuntu0.14.04.1","9.3.19-0ubuntu0.14.04","9.3.20-0ubuntu0.14.04","9.3.21-0ubuntu0.14.04","9.3.22-0ubuntu0.14.04","9.3.23-0ubuntu0.14.04","9.3.24-0ubuntu0.14.04","9.3.24-0ubuntu0.14.04+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"postgresql-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+esm3"}]}],"versions":["9.5.0-1","9.5.0-2","9.5.0-3","9.5.1-1","9.5.2-1","9.5.3-0ubuntu0.16.04","9.5.4-0ubuntu0.16.04","9.5.5-0ubuntu0.16.04","9.5.6-0ubuntu0.16.04","9.5.7-0ubuntu0.16.04","9.5.8-0ubuntu0.16.04.1","9.5.9-0ubuntu0.16.04","9.5.10-0ubuntu0.16.04","9.5.11-0ubuntu0.16.04","9.5.12-0ubuntu0.16.04","9.5.13-0ubuntu0.16.04","9.5.14-0ubuntu0.16.04","9.5.16-0ubuntu0.16.04.1","9.5.17-0ubuntu0.16.04.1","9.5.18-0ubuntu0.16.04.1","9.5.19-0ubuntu0.16.04.1","9.5.21-0ubuntu0.16.04.1","9.5.23-0ubuntu0.16.04.1","9.5.24-0ubuntu0.16.04.1","9.5.25-0ubuntu0.16.04.1","9.5.25-0ubuntu0.16.04.1+esm1","9.5.25-0ubuntu0.16.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"postgresql-10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-0ubuntu0.18.04.1"}]}],"versions":["10.1-1","10.1-2","10.2-1","10.3-1","10.4-0ubuntu0.18.04","10.5-0ubuntu0.18.04","10.6-0ubuntu0.18.04.1","10.7-0ubuntu0.18.04.1","10.8-0ubuntu0.18.04.1","10.9-0ubuntu0.18.04.1","10.10-0ubuntu0.18.04.1","10.12-0ubuntu0.18.04.1","10.14-0ubuntu0.18.04.1","10.15-0ubuntu0.18.04.1","10.16-0ubuntu0.18.04.1","10.17-0ubuntu0.18.04.1","10.18-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"postgresql-12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-0ubuntu0.20.04.1"}]}],"versions":["12.0-1","12.1-1","12.1-2build1","12.2-1","12.2-1ubuntu2","12.2-4","12.4-0ubuntu0.20.04.1","12.5-0ubuntu0.20.04.1","12.6-0ubuntu0.20.04.1","12.7-0ubuntu0.20.04.1","12.8-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"postgresql-10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-0ubuntu0.18.04.1"}]}],"versions":["10.1-1","10.1-2","10.2-1","10.3-1","10.4-0ubuntu0.18.04","10.5-0ubuntu0.18.04","10.6-0ubuntu0.18.04.1","10.7-0ubuntu0.18.04.1","10.8-0ubuntu0.18.04.1","10.9-0ubuntu0.18.04.1","10.10-0ubuntu0.18.04.1","10.12-0ubuntu0.18.04.1","10.14-0ubuntu0.18.04.1","10.15-0ubuntu0.18.04.1","10.16-0ubuntu0.18.04.1","10.17-0ubuntu0.18.04.1","10.18-0ubuntu0.18.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"postgresql-12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-0ubuntu0.20.04.1"}]}],"versions":["12.0-1","12.1-1","12.1-2build1","12.2-1","12.2-1ubuntu2","12.2-4","12.4-0ubuntu0.20.04.1","12.5-0ubuntu0.20.04.1","12.6-0ubuntu0.20.04.1","12.7-0ubuntu0.20.04.1","12.8-0ubuntu0.20.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"postgresql-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.25-0ubuntu0.16.04.1+esm3"}]}],"versions":["9.5.0-1","9.5.0-2","9.5.0-3","9.5.1-1","9.5.2-1","9.5.3-0ubuntu0.16.04","9.5.4-0ubuntu0.16.04","9.5.5-0ubuntu0.16.04","9.5.6-0ubuntu0.16.04","9.5.7-0ubuntu0.16.04","9.5.8-0ubuntu0.16.04.1","9.5.9-0ubuntu0.16.04","9.5.10-0ubuntu0.16.04","9.5.11-0ubuntu0.16.04","9.5.12-0ubuntu0.16.04","9.5.13-0ubuntu0.16.04","9.5.14-0ubuntu0.16.04","9.5.16-0ubuntu0.16.04.1","9.5.17-0ubuntu0.16.04.1","9.5.18-0ubuntu0.16.04.1","9.5.19-0ubuntu0.16.04.1","9.5.21-0ubuntu0.16.04.1","9.5.23-0ubuntu0.16.04.1","9.5.24-0ubuntu0.16.04.1","9.5.25-0ubuntu0.16.04.1","9.5.25-0ubuntu0.16.04.1+esm1","9.5.25-0ubuntu0.16.04.1+esm2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-lp152.2.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-8.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-5.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-8.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.19-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.14-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.9-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4-2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.4-1.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6-2.1"}]}],"bundled":18}],"products":[{"vendor":"postgresql","product":"postgresql"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022675","tags":["x_transferred","Issue Tracking","Third Party Advisory","advisory","report","web"]},{"url":"https://www.postgresql.org/support/security/CVE-2021-23222/","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","web"]},{"url":"https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=d83cdfdca9d918bbbd6bb209139b94c954da7228","tags":["x_transferred","web"]},{"url":"https://github.com/postgres/postgres/commit/160c0258802d10b0600d7671b1bbea55d8e17d45","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://security.gentoo.org/glsa/202211-04","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23222","tags":["web","advisory"]},{"url":"https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=d83cdfdca9d918bbbd6bb209139b94c954da7228"},{"url":"https://github.com/advisories/GHSA-735f-7qx4-jqq5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-23222","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-1891.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-23222","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-23222","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2022-1671124508","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-23222","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0523.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29655","tags":["report"]},{"url":"https://www.postgresql.org/about/news/postgresql-141-135-129-1114-1019-and-9624-released-2349/","tags":["web","report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23214","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1598","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1706","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3677","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32028","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2061","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:5179","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022666","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5179.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3677","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2021-3677/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23214","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23214","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23222","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23222","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:5197","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5197.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1891","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1891.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:1891","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213755-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192516","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23222","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213757-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213758-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213759-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191782","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213760-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213761-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213762-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20214058-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222893-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179945","tags":["report"]},{"url":"https://bugzilla.suse.com/1183168","tags":["report"]},{"url":"https://bugzilla.suse.com/1185952","tags":["report"]},{"url":"https://bugzilla.suse.com/1187751","tags":["report"]},{"url":"https://bugzilla.suse.com/1190177","tags":["report"]},{"url":"https://bugzilla.suse.com/1190740","tags":["report"]},{"url":"https://bugzilla.suse.com/1195680","tags":["report"]},{"url":"https://bugzilla.suse.com/1199475","tags":["report"]},{"url":"https://bugzilla.suse.com/1202368","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2625","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222958-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185924","tags":["report"]},{"url":"https://bugzilla.suse.com/1185925","tags":["report"]},{"url":"https://bugzilla.suse.com/1185926","tags":["report"]},{"url":"https://bugzilla.suse.com/1189748","tags":["report"]},{"url":"https://bugzilla.suse.com/1198166","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3677","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-23222","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5145-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5765-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-23214","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2FHULRUWHTA6S76CNBRNC5YGPUFBTRVW/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EY3TDIO4JWN2U76KHSAM3F7JGOFA3VEQ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NNALH7TSYYNMSZ7EMUEZ2S7IBYAU75OE/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TKUQ4NBJFXX6V3DRII3AKLC2VO5WMZJB/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TUBO5HPHOHRDPB6KNAQYGJRQBBZVFI6Z/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3393","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RSHH7GG3JERRES4WX7FTBWO2TZCAMJMP/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0985","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-23222","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2022-03-02T00:00:00Z","modified":"2024-08-03T19:05:54.487Z","cwes":["CWE-522"],"updated_at":"2026-11-02T14:33:00.488332Z"}],"euvd":[{"id":"EUVD-2021-10324","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2022-03-02T00:00:00Z","modified":"2024-08-03T19:05:54Z","updated_at":"2026-11-03T03:25:00.126172Z"}],"ghsa":[{"id":"GHSA-735f-7qx4-jqq5","title":"A man-in-the-middle attacker can inject false responses to the client's first few queries,...","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2022-03-04T00:00:22Z","modified":"2023-02-02T05:01:21Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:51:09.730353Z"}],"nvd":[{"id":"CVE-2021-23222","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2022-03-02T23:15:08.517Z","modified":"2026-06-17T03:38:26.69Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:07:05.198719Z"}],"osv":[{"id":"ALPINE-CVE-2021-23222","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2022-03-02T23:15:08.517Z","modified":"2026-11-03T06:32:27.291055921Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"AZL-8901","title":"CVE-2021-23222 affecting package postgresql for versions less than 14.2-1","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2022-03-02T23:15:08Z","modified":"2026-04-21T04:34:55.735847Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:11.069402Z"},{"id":"BELL-CVE-2021-23222","title":"CVE-2021-23222 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:02.57905Z","modified":"2026-01-26T09:48:20.170176Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2021-23222","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2022-03-02T23:15:08.517Z","modified":"2026-10-20T14:23:30.83409974Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:18.367807Z"},{"id":"DEBIAN-CVE-2021-23222","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2022-03-02T23:15:08.517Z","modified":"2026-08-27T23:01:36.289332956Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"JLSEC-2026-30","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2026-04-03T13:27:15.647Z","modified":"2026-07-18T00:00:40.266764184Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2022-1575","title":"postgresql security update","description":"PostgreSQL is an advanced Object-Relational database management system (DBMS) that supports almost all SQL constructs (including transactions, subselects and user-defined types and functions). The postgresql package includes the client programs and libraries that you\u0026apos;ll need to access a PostgreSQL DBMS server.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.(CVE-2021-23214)\r\n\r\nA man-in-the-middle attacker can inject false responses to the client\u0026apos;s first few queries, despite the use of SSL certificate verification and encryption.(CVE-2021-23222)","status":"published","published":"2022-03-19T11:04:51Z","modified":"2026-08-18T01:15:53.607952643Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1598","title":"postgresql-13 security update","description":"PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you\u0026apos;ll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system.  These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection.  The PostgreSQL server can be found in the postgresql-server sub-package.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.(CVE-2021-23214)\r\n\r\nA man-in-the-middle attacker can inject false responses to the client\u0026apos;s first few queries, despite the use of SSL certificate verification and encryption.(CVE-2021-23222)","status":"published","published":"2022-03-26T11:04:52Z","modified":"2026-08-18T01:15:54.58354412Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1706","title":"libpq security update","description":"PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or interface.\r\n\r\nSecurity Fix(es):\r\n\nA flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.(CVE-2021-3677)\n\r\nA man-in-the-middle attacker can inject false responses to the client s first few queries, despite the use of SSL certificate verification and encryption.(CVE-2021-23222)\r\n\r\nA flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-32028)","status":"published","published":"2022-06-10T11:04:58Z","modified":"2026-08-18T01:16:44.82040768Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-2061","title":"postgresql security update","description":"PostgreSQL is an advanced Object-Relational database management system (DBMS) that supports almost all SQL constructs (including transactions, subselects and user-defined types and functions). The postgresql package includes the client programs and libraries that you\u0026apos;ll need to access a PostgreSQL DBMS server.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.(CVE-2021-23214)\r\n\r\nA man-in-the-middle attacker can inject false responses to the client\u0026apos;s first few queries, despite the use of SSL certificate verification and encryption.(CVE-2021-23222)","status":"published","published":"2022-11-11T11:05:22Z","modified":"2026-08-18T01:17:21.560033355Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2021:5179","title":"Red Hat Security Advisory: rh-postgresql13-postgresql security update","status":"published","published":"2024-09-13T20:32:10Z","modified":"2026-08-05T10:09:49Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:5197","title":"Red Hat Security Advisory: rh-postgresql12-postgresql security update","status":"published","published":"2024-09-13T20:31:56Z","modified":"2026-08-05T10:09:50Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1891","title":"Red Hat Security Advisory: libpq security update","status":"published","published":"2024-09-13T20:34:24Z","modified":"2026-08-05T10:11:10Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:1891","title":"Low: libpq security update","description":"The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. \n\nSecurity Fix(es):\n\n* postgresql: libpq processes unencrypted bytes from man-in-the-middle (CVE-2021-23222)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.","status":"published","published":"2022-05-10T06:36:04Z","modified":"2026-02-05T01:45:17.456313Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-23222","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2021-11-11T00:00:00Z","modified":"2026-04-22T12:47:32.810559Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:26.779273Z"},{"id":"ALSA-2022:1891","title":"Low: libpq security update","description":"The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. \n\nSecurity Fix(es):\n\n* postgresql: libpq processes unencrypted bytes from man-in-the-middle (CVE-2021-23222)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-05-10T06:36:04Z","modified":"2026-10-29T11:01:16.576502104Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-postgresql-2021-23222","description":"A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.","status":"published","published":"2024-03-06T11:05:21.01Z","modified":"2026-09-08T08:47:41.544595197Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"CLSA-2022-1671124508","title":"Fix CVE(s): CVE-2021-23222","description":"\n   * SECURITY UPDATE: A man-in-the-middle attacker can inject false responses\n     - debian/patches/CVE-2021-23222.patch: libpq: reject extraneous data after\n       SSL or GSS encryption handshake\n     - CVE-2021-23222","status":"published","published":"2022-12-15T17:15:08Z","modified":"2026-06-04T10:03:13.97401Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"DLA-2817-1","title":"postgresql-9.6 - security update","status":"published","published":"2021-11-12T00:00:00Z","modified":"2026-03-09T01:21:42.357682Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5006-1","title":"postgresql-11 - security update","status":"published","published":"2021-11-11T00:00:00Z","modified":"2026-03-09T02:10:09.185249Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"DSA-5007-1","title":"postgresql-13 - security update","status":"published","published":"2021-11-11T00:00:00Z","modified":"2026-03-09T02:08:36.874402Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2021-0523","title":"Updated postgresql packages fix security vulnerability","description":"Server processes unencrypted bytes from man-in-the-middle. (CVE-2021-23214)\n\nlibpq processes unencrypted bytes from man-in-the-middle. (CVE-2021-23222)\n","status":"published","published":"2021-11-25T13:06:13Z","modified":"2026-04-16T04:43:41.058830743Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:1584-1","title":"Security update for postgresql10","description":"This update for postgresql10 fixes the following issues:\n          \n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2021-12-14T20:41:22Z","modified":"2026-02-04T03:17:06.879889Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3758-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n          \n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n","status":"published","published":"2021-11-22T08:38:37Z","modified":"2026-02-04T03:03:49.188504Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3759-1","title":"Security update for postgresql14","description":"This update for postgresql14 fixes the following issues:\n          \n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n\n- Let rpmlint ignore shlib-policy-name-error (boo#1191782).\n","status":"published","published":"2021-11-22T08:40:50Z","modified":"2026-02-04T03:37:14.652682Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3762-1","title":"Security update for postgresql13","description":"This update for postgresql13 fixes the following issues:\n\n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n","status":"published","published":"2021-11-22T08:50:31Z","modified":"2026-02-04T04:07:35.334111Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:4058-1","title":"Security update for postgresql10","description":"This update for postgresql10 fixes the following issues:\n          \n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n","status":"published","published":"2021-12-14T09:18:43Z","modified":"2026-02-04T02:32:07.46744Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11625-1","title":"postgresql10-10.19-1.1 on GA media","description":"These are all security issues fixed in the postgresql10-10.19-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:33:44.094475Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11626-1","title":"postgresql11-11.14-1.1 on GA media","description":"These are all security issues fixed in the postgresql11-11.14-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:57:31.951676Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11627-1","title":"postgresql12-12.9-1.1 on GA media","description":"These are all security issues fixed in the postgresql12-12.9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:53:42.895061Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11628-1","title":"postgresql13-13.5-1.1 on GA media","description":"These are all security issues fixed in the postgresql13-13.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:10:14.426565Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11629-1","title":"libecpg6-14.1-1.1 on GA media","description":"These are all security issues fixed in the libecpg6-14.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:18:33.425569Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:13243-1","title":"postgresql15-15.4-2.1 on GA media","description":"These are all security issues fixed in the postgresql15-15.4-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:41:37.040292Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:14360-1","title":"postgresql16-16.4-1.1 on GA media","description":"These are all security issues fixed in the postgresql16-16.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-23T00:00:00Z","modified":"2026-02-04T03:11:26.033442Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:15580-1","title":"postgresql17-17.6-2.1 on GA media","description":"These are all security issues fixed in the postgresql17-17.6-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-26T00:00:00Z","modified":"2026-03-23T04:53:58.134493Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2021:3755-1","title":"Security update for postgresql, postgresql13, postgresql14 ","description":"This update for postgresql, postgresql13 and postgresql14 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n\nThis update also ships postgresql14 to SUSE Linux Enterprise 12 SP5. (jsc#SLE-22673)\nOn older service packs only libpq5 and libecpg6 are being replaced by the postgresql14 variants.\n\nFeature changes in postgresql14:\n\n- https://www.postgresql.org/about/news/postgresql-14-released-2318/\n- https://www.postgresql.org/docs/14/release-14.html\n\n","status":"published","published":"2021-11-20T16:09:09Z","modified":"2026-02-04T04:08:18.847591Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3757-1","title":"Security update for postgresql96","description":"This update for postgresql96 fixes the following issues:\n\n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n","status":"published","published":"2021-11-22T08:36:33Z","modified":"2026-02-04T02:44:04.987412Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3758-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n          \n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n","status":"published","published":"2021-11-22T08:38:21Z","modified":"2026-02-04T04:07:11.299212Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3759-1","title":"Security update for postgresql14","description":"This update for postgresql14 fixes the following issues:\n          \n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n\n- Let rpmlint ignore shlib-policy-name-error (boo#1191782).\n","status":"published","published":"2021-11-22T08:40:48Z","modified":"2026-02-04T02:19:17.307427Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3760-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n          \n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n","status":"published","published":"2021-11-22T08:45:20Z","modified":"2026-02-04T04:08:38.345437Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3761-1","title":"Security update for postgresql10","description":"This update for postgresql10 fixes the following issues:\n          \n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n","status":"published","published":"2021-11-22T08:47:26Z","modified":"2026-02-04T02:55:25.195242Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3762-1","title":"Security update for postgresql13","description":"This update for postgresql13 fixes the following issues:\n\n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n","status":"published","published":"2021-11-22T08:50:29Z","modified":"2026-02-04T03:17:20.351065Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:4058-1","title":"Security update for postgresql10","description":"This update for postgresql10 fixes the following issues:\n          \n- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).\n","status":"published","published":"2021-12-14T09:18:57Z","modified":"2026-02-04T02:37:42.661922Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:2893-1","title":"Security update for postgresql10","description":"This update for postgresql10 fixes the following issues:\n\n- Upgrade to 10.22:\n- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).\n\n- Upgrade to 10.21:\n- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).\n\n- Upgrade to 10.20 (bsc#1195680)\n- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)\n\n- Upgrade to version 10.19 (bsc#1192516):\n- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake\n- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake\n\n- Fix for build with llvm12 on s390x. (bsc#1185952)\n- Re-enable 'icu' for PostgreSQL 10. (bsc#1179945)\n- Add postgresqlXX-server-devel as a dependency for postgresql13-server-devel. (bsc#1187751)\n- Upgrade to version 10.18. (bsc#1190177)\n","status":"published","published":"2022-08-25T09:09:03Z","modified":"2026-02-04T03:13:45.431896Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2958-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n\n- Upgrade to 12.12:\n- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).\n\n- Upgrade to 12.11:\n- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).\n\n- Upgrade to 12.10 (bsc#1195680)\n- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)\n\n- Upgrade to version 12.9 (bsc#1192516):\n- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake\n- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake\n    \n- Upgrade to version 12.8:\n- CVE-2021-3677: Fixed memory disclosure in certain queries (bsc#1189748).\n\n- Upgrade to version 12.7:\n- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).\n- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).\n- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING 'pg_psql_temporary_savepoint' does not exist (bsc#1185926).\n\n- Fixed build with llvm12 on s390x (bsc#1185952).\n- Re-enabled icu for PostgreSQL 10 (bsc#1179945).\n- Made the dependency of postgresqlXX-server-devel on llvm and clang optional (bsc#1187751).\n- llvm12 breaks PostgreSQL 11 and 12 on s390x. Use llvm11 as a workaround (bsc#1185952).\n- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).\n","status":"published","published":"2022-08-31T11:08:21Z","modified":"2026-02-04T03:03:01.248272Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5145-1","title":"postgresql-10, postgresql-12, postgresql-13 vulnerabilities","description":"Jacob Champion discovered that PostgreSQL incorrectly handled SSL\ncertificate verification and encryption. A remote attacker could possibly\nuse this issue to inject arbitrary SQL queries when a connection is first\nestablished.\n","status":"published","published":"2021-11-11T18:26:10Z","modified":"2026-04-27T15:59:20.679785Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5765-1","title":"postgresql-9.5 vulnerability","description":"Jacob Champion discovered that PostgreSQL incorrectly handled SSL\ncertificate verification and encryption. A remote attacker could possibly\nuse this issue to inject arbitrary SQL queries when a connection is first\nestablished.\n","status":"published","published":"2022-12-07T19:35:54Z","modified":"2026-06-25T13:31:37.732921796Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}