Downloading the official installer for Windows linked on the PostgreSQL webseite postgresql-14.5-1-windows-x64.exe and installing PostgreSQL 14.5 results in Greenbone detecting the wrong version and thus resulting in a false positive for the check:
PostgreSQL 10.x < 10.22, 11.x < 11.17, 12.x < 12.12, 13.x < 13.8, 14.x…
Greenbone result is:
Installed version: 18.104.22.16820
Fixed version: 14.5
path / port: C:\Program Files\PostgreSQL\14
SELECT version(); on the database reports PostgreSQL 14.5, the file properties on Windows have
so it appears the check is falsely checking Fileversion instead of Productversion.
Thanks a lot for your posting.
There might be a reason why the dev had chosen to use
Fileversion instead of
Productversion in the past (e.g.
Productversion was empty / not set for older versions of PostgreSQL and
Fileversion contained the expected version). Switching the extraction from
Productversion could cause other problems in that case.
Nevertheless i have created an internal ticket for the team working on this topic to evaluate / check the PostgreSQL detection.
To follow-up to this the detection has been updated to use
Product version instead of
File version and the changes should be already in the recent feeds.
As a background:
In PostgreSQL 9.6.x the
Product version was
9.6.24 with the
File version having
22.214.171.12412, that was probably the reason why the more detailed
File version had been used in the past.
But it seem starting from a least PostgreSQL 11.x the
Product version is now
11.17 while the
File version versioning scheme had changed to
126.96.36.19920 which caused problems for version checks checking for e.g.