PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this data is consulted during the query planning process. Prior to this release, a user could craft a leaky operator that bypassed view access control lists (ACLs) and bypassed row security policies in partitioning or table inheritance hierarchies. Reachable statistics data notably included histograms and most-common-values lists. CVE-2017-7484 and CVE-2019-10130 intended to close this class of vulnerability, but this gap remained. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected.
{
"binaries": [
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "libecpg-compat3"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "libecpg-dev"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "libecpg6"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "libpgtypes3"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "libpq-dev"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "libpq5"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "postgresql-12"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "postgresql-client-12"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "postgresql-doc-12"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "postgresql-plperl-12"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "postgresql-plpython3-12"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "postgresql-pltcl-12"
},
{
"binary_version": "12.22-0ubuntu0.20.04.4",
"binary_name": "postgresql-server-dev-12"
}
]
}{
"binaries": [
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "libecpg-compat3"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "libecpg-dev"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "libecpg6"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "libpgtypes3"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "libpq-dev"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "libpq5"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "postgresql-14"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "postgresql-client-14"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "postgresql-doc-14"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "postgresql-plperl-14"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "postgresql-plpython3-14"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "postgresql-pltcl-14"
},
{
"binary_version": "14.19-0ubuntu0.22.04.1",
"binary_name": "postgresql-server-dev-14"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "libecpg-compat3"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "libecpg-dev"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "libecpg6"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "libpgtypes3"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "libpq-dev"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "libpq5"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "postgresql-16"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "postgresql-client-16"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "postgresql-doc-16"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "postgresql-plperl-16"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "postgresql-plpython3-16"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "postgresql-pltcl-16"
},
{
"binary_version": "16.10-0ubuntu0.24.04.1",
"binary_name": "postgresql-server-dev-16"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "libecpg-compat3"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "libecpg-dev"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "libecpg6"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "libpgtypes3"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "libpq-dev"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "libpq5"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "postgresql-17"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "postgresql-client-17"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "postgresql-doc-17"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "postgresql-plperl-17"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "postgresql-plpython3-17"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "postgresql-pltcl-17"
},
{
"binary_version": "17.6-0ubuntu0.25.04.1",
"binary_name": "postgresql-server-dev-17"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "17.6-1",
"binary_name": "libecpg-compat3"
},
{
"binary_version": "17.6-1",
"binary_name": "libecpg-dev"
},
{
"binary_version": "17.6-1",
"binary_name": "libecpg6"
},
{
"binary_version": "17.6-1",
"binary_name": "libpgtypes3"
},
{
"binary_version": "17.6-1",
"binary_name": "libpq-dev"
},
{
"binary_version": "17.6-1",
"binary_name": "libpq5"
},
{
"binary_version": "17.6-1",
"binary_name": "postgresql-17"
},
{
"binary_version": "17.6-1",
"binary_name": "postgresql-client-17"
},
{
"binary_version": "17.6-1",
"binary_name": "postgresql-doc-17"
},
{
"binary_version": "17.6-1",
"binary_name": "postgresql-plperl-17"
},
{
"binary_version": "17.6-1",
"binary_name": "postgresql-plpython3-17"
},
{
"binary_version": "17.6-1",
"binary_name": "postgresql-pltcl-17"
},
{
"binary_version": "17.6-1",
"binary_name": "postgresql-server-dev-17"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "libecpg-compat3"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "libecpg-dev"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "libecpg6"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "libpgtypes3"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "libpq-dev"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "libpq5"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "postgresql-9.3"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "postgresql-client-9.3"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "postgresql-contrib-9.3"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "postgresql-doc-9.3"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "postgresql-plperl-9.3"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "postgresql-plpython-9.3"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "postgresql-plpython3-9.3"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "postgresql-pltcl-9.3"
},
{
"binary_version": "9.3.24-0ubuntu0.14.04+esm1",
"binary_name": "postgresql-server-dev-9.3"
}
]
}{
"binaries": [
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "libecpg-compat3"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "libecpg-dev"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "libecpg6"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "libpgtypes3"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "libpq-dev"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "libpq5"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "postgresql-9.5"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "postgresql-client-9.5"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "postgresql-contrib-9.5"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "postgresql-doc-9.5"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "postgresql-plperl-9.5"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "postgresql-plpython-9.5"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "postgresql-plpython3-9.5"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "postgresql-pltcl-9.5"
},
{
"binary_version": "9.5.25-0ubuntu0.16.04.1+esm10",
"binary_name": "postgresql-server-dev-9.5"
}
]
}{
"binaries": [
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "libecpg-compat3"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "libecpg-dev"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "libecpg6"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "libpgtypes3"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "libpq-dev"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "libpq5"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "postgresql-10"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "postgresql-client-10"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "postgresql-doc-10"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "postgresql-plperl-10"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "postgresql-plpython-10"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "postgresql-plpython3-10"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "postgresql-pltcl-10"
},
{
"binary_version": "10.23-0ubuntu0.18.04.2+esm3",
"binary_name": "postgresql-server-dev-10"
}
]
}