PostgreSQL : vulnérabilité

1. Vérifier si vous êtes concerné

   Comparer la version installée aux versions corrigées ci-dessous.

   psql --version
   postgres --version

2. Corriger

   Versions corrigées : voir l'avis de l'éditeur (lien dans les sources).

   Mettre à jour PostgreSQL vers la version mineure corrigée et redémarrer, après sauvegarde.

   sudo apt update && sudo apt install --only-upgrade "postgresql-*"

3. En attendant le correctif

   Vérifier que le port 5432 et pg_hba.conf ne laissent entrer que les hôtes attendus.

4. Contrôler

   psql --version et select version(); doivent afficher la version corrigée.

Commandes indicatives (Debian ou Ubuntu) : à adapter à chaque serveur, après sauvegarde.

Antananarivo, Madagascar - October 06, 2026 PostgreSQL UTL_SMTP compatibility extension pg_utl_smtp is a PostgreSQL extension to create, manage and use Oracle-style UTL_SMTP package. The use and behavior is just like with the UTL_SMTP Oracle package. This work is released from the HexaRocket project. This extension allows email notifications to be sent from triggers or stored procedures. By integrating the extension directly into the database, you can trigger data-driven actions without waiting for application intervention. Examples include security alerts or notifications when certain minimum thresholds are reached. pg_utl_smtp v2.0.0 has been released, this new major version adds an asynchronous mode with setting pg_utl_smtp.asynchronous enabled. The Oracle version doesn't support asynchronous mode but this feature can be useful if you want to port the MSSQL sp_send_dbmail() procedure using pg_utl_smtp. Other changes in this release: - Raise an error when the SMTP server returns an error to HELO/EHLO, MAIL, RCPT, DATA, end of DATA or QUIT. - Fix duplicate EHLO sent at connection - Implement SSL/TLS connections (secure_connection_before_smtp). - QUIT releases the connection, a second QUIT raises an error. - When the connection can not be established the WARNING gives the reason. - Add regression tests by GitHub Actions. To upgrade an installed version 2.0.0 execute: ALTER EXTENSION pg_utl_smtp UPDATE; This extension uses plperl stored procedures based on the Net::SMTP Perl module to provide the procedures of the UTL_SMTP package. Links & Credits pg_utl_smtp is an open project under the PostgreSQL license created by Gilles Darold at HexaCluster Corp. as part of the HexaRocket migration solution. Any contribution to build a better tool is welcome. You can send your ideas, features requests or patches using the GitHub tools. Links : - Download: https://github.com/HexaCluster/pg_utl_smtp/releases/ - Support: use GitHub report tool at…