PT-2026-79975 · Bitnami · Postgresql

Published

2026-08-19

·

Updated

2026-08-19

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed even with the wrong key. This in turn loses the modest protection from the Modification Detection Code (MDC). Affected functions are pgp sym encrypt, pgp sym decrypt, pgp pub encrypt, pgp pub decrypt, pgp sym encrypt bytea, pgp sym decrypt bytea, pgp pub encrypt bytea, and pgp pub decrypt bytea. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

BIT-POSTGRESQL-2026-14663

Affected Products

Postgresql