Azure Database for PostgreSQL
An Azure managed PostgreSQL database service for app development and deployment.
1,159 questions
Does Azure support PostgreSQL version 16.6?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 39%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJP%3C/text%3E%3C/svg%3E)
Joana Pedroso
0
Reputation points
Hello,
My project is currently using version 15.7 of PostgreSQL Flexible server. However, we need to do an update to fix the following security vulnerabilities:
- https://www.postgresql.org/support/security/CVE-2024-10976/
- https://www.postgresql.org/support/security/CVE-2024-10977/
- https://www.postgresql.org/support/security/CVE-2024-10978/
- https://www.postgresql.org/support/security/CVE-2024-10979/
As you can see there, those vulnerabilities are fixed in version 15.9, 16.6 or 17.1. Since major 17 is still a preview, we decided we would update to 16, but it needs to be 16.6 otherwise it doesn't fix the vulnerabilities.
I saw here https://zcusa.951200.xyz/en-us/azure/postgresql/flexible-server/concepts-supported-versions that the current minor for 16 is 16.4, so it wouldn't fix the vulnerability. For 17, the current minor is 17.0 so no point updating for 17. Even if we stay in 15, it says there the current minor is 15.8 which doesn't fix the vulnerabilities either.
Does this mean that Azure does not support minor version 16.6? Or at least 15.9? Any suggestions on how to proceed to fix these security vulnerabilities?
Thank you.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 49%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVK%3C/text%3E%3C/svg%3E)
Vijayalaxmi Kattimani 905 Reputation points Microsoft Vendor2025-01-09T15:17:28.77+00:00 Hi @Joana Pedroso,
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.
We would like to inform you that, as per the documentation https://zcusa.951200.xyz/en-us/azure/postgresql/flexible-server/concepts-supported-versions Azure Database for PostgreSQL Flexible Server currently supports PostgreSQL version 16 with minor version 16.4, and version 15 with minor version 15.8. The security vulnerabilities you have mentioned are addressed in versions 15.9, 16.5, and 17.1. the immediate solution to address these vulnerabilities is not available through an upgrade within the Azure platform.
Even though, I am uncertain about providing confirmation regarding your concern, so I recommend reaching out to Azure support for specialized assistance with your issue.
If you have a support plan could you please file a support ticket for deeper investigation and do share the SR# with us? In case if you don't have a support plan please let us know here.
We request you to regularly check for Azure's release notes and supported versions page for announcements regarding new minor version support.
I hope this information helps. Please do let us know if you have any further queries.
-
Joana Pedroso 0 Reputation points
2025-01-10T11:22:22.43+00:00 Hello,
Thank you for your response. We have a support plan and I created SR: 2501100050001587.
-
Vijayalaxmi Kattimani 905 Reputation points Microsoft Vendor
2025-01-13T09:58:47.5633333+00:00 Hi @Joana Pedroso,
Have you received any updates from the internal team regarding your raised Service Request number? If not, kindly follow up on the issue.
Sign in to comment
Sign in to answer