How do I remediate this PostgreSQL vulnerability?

[LovingSplunk]

I am on version 7.1.0 for my SOAR instance and I see my PostgreSQL version is 15.14. How can I remediate the following? - PostgreSQL 14.x < 14.21 / 15.x < 15.16 / 16.x < 16.12 / 17.x < 17.8 / 18.x < 18.2 Multiple Vulnerabilities - https://www.tenable.com/plugins/nessus/299758

I did a double upgrade from 6.3.x to 7.0.0 and then to 7.1.0, hoping that this would get resolved, but no luck.

Our SOAR support expert explained that there is no SOAR version that has the proper PostgreSQL version to remediate this.

Is there a workaround for this? 

[livehybrid]

Hi @LovingSplunk 

If you want to be able to maintain the version of Postgres in use then you can setup an external Postgres DB using the following guide: https://help.splunk.com/en/splunk-soar/soar-on-premises/install-and-upgrade-soar-on-premises/7.1.0/r...

The guide is for 15.3 but I understand later versions should be a similar process.

I would not recommend upgrading any library/package (e.g. postgres) bundled inside Splunk SOAR however this might offer the compromise you need if you arent able to wait for the next version of Splunk SOAR (which would usually patch things like this).

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing