Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

SUSE 16.0 postgresql14 Important Security Fix 2026-20587-1

suse
Calendar Grey March 5, 2026
Dist Suse Esm H88
Update for postgresql14 addresses important issues including six vulnerabilities and multiple risks. Install now!
An update that solves six vulnerabilities can now be installed.

Summary

## This update for postgresql14 fixes the following issues: Update to version 14.21. Security issues fixed: * CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory (bsc#1258008). * CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code execution (bsc#1258009). * CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution (bsc#1258010). * CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution (bsc#1258011). * CVE-2025-12817: missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332). * CVE-2025-12818: integer overflow in allocation-size calculations within

Topics%20covered

Topics Covered

security advisory SuSE buffer overrun arbitrary code execution important postgresql14

References

* bsc#1253332

* bsc#1253333

* bsc#1258008

* bsc#1258009

* bsc#1258010

* bsc#1258011

Cross-

* CVE-2025-12817

* CVE-2025-12818

* CVE-2026-2003

* CVE-2026-2004

* CVE-2026-2005

* CVE-2026-2006

CVSS scores:

* CVE-2025-12817 ( SUSE ): 5.3

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

* CVE-2025-12817 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

* CVE-2025-12817 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

* CVE-2025-12818 ( SUSE ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-12818 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-12818 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-2003 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:20587-1
Release Date: 2026-02-20T16:14:27Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE buffer overrun arbitrary code execution important postgresql14

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here