Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 579
Alerts This Week
Warning Icon 1 579

SUSE PostgreSQL18 Important Security Update Buffer Overflow 2026-0585-1

suse
Calendar Grey February 20, 2026
Dist Suse Esm H88
SUSE security update addresses multiple issues in postgresql18 ensuring higher system integrity and performance. Install now!
An update that solves five vulnerabilities can now be installed.

Summary

## This update for postgresql18 fixes the following issues: Update to version 18.2. Security issues fixed: * CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory (bsc#1258008). * CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code execution (bsc#1258009). * CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution (bsc#1258010). * CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution (bsc#1258011). * CVE-2026-2007: pg_trgm heap buffer overflow can cause to write pattern onto server memory (bsc#1258012). ## Patch Instructions:

Topics%20covered

Topics Covered

security advisory security issue buffer overflow SuSE important postgresql18

References

* bsc#1258008

* bsc#1258009

* bsc#1258010

* bsc#1258011

* bsc#1258012

Cross-

* CVE-2026-2003

* CVE-2026-2004

* CVE-2026-2005

* CVE-2026-2006

* CVE-2026-2007

CVSS scores:

* CVE-2026-2003 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

* CVE-2026-2004 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-2005 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-2006 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-2007 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected Products:

* SUSE Linux Enterprise High Performance Computing 12 SP5

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS

* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:0585-1
Release Date: 2026-02-20T10:03:37Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue buffer overflow SuSE important postgresql18

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.