{"id":30323,"date":"2024-01-21T22:41:49","date_gmt":"2024-01-21T21:41:49","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/?p=30323"},"modified":"2025-03-04T11:03:46","modified_gmt":"2025-03-04T10:03:46","slug":"postgresqls-new-milestone-in-security-officially-cve-numbering-authority","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/","title":{"rendered":"PostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority"},"content":{"rendered":"\n

The PostgreSQL Community just made a significant leap forward in database security :
Postgresql is now a CVE Numbering Authority (CNA). Here is the original announcement about PostgreSQL being added as a CNA on the CVE website<\/a>.<\/p>\n\n\n\n

This move marks a pivotal moment for PostgreSQL administrators and users. The Root CVE for Postgresql is RedHat. This last one has only been Root for about a year. So what are the implications?<\/strong><\/p>\n\n\n\n

As a CNA, PostgreSQL is now at the forefront of managing and assigning CVEs to its vulnerabilities. This role ensures vulnerabilities are managed effectively, minimizing risks to users.<\/p>\n\n\n\n

How? <\/strong>Well, the ability to assign CVEs directly means PostgreSQL vulnerabilities can be more quickly identified and incorporated into DevSecOps workflows. This ensures that security is a continuous and integral part of the entire development lifecycle.
With PostgreSQL now directly involved in the CVE process, automated tools that scan for vulnerabilities and compliance issues can more effectively identify and flag potential PostgreSQL-related security risks. This integration enhances the speed and accuracy of security audits and responses. Tools Like Neuvector<\/a> can help leverage this.
For DBAs and Developers, this means reducing the window of exposure and being sure that compliance is maximized.
This will have a huge impact on businesses where RDBMS of choice are SQL Server and Oracle for compliance issues. Along with FIPS compliancy capabilities<\/strong> ( see Peter’s blog post<\/a> on this ) of Postgresql, CNA will add a new reason for editors and developers to migrate to Postgresql.
The other implication is the collaboration between OPS, Development, and Security teams is improved allowing easier “shift left” practices around PostgreSQL solutions.<\/p>\n\n\n\n

This matters because it will boost PostgreSQL’s global recognition and demonstrate that the PostgreSQL Global Development Group is deeply committed to being at the forefront of their ecosystem Security( hardware, OS, programming language, framework, client libraries\u2026).<\/p>\n\n\n\n

In conclusion :<\/strong><\/h2>\n\n\n\n

While the reporting process remains the same (via security@postgresql.org<\/a>), the role of CNA streamlines and centralizes this task. PostgreSQL\u2019s clear guidelines on vulnerability reporting, are still available on their security page<\/a>. This also underscores their commitment to maintaining a transparent and efficient process.
PostgreSQL\u2019s status as a CVE Numbering Authority is a testament to its evolving security landscape.<\/p>\n","protected":false},"excerpt":{"rendered":"

The PostgreSQL Community just made a significant leap forward in database security :Postgresql is now a CVE Numbering Authority (CNA). Here is the original announcement about PostgreSQL being added as a CNA on the CVE website. This move marks a pivotal moment for PostgreSQL administrators and users. The Root CVE for Postgresql is RedHat. This […]<\/p>\n","protected":false},"author":153,"featured_media":30327,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229,1320,83,149],"tags":[3220,3221,77],"type_dbi":[],"class_list":["post-30323","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-database-administration-monitoring","category-devops","category-postgresql","category-security","tag-cve","tag-devsecops","tag-postgresql"],"acf":[],"yoast_head":"\nPostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority\" \/>\n<meta property=\"og:description\" content=\"The PostgreSQL Community just made a significant leap forward in database security :Postgresql is now a CVE Numbering Authority (CNA). Here is the original announcement about PostgreSQL being added as a CNA on the CVE website. This move marks a pivotal moment for PostgreSQL administrators and users. The Root CVE for Postgresql is RedHat. This […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-21T21:41:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-04T10:03:46+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/01\/pixlr-image-generator-a9d84b27-200c-47ee-a53b-8e11ea362408.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Adrien Obernesser\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adrien Obernesser\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/\"},\"author\":{\"name\":\"Adrien Obernesser\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/fd2ab917212ce0200c7618afaa7fdbcd\"},\"headline\":\"PostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority\",\"datePublished\":\"2024-01-21T21:41:49+00:00\",\"dateModified\":\"2025-03-04T10:03:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/\"},\"wordCount\":380,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/01\/pixlr-image-generator-a9d84b27-200c-47ee-a53b-8e11ea362408.png\",\"keywords\":[\"CVE\",\"DevSecOps\",\"PostgreSQL\"],\"articleSection\":[\"Database Administration & Monitoring\",\"DevOps\",\"PostgreSQL\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/\",\"name\":\"PostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/01\/pixlr-image-generator-a9d84b27-200c-47ee-a53b-8e11ea362408.png\",\"datePublished\":\"2024-01-21T21:41:49+00:00\",\"dateModified\":\"2025-03-04T10:03:46+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/fd2ab917212ce0200c7618afaa7fdbcd\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#primaryimage\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/01\/pixlr-image-generator-a9d84b27-200c-47ee-a53b-8e11ea362408.png\",\"contentUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/01\/pixlr-image-generator-a9d84b27-200c-47ee-a53b-8e11ea362408.png\",\"width\":1344,\"height\":768},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/fd2ab917212ce0200c7618afaa7fdbcd\",\"name\":\"Adrien Obernesser\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/dc9316c729e50107159e0a1e631b9c1742ce8898576887d0103c83b1ca3bc9e6?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/dc9316c729e50107159e0a1e631b9c1742ce8898576887d0103c83b1ca3bc9e6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/dc9316c729e50107159e0a1e631b9c1742ce8898576887d0103c83b1ca3bc9e6?s=96&d=mm&r=g\",\"caption\":\"Adrien Obernesser\"},\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/adrienobernesser\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"PostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/","og_locale":"en_US","og_type":"article","og_title":"PostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority","og_description":"The PostgreSQL Community just made a significant leap forward in database security :Postgresql is now a CVE Numbering Authority (CNA). Here is the original announcement about PostgreSQL being added as a CNA on the CVE website. This move marks a pivotal moment for PostgreSQL administrators and users. The Root CVE for Postgresql is RedHat. This […]","og_url":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/","og_site_name":"dbi Blog","article_published_time":"2024-01-21T21:41:49+00:00","article_modified_time":"2025-03-04T10:03:46+00:00","og_image":[{"width":1344,"height":768,"url":"http:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/01\/pixlr-image-generator-a9d84b27-200c-47ee-a53b-8e11ea362408.png","type":"image\/png"}],"author":"Adrien Obernesser","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Adrien Obernesser","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/"},"author":{"name":"Adrien Obernesser","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/fd2ab917212ce0200c7618afaa7fdbcd"},"headline":"PostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority","datePublished":"2024-01-21T21:41:49+00:00","dateModified":"2025-03-04T10:03:46+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/"},"wordCount":380,"commentCount":0,"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/01\/pixlr-image-generator-a9d84b27-200c-47ee-a53b-8e11ea362408.png","keywords":["CVE","DevSecOps","PostgreSQL"],"articleSection":["Database Administration & Monitoring","DevOps","PostgreSQL","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/","url":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/","name":"PostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#primaryimage"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/01\/pixlr-image-generator-a9d84b27-200c-47ee-a53b-8e11ea362408.png","datePublished":"2024-01-21T21:41:49+00:00","dateModified":"2025-03-04T10:03:46+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/fd2ab917212ce0200c7618afaa7fdbcd"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#primaryimage","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/01\/pixlr-image-generator-a9d84b27-200c-47ee-a53b-8e11ea362408.png","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2024\/01\/pixlr-image-generator-a9d84b27-200c-47ee-a53b-8e11ea362408.png","width":1344,"height":768},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/postgresqls-new-milestone-in-security-officially-cve-numbering-authority\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"PostgreSQL\u2019s New Milestone in Security: Officially CVE Numbering Authority"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/fd2ab917212ce0200c7618afaa7fdbcd","name":"Adrien Obernesser","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/dc9316c729e50107159e0a1e631b9c1742ce8898576887d0103c83b1ca3bc9e6?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/dc9316c729e50107159e0a1e631b9c1742ce8898576887d0103c83b1ca3bc9e6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/dc9316c729e50107159e0a1e631b9c1742ce8898576887d0103c83b1ca3bc9e6?s=96&d=mm&r=g","caption":"Adrien Obernesser"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/adrienobernesser\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/30323","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/153"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=30323"}],"version-history":[{"count":16,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/30323\/revisions"}],"predecessor-version":[{"id":30345,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/30323\/revisions\/30345"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media\/30327"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=30323"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=30323"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=30323"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=30323"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}