Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 25 articles for you...
202
security advisorySQL Injectionbuffer overflowopenSUSE PostgreSQL15 Important SQL Injection Buffer Overflow 2026-21103-1
An update that solves 8 vulnerabilities and has 10 bug fixes can now be installed.. openSUSE security update: security update for postgresql15 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21103-1 Rating: important References: * bsc#1258754 * bsc#1263804 * bsc#1265172 * bsc#1265173 * bsc#1265174 * bsc#1265175 * bsc#1265177 * bsc#1265178 * bsc#1265179 * bsc#1265181 Cross-References: * CVE-2026-6472 * CVE-2026-6473 * CVE-2026-6474 * CVE-2026-6475 * CVE-2026-6477 * CVE-2026-6478 * CVE-2026-6479 * CVE-2026-6637 CVSS scores: * CVE-2026-6472 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6473 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6474 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-6475 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6477 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6478 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6479 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6637 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 8 vulnerabilities and has 10 bug fixes can now be installed. Description: This update for postgresql15 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-2026-6474: Guard against malicious time zone names (bsc#1265174). - CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175). - CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177). - CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178). -CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179). - CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181). Non security issue: - Update to version 15.18. - Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional updates (jsc#PED-14823). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-968=1 Package List: - openSUSE Leap 16.0: postgresql15-15.18-160000.1.1 postgresql15-contrib-15.18-160000.1.1 postgresql15-devel-15.18-160000.1.1 postgresql15-docs-15.18-160000.1.1 postgresql15-llvmjit-15.18-160000.1.1 postgresql15-llvmjit-devel-15.18-160000.1.1 postgresql15-plperl-15.18-160000.1.1 postgresql15-plpython-15.18-160000.1.1 postgresql15-pltcl-15.18-160000.1.1 postgresql15-server-15.18-160000.1.1 postgresql15-server-devel-15.18-160000.1.1 postgresql15-test-15.18-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2026-6472.html * https://www.suse.com/security/cve/CVE-2026-6473.html * https://www.suse.com/security/cve/CVE-2026-6474.html * https://www.suse.com/security/cve/CVE-2026-6475.html * https://www.suse.com/security/cve/CVE-2026-6477.html * https://www.suse.com/security/cve/CVE-2026-6478.html * https://www.suse.com/security/cve/CVE-2026-6479.html * https://www.suse.com/security/cve/CVE-2026-6637.html . This openSUSE security update addresses key vulnerabilities in postgresql15 with solutions and fixes available.. OpenSUSE Security Update, PostgreSQL15 Fixes, Important Security Advisory. . Severity: Important. LinuxSecurity.com Team
Jun 30, 2026
•Important
OpenSUSE
100
security advisorySQL Injectionbuffer overflowSUSE PostgreSQL15 Important Security Patch SQL Injection 2026-22183-1
An update that solves eight vulnerabilities, contains one feature and has two fixes can now be installed.. # Security update for postgresql15 Announcement ID: SUSE-SU-2026:22183-1 Release Date: 2026-06-19T17:03:04Z Rating: important References: * bsc#1258754 * bsc#1263804 * bsc#1265172 * bsc#1265173 * bsc#1265174 * bsc#1265175 * bsc#1265177 * bsc#1265178 * bsc#1265179 * bsc#1265181 * jsc#PED-14823 Cross-References: * CVE-2026-6472 * CVE-2026-6473 * CVE-2026-6474 * CVE-2026-6475 * CVE-2026-6477 * CVE-2026-6478 * CVE-2026-6479 * CVE-2026-6637 CVSS scores: * CVE-2026-6472 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6472 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6473 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6473 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6474 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-6474 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-6475 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6475 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6477 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6477 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6478 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6478 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6479 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6479 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6637 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6637 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves eight vulnerabilities, contains onefeature and has two fixes can now be installed. ## Description: This update for postgresql15 fixes the following issues Security issues: * CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). * CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). * CVE-2026-6474: Guard against malicious time zone names (bsc#1265174). * CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175). * CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177). * CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178). * CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179). * CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181). Non security issue: * Update to version 15.18. * Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional updates (jsc#PED-14823). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-968=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-968=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * postgresql15-server-debuginfo-15.18-160000.1.1 * postgresql15-server-devel-debuginfo-15.18-160000.1.1 * postgresql15-pltcl-debuginfo-15.18-160000.1.1 * postgresql15-debugsource-15.18-160000.1.1 * postgresql15-devel-debuginfo-15.18-160000.1.1 * postgresql15-server-15.18-160000.1.1 * postgresql15-debuginfo-15.18-160000.1.1 * postgresql15-plpython-debuginfo-15.18-160000.1.1 * postgresql15-plpython-15.18-160000.1.1 *postgresql15-contrib-15.18-160000.1.1 * postgresql15-plperl-debuginfo-15.18-160000.1.1 * postgresql15-pltcl-15.18-160000.1.1 * postgresql15-server-devel-15.18-160000.1.1 * postgresql15-contrib-debuginfo-15.18-160000.1.1 * postgresql15-15.18-160000.1.1 * postgresql15-plperl-15.18-160000.1.1 * postgresql15-devel-15.18-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * postgresql15-docs-15.18-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * postgresql15-server-debuginfo-15.18-160000.1.1 * postgresql15-server-devel-debuginfo-15.18-160000.1.1 * postgresql15-pltcl-debuginfo-15.18-160000.1.1 * postgresql15-debugsource-15.18-160000.1.1 * postgresql15-devel-debuginfo-15.18-160000.1.1 * postgresql15-server-15.18-160000.1.1 * postgresql15-debuginfo-15.18-160000.1.1 * postgresql15-plpython-debuginfo-15.18-160000.1.1 * postgresql15-plpython-15.18-160000.1.1 * postgresql15-contrib-15.18-160000.1.1 * postgresql15-plperl-debuginfo-15.18-160000.1.1 * postgresql15-pltcl-15.18-160000.1.1 * postgresql15-server-devel-15.18-160000.1.1 * postgresql15-contrib-debuginfo-15.18-160000.1.1 * postgresql15-15.18-160000.1.1 * postgresql15-plperl-15.18-160000.1.1 * postgresql15-devel-15.18-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * postgresql15-docs-15.18-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-6472.html * https://www.suse.com/security/cve/CVE-2026-6473.html * https://www.suse.com/security/cve/CVE-2026-6474.html * https://www.suse.com/security/cve/CVE-2026-6475.html * https://www.suse.com/security/cve/CVE-2026-6477.html * https://www.suse.com/security/cve/CVE-2026-6478.html * https://www.suse.com/security/cve/CVE-2026-6479.html * https://www.suse.com/security/cve/CVE-2026-6637.html * https://bugzilla.suse.com/show_bug.cgi?id=1258754 * https://bugzilla.suse.com/show_bug.cgi?id=1263804 *https://bugzilla.suse.com/show_bug.cgi?id=1265172 * https://bugzilla.suse.com/show_bug.cgi?id=1265173 * https://bugzilla.suse.com/show_bug.cgi?id=1265174 * https://bugzilla.suse.com/show_bug.cgi?id=1265175 * https://bugzilla.suse.com/show_bug.cgi?id=1265177 * https://bugzilla.suse.com/show_bug.cgi?id=1265178 * https://bugzilla.suse.com/show_bug.cgi?id=1265179 * https://bugzilla.suse.com/show_bug.cgi?id=1265181 * https://jira.suse.com/browse/PED-14823 . This important update for PostgreSQL 15 addresses eight vulnerabilities, ensuring better performance and security.. PostgreSQL 15 update, SUSE security update, SQL injection prevention, buffer overflow protection. . Severity: Important. LinuxSecurity.com Team
Jun 23, 2026
•Important
SuSE
202
security advisorySQL Injectionbuffer overflowopenSUSE PostgreSQL15 Important Security Issues 2026-1999-1
An update that solves eight vulnerabilities, contains one feature and has one security fix can now be installed.. # Security update for postgresql15 Announcement ID: SUSE-SU-2026:1999-1 Release Date: 2026-05-19T08:19:36Z Rating: important References: * bsc#1263804 * bsc#1265172 * bsc#1265173 * bsc#1265174 * bsc#1265175 * bsc#1265177 * bsc#1265178 * bsc#1265179 * bsc#1265181 * jsc#PED-14823 Cross-References: * CVE-2026-6472 * CVE-2026-6473 * CVE-2026-6474 * CVE-2026-6475 * CVE-2026-6477 * CVE-2026-6478 * CVE-2026-6479 * CVE-2026-6637 CVSS scores: * CVE-2026-6472 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6472 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6473 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6473 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6474 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-6474 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-6475 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6475 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6477 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6477 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6478 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6478 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6479 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6479 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6637 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6637 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Legacy Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves eight vulnerabilities, contains one feature and has one security fix can now be installed. ## Description: This update for postgresql15 fixes the following issues Update to version 15.18. Security issues: * CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). * CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). * CVE-2026-6474: Guard against malicious time zone names (bsc#1265174). * CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175). * CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177). * CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178). * CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179). * CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181). Non security issue: * Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional updates (jsc#PED-14823). * /usr/bin/pg_config is missing after migrating away from update-alternatives (bsc#1263804). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-1999=1 * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-1999=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1999=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1999=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64i586) * postgresql15-server-debuginfo-15.18-150600.16.31.1 * postgresql15-llvmjit-debuginfo-15.18-150600.16.31.1 * postgresql15-test-15.18-150600.16.31.1 * postgresql15-plpython-debuginfo-15.18-150600.16.31.1 * postgresql15-server-devel-debuginfo-15.18-150600.16.31.1 * postgresql15-pltcl-debuginfo-15.18-150600.16.31.1 * postgresql15-plpython-15.18-150600.16.31.1 * postgresql15-debugsource-15.18-150600.16.31.1 * postgresql15-server-15.18-150600.16.31.1 * postgresql15-15.18-150600.16.31.1 * postgresql15-debuginfo-15.18-150600.16.31.1 * postgresql15-plperl-debuginfo-15.18-150600.16.31.1 * postgresql15-devel-15.18-150600.16.31.1 * postgresql15-pltcl-15.18-150600.16.31.1 * postgresql15-contrib-debuginfo-15.18-150600.16.31.1 * postgresql15-devel-debuginfo-15.18-150600.16.31.1 * postgresql15-contrib-15.18-150600.16.31.1 * postgresql15-server-devel-15.18-150600.16.31.1 * postgresql15-plperl-15.18-150600.16.31.1 * postgresql15-llvmjit-15.18-150600.16.31.1 * postgresql15-llvmjit-devel-15.18-150600.16.31.1 * openSUSE Leap 15.6 (noarch) * postgresql15-docs-15.18-150600.16.31.1 * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * postgresql15-server-debuginfo-15.18-150600.16.31.1 * postgresql15-server-15.18-150600.16.31.1 * postgresql15-devel-15.18-150600.16.31.1 * postgresql15-plperl-debuginfo-15.18-150600.16.31.1 * postgresql15-pltcl-15.18-150600.16.31.1 * postgresql15-plpython-debuginfo-15.18-150600.16.31.1 * postgresql15-15.18-150600.16.31.1 * postgresql15-contrib-debuginfo-15.18-150600.16.31.1 * postgresql15-devel-debuginfo-15.18-150600.16.31.1 * postgresql15-server-devel-debuginfo-15.18-150600.16.31.1 * postgresql15-contrib-15.18-150600.16.31.1 * postgresql15-pltcl-debuginfo-15.18-150600.16.31.1 * postgresql15-server-devel-15.18-150600.16.31.1 * postgresql15-plpython-15.18-150600.16.31.1 * postgresql15-debuginfo-15.18-150600.16.31.1 *postgresql15-plperl-15.18-150600.16.31.1 * postgresql15-debugsource-15.18-150600.16.31.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * postgresql15-server-debuginfo-15.18-150600.16.31.1 * postgresql15-server-15.18-150600.16.31.1 * postgresql15-devel-15.18-150600.16.31.1 * postgresql15-plperl-debuginfo-15.18-150600.16.31.1 * postgresql15-pltcl-15.18-150600.16.31.1 * postgresql15-plpython-debuginfo-15.18-150600.16.31.1 * postgresql15-15.18-150600.16.31.1 * postgresql15-contrib-debuginfo-15.18-150600.16.31.1 * postgresql15-devel-debuginfo-15.18-150600.16.31.1 * postgresql15-server-devel-debuginfo-15.18-150600.16.31.1 * postgresql15-contrib-15.18-150600.16.31.1 * postgresql15-pltcl-debuginfo-15.18-150600.16.31.1 * postgresql15-server-devel-15.18-150600.16.31.1 * postgresql15-plpython-15.18-150600.16.31.1 * postgresql15-debuginfo-15.18-150600.16.31.1 * postgresql15-plperl-15.18-150600.16.31.1 * postgresql15-debugsource-15.18-150600.16.31.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * postgresql15-docs-15.18-150600.16.31.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * postgresql15-server-debuginfo-15.18-150600.16.31.1 * postgresql15-server-15.18-150600.16.31.1 * postgresql15-devel-15.18-150600.16.31.1 * postgresql15-plperl-debuginfo-15.18-150600.16.31.1 * postgresql15-pltcl-15.18-150600.16.31.1 * postgresql15-plpython-debuginfo-15.18-150600.16.31.1 * postgresql15-15.18-150600.16.31.1 * postgresql15-contrib-debuginfo-15.18-150600.16.31.1 * postgresql15-devel-debuginfo-15.18-150600.16.31.1 * postgresql15-server-devel-debuginfo-15.18-150600.16.31.1 * postgresql15-contrib-15.18-150600.16.31.1 * postgresql15-pltcl-debuginfo-15.18-150600.16.31.1 * postgresql15-server-devel-15.18-150600.16.31.1 * postgresql15-plpython-15.18-150600.16.31.1 * postgresql15-debuginfo-15.18-150600.16.31.1 *postgresql15-plperl-15.18-150600.16.31.1 * postgresql15-debugsource-15.18-150600.16.31.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * postgresql15-docs-15.18-150600.16.31.1 ## References: * https://www.suse.com/security/cve/CVE-2026-6472.html * https://www.suse.com/security/cve/CVE-2026-6473.html * https://www.suse.com/security/cve/CVE-2026-6474.html * https://www.suse.com/security/cve/CVE-2026-6475.html * https://www.suse.com/security/cve/CVE-2026-6477.html * https://www.suse.com/security/cve/CVE-2026-6478.html * https://www.suse.com/security/cve/CVE-2026-6479.html * https://www.suse.com/security/cve/CVE-2026-6637.html * https://bugzilla.suse.com/show_bug.cgi?id=1263804 * https://bugzilla.suse.com/show_bug.cgi?id=1265172 * https://bugzilla.suse.com/show_bug.cgi?id=1265173 * https://bugzilla.suse.com/show_bug.cgi?id=1265174 * https://bugzilla.suse.com/show_bug.cgi?id=1265175 * https://bugzilla.suse.com/show_bug.cgi?id=1265177 * https://bugzilla.suse.com/show_bug.cgi?id=1265178 * https://bugzilla.suse.com/show_bug.cgi?id=1265179 * https://bugzilla.suse.com/show_bug.cgi?id=1265181 * https://jira.suse.com/browse/PED-14823 . Update for openSUSE fixes 8 issues in postgresql15, including important vulnerabilities and other enhancements.. openSUSE Update, postgresql security, postgresql vulnerabilities, security patch. . Severity: Important. LinuxSecurity.com Team
May 19, 2026
•Important
OpenSUSE
100
security advisorySQL InjectionSuSESUSE PostgreSQL15 Important SQL Injection and Security Fix 2026-2000-1
An update that solves eight vulnerabilities, contains one feature and has one security fix can now be installed.. # Security update for postgresql15 Announcement ID: SUSE-SU-2026:2000-1 Release Date: 2026-05-19T08:20:38Z Rating: important References: * bsc#1263804 * bsc#1265172 * bsc#1265173 * bsc#1265174 * bsc#1265175 * bsc#1265177 * bsc#1265178 * bsc#1265179 * bsc#1265181 * jsc#PED-14823 Cross-References: * CVE-2026-6472 * CVE-2026-6473 * CVE-2026-6474 * CVE-2026-6475 * CVE-2026-6477 * CVE-2026-6478 * CVE-2026-6479 * CVE-2026-6637 CVSS scores: * CVE-2026-6472 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6472 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6473 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6473 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6474 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-6474 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-6475 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6475 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6477 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6477 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6478 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6478 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6479 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6479 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6637 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6637 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance ComputingESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves eight vulnerabilities, contains one feature and has one security fix can now be installed. ## Description: This update for postgresql15 fixes the following issues Update to version 15.18. Security issues: * CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). * CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). * CVE-2026-6474: Guard against malicious time zone names (bsc#1265174). * CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175). * CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177). * CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178). * CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179). * CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181). Non security issue: * Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional updates (jsc#PED-14823). * /usr/bin/pg_config is missing after migrating away from update-alternatives (bsc#1263804). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patchSUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2000=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2000=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2000=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2000=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2000=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2000=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2000=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2000=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * postgresql15-server-debuginfo-15.18-150200.5.57.1 * postgresql15-contrib-debuginfo-15.18-150200.5.57.1 * postgresql15-plperl-15.18-150200.5.57.1 * postgresql15-plperl-debuginfo-15.18-150200.5.57.1 * postgresql15-15.18-150200.5.57.1 * postgresql15-pltcl-15.18-150200.5.57.1 * postgresql15-contrib-15.18-150200.5.57.1 * postgresql15-devel-15.18-150200.5.57.1 * postgresql15-debuginfo-15.18-150200.5.57.1 * postgresql15-server-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-plpython-15.18-150200.5.57.1 * postgresql15-plpython-debuginfo-15.18-150200.5.57.1 * postgresql15-debugsource-15.18-150200.5.57.1 * postgresql15-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-server-devel-15.18-150200.5.57.1 * postgresql15-server-15.18-150200.5.57.1 * postgresql15-pltcl-debuginfo-15.18-150200.5.57.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * postgresql15-docs-15.18-150200.5.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * postgresql15-server-debuginfo-15.18-150200.5.57.1 * postgresql15-contrib-debuginfo-15.18-150200.5.57.1 * postgresql15-plperl-15.18-150200.5.57.1 * postgresql15-plperl-debuginfo-15.18-150200.5.57.1 * postgresql15-15.18-150200.5.57.1 * postgresql15-pltcl-15.18-150200.5.57.1 * postgresql15-contrib-15.18-150200.5.57.1 * postgresql15-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-15.18-150200.5.57.1 * postgresql15-server-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-debugsource-15.18-150200.5.57.1 * postgresql15-plpython-15.18-150200.5.57.1 * postgresql15-plpython-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-server-devel-15.18-150200.5.57.1 * postgresql15-server-15.18-150200.5.57.1 * postgresql15-pltcl-debuginfo-15.18-150200.5.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * postgresql15-docs-15.18-150200.5.57.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * postgresql15-server-debuginfo-15.18-150200.5.57.1 * postgresql15-contrib-debuginfo-15.18-150200.5.57.1 * postgresql15-plperl-15.18-150200.5.57.1 * postgresql15-plperl-debuginfo-15.18-150200.5.57.1 * postgresql15-15.18-150200.5.57.1 * postgresql15-pltcl-15.18-150200.5.57.1 * postgresql15-contrib-15.18-150200.5.57.1 * postgresql15-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-15.18-150200.5.57.1 * postgresql15-server-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-debugsource-15.18-150200.5.57.1 * postgresql15-plpython-15.18-150200.5.57.1 * postgresql15-plpython-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-server-devel-15.18-150200.5.57.1 * postgresql15-server-15.18-150200.5.57.1 * postgresql15-pltcl-debuginfo-15.18-150200.5.57.1 * SUSE LinuxEnterprise High Performance Computing LTSS 15 SP4 (noarch) * postgresql15-docs-15.18-150200.5.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * postgresql15-server-debuginfo-15.18-150200.5.57.1 * postgresql15-contrib-debuginfo-15.18-150200.5.57.1 * postgresql15-plperl-15.18-150200.5.57.1 * postgresql15-plperl-debuginfo-15.18-150200.5.57.1 * postgresql15-15.18-150200.5.57.1 * postgresql15-pltcl-15.18-150200.5.57.1 * postgresql15-contrib-15.18-150200.5.57.1 * postgresql15-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-15.18-150200.5.57.1 * postgresql15-server-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-debugsource-15.18-150200.5.57.1 * postgresql15-plpython-15.18-150200.5.57.1 * postgresql15-plpython-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-server-devel-15.18-150200.5.57.1 * postgresql15-server-15.18-150200.5.57.1 * postgresql15-pltcl-debuginfo-15.18-150200.5.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * postgresql15-docs-15.18-150200.5.57.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * postgresql15-server-debuginfo-15.18-150200.5.57.1 * postgresql15-contrib-debuginfo-15.18-150200.5.57.1 * postgresql15-plperl-15.18-150200.5.57.1 * postgresql15-plperl-debuginfo-15.18-150200.5.57.1 * postgresql15-15.18-150200.5.57.1 * postgresql15-pltcl-15.18-150200.5.57.1 * postgresql15-contrib-15.18-150200.5.57.1 * postgresql15-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-15.18-150200.5.57.1 * postgresql15-server-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-plpython-15.18-150200.5.57.1 * postgresql15-plpython-debuginfo-15.18-150200.5.57.1 * postgresql15-debugsource-15.18-150200.5.57.1 * postgresql15-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-server-devel-15.18-150200.5.57.1 *postgresql15-server-15.18-150200.5.57.1 * postgresql15-pltcl-debuginfo-15.18-150200.5.57.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * postgresql15-docs-15.18-150200.5.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * postgresql15-server-debuginfo-15.18-150200.5.57.1 * postgresql15-contrib-debuginfo-15.18-150200.5.57.1 * postgresql15-plperl-15.18-150200.5.57.1 * postgresql15-plperl-debuginfo-15.18-150200.5.57.1 * postgresql15-15.18-150200.5.57.1 * postgresql15-pltcl-15.18-150200.5.57.1 * postgresql15-contrib-15.18-150200.5.57.1 * postgresql15-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-15.18-150200.5.57.1 * postgresql15-server-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-debugsource-15.18-150200.5.57.1 * postgresql15-plpython-15.18-150200.5.57.1 * postgresql15-plpython-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-server-devel-15.18-150200.5.57.1 * postgresql15-server-15.18-150200.5.57.1 * postgresql15-pltcl-debuginfo-15.18-150200.5.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * postgresql15-docs-15.18-150200.5.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * postgresql15-server-debuginfo-15.18-150200.5.57.1 * postgresql15-contrib-debuginfo-15.18-150200.5.57.1 * postgresql15-plperl-15.18-150200.5.57.1 * postgresql15-plperl-debuginfo-15.18-150200.5.57.1 * postgresql15-15.18-150200.5.57.1 * postgresql15-pltcl-15.18-150200.5.57.1 * postgresql15-contrib-15.18-150200.5.57.1 * postgresql15-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-15.18-150200.5.57.1 * postgresql15-server-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-debugsource-15.18-150200.5.57.1 * postgresql15-plpython-15.18-150200.5.57.1 * postgresql15-plpython-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-server-devel-15.18-150200.5.57.1 * postgresql15-server-15.18-150200.5.57.1 * postgresql15-pltcl-debuginfo-15.18-150200.5.57.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * postgresql15-docs-15.18-150200.5.57.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * postgresql15-server-debuginfo-15.18-150200.5.57.1 * postgresql15-contrib-debuginfo-15.18-150200.5.57.1 * postgresql15-plperl-15.18-150200.5.57.1 * postgresql15-plperl-debuginfo-15.18-150200.5.57.1 * postgresql15-15.18-150200.5.57.1 * postgresql15-pltcl-15.18-150200.5.57.1 * postgresql15-contrib-15.18-150200.5.57.1 * postgresql15-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-15.18-150200.5.57.1 * postgresql15-server-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-debugsource-15.18-150200.5.57.1 * postgresql15-plpython-15.18-150200.5.57.1 * postgresql15-plpython-debuginfo-15.18-150200.5.57.1 * postgresql15-devel-debuginfo-15.18-150200.5.57.1 * postgresql15-server-devel-15.18-150200.5.57.1 * postgresql15-server-15.18-150200.5.57.1 * postgresql15-pltcl-debuginfo-15.18-150200.5.57.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * postgresql15-docs-15.18-150200.5.57.1 ## References: * https://www.suse.com/security/cve/CVE-2026-6472.html * https://www.suse.com/security/cve/CVE-2026-6473.html * https://www.suse.com/security/cve/CVE-2026-6474.html * https://www.suse.com/security/cve/CVE-2026-6475.html * https://www.suse.com/security/cve/CVE-2026-6477.html * https://www.suse.com/security/cve/CVE-2026-6478.html * https://www.suse.com/security/cve/CVE-2026-6479.html * https://www.suse.com/security/cve/CVE-2026-6637.html * https://bugzilla.suse.com/show_bug.cgi?id=1263804 * https://bugzilla.suse.com/show_bug.cgi?id=1265172 * https://bugzilla.suse.com/show_bug.cgi?id=1265173 * https://bugzilla.suse.com/show_bug.cgi?id=1265174 * https://bugzilla.suse.com/show_bug.cgi?id=1265175 * https://bugzilla.suse.com/show_bug.cgi?id=1265177 * https://bugzilla.suse.com/show_bug.cgi?id=1265178 * https://bugzilla.suse.com/show_bug.cgi?id=1265179 * https://bugzilla.suse.com/show_bug.cgi?id=1265181 * https://jira.suse.com/browse/PED-14823 . Install the latest SUSE updates for postgresql15 to resolve multiple important security issues and improve system integrity.. SUSE security updates, postgresql15 vulnerabilities, database security fix, important security advisory. . Severity: Important. LinuxSecurity.com Team
May 19, 2026
•Important
SuSE
203
security advisoryimportantbugfixMageia 9 PostgreSQL15 Important Bugfix Update MGAA-2026-0021
MGAA-2026-0021 - Updated postgresql15 packages fix bug. MGAA-2026-0021 - Updated postgresql15 packages fix bug Publication date: 19 Mar 2026 URL: https://advisories.mageia.org/MGAA-2026-0021.html Type: bugfix Affected Mageia releases: 9 Description: The updated packages fix some regressions appeared in 18.2 and 15.16. References: - https://bugs.mageia.org/show_bug.cgi?id=35198 - https://www.postgresql.org/about/news/postgresql-183-179-1613-1517-and-1422-released-3246/ SRPMS: - 9/core/postgresql15-15.17-1.mga9 . Updated postgresql15 packages offer critical bug fixes for Mageia 9, addressing important regressions and issues.. Mageia PostgreSQL Bugfix Update Important 2026. . Severity: Important. LinuxSecurity.com Team
Mar 19, 2026
•Important
Mageia
100
security advisorySuSEarbitrary code executionSUSE PostgreSQL 15.16 Important Fix Arbitrary Code Execution 2026-20588-1
An update that solves six vulnerabilities can now be installed.. # Security update for postgresql15 Announcement ID: SUSE-SU-2026:20588-1 Release Date: 2026-02-20T16:18:08Z Rating: important References: * bsc#1253332 * bsc#1253333 * bsc#1258008 * bsc#1258009 * bsc#1258010 * bsc#1258011 Cross-References: * CVE-2025-12817 * CVE-2025-12818 * CVE-2026-2003 * CVE-2026-2004 * CVE-2026-2005 * CVE-2026-2006 CVSS scores: * CVE-2025-12817 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-12817 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-12817 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-12818 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-12818 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-12818 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-2003 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-2003 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-2004 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2004 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2005 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2005 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2006 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2006 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP Applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for postgresql15 fixes the following issues: Update to version 15.16. Security issues fixed: * CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory (bsc#1258008). *CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code execution (bsc#1258009). * CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution (bsc#1258010). * CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution (bsc#1258011). * CVE-2025-12817: missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332). * CVE-2025-12818: integer overflow in allocation-size calculations within libpq (bsc#1253333). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-308=1 * SUSE Linux Enterprise Server for SAP Applications 16.0 zypper in -t patch SUSE-SLES-16.0-308=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * postgresql15-server-15.16-160000.1.1 * postgresql15-plpython-debuginfo-15.16-160000.1.1 * postgresql15-contrib-15.16-160000.1.1 * postgresql15-debuginfo-15.16-160000.1.1 * postgresql15-contrib-debuginfo-15.16-160000.1.1 * postgresql15-pltcl-15.16-160000.1.1 * postgresql15-server-debuginfo-15.16-160000.1.1 * postgresql15-plperl-debuginfo-15.16-160000.1.1 * postgresql15-server-devel-debuginfo-15.16-160000.1.1 * postgresql15-devel-15.16-160000.1.1 * postgresql15-debugsource-15.16-160000.1.1 * postgresql15-plpython-15.16-160000.1.1 * postgresql15-plperl-15.16-160000.1.1 * postgresql15-pltcl-debuginfo-15.16-160000.1.1 * postgresql15-devel-debuginfo-15.16-160000.1.1 * postgresql15-15.16-160000.1.1 * postgresql15-server-devel-15.16-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * postgresql15-docs-15.16-160000.1.1 * SUSE Linux Enterprise Serverfor SAP Applications 16.0 (ppc64le x86_64) * postgresql15-server-15.16-160000.1.1 * postgresql15-plpython-debuginfo-15.16-160000.1.1 * postgresql15-contrib-15.16-160000.1.1 * postgresql15-debuginfo-15.16-160000.1.1 * postgresql15-contrib-debuginfo-15.16-160000.1.1 * postgresql15-pltcl-15.16-160000.1.1 * postgresql15-server-debuginfo-15.16-160000.1.1 * postgresql15-plperl-debuginfo-15.16-160000.1.1 * postgresql15-server-devel-debuginfo-15.16-160000.1.1 * postgresql15-devel-15.16-160000.1.1 * postgresql15-debugsource-15.16-160000.1.1 * postgresql15-plpython-15.16-160000.1.1 * postgresql15-plperl-15.16-160000.1.1 * postgresql15-pltcl-debuginfo-15.16-160000.1.1 * postgresql15-devel-debuginfo-15.16-160000.1.1 * postgresql15-15.16-160000.1.1 * postgresql15-server-devel-15.16-160000.1.1 * SUSE Linux Enterprise Server for SAP Applications 16.0 (noarch) * postgresql15-docs-15.16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-12817.html * https://www.suse.com/security/cve/CVE-2025-12818.html * https://www.suse.com/security/cve/CVE-2026-2003.html * https://www.suse.com/security/cve/CVE-2026-2004.html * https://www.suse.com/security/cve/CVE-2026-2005.html * https://www.suse.com/security/cve/CVE-2026-2006.html * https://bugzilla.suse.com/show_bug.cgi?id=1253332 * https://bugzilla.suse.com/show_bug.cgi?id=1253333 * https://bugzilla.suse.com/show_bug.cgi?id=1258008 * https://bugzilla.suse.com/show_bug.cgi?id=1258009 * https://bugzilla.suse.com/show_bug.cgi?id=1258010 * https://bugzilla.suse.com/show_bug.cgi?id=1258011 . Support for PostgreSQL 15.16 includes six important vulnerabilities fixes for SUSE Linux distributions.. postgresql vulnerabilities SUSE patch important fixes. . Severity: Important. LinuxSecurity.com Team
Mar 05, 2026
•Important
SuSE
100
security advisorysecurity issueSuSESUSE 15 SP4 pgsql15 Major Patch Unrestricted Execution Scripts 2026-0746-2
An update that solves four vulnerabilities and has one security fix can now be installed.. # Security update for postgresql15 Announcement ID: SUSE-SU-2026:0770-1 Release Date: 2026-03-03T13:12:54Z Rating: important References: * bsc#1258008 * bsc#1258009 * bsc#1258010 * bsc#1258011 * bsc#1258754 Cross-References: * CVE-2026-2003 * CVE-2026-2004 * CVE-2026-2005 * CVE-2026-2006 CVSS scores: * CVE-2026-2003 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-2003 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-2004 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2004 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2005 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2005 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2006 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2006 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities and has one security fix can now be installed. ## Description: This update for postgresql15 fixes the following issues: Update to version 15.17 (bsc#1258754). Security issues fixed: * CVE-2026-2003: improper validation of type "oidvector"may allow disclose a few bytes of server memory (bsc#1258008). * CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code execution (bsc#1258009). * CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution (bsc#1258010). * CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution (bsc#1258011). Regression fixes: * the substring() function raises an error "invalid byte sequence for encoding" on non-ASCII text values if the source of that value is a database column (caused by CVE-2026-2006 fix). * a standby may halt and return an error "could not access status of transaction". ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-770=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-770=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-770=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-770=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-770=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-770=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-770=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-770=1 ## PackageList: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * postgresql15-server-devel-15.17-150200.5.54.1 * postgresql15-plperl-debuginfo-15.17-150200.5.54.1 * postgresql15-contrib-15.17-150200.5.54.1 * postgresql15-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-plpython-debuginfo-15.17-150200.5.54.1 * postgresql15-server-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-15.17-150200.5.54.1 * postgresql15-pltcl-15.17-150200.5.54.1 * postgresql15-pltcl-debuginfo-15.17-150200.5.54.1 * postgresql15-15.17-150200.5.54.1 * postgresql15-plpython-15.17-150200.5.54.1 * postgresql15-server-15.17-150200.5.54.1 * postgresql15-server-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-debugsource-15.17-150200.5.54.1 * postgresql15-contrib-debuginfo-15.17-150200.5.54.1 * postgresql15-plperl-15.17-150200.5.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * postgresql15-docs-15.17-150200.5.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * postgresql15-server-devel-15.17-150200.5.54.1 * postgresql15-plperl-debuginfo-15.17-150200.5.54.1 * postgresql15-contrib-15.17-150200.5.54.1 * postgresql15-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-plpython-debuginfo-15.17-150200.5.54.1 * postgresql15-server-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-15.17-150200.5.54.1 * postgresql15-pltcl-15.17-150200.5.54.1 * postgresql15-pltcl-debuginfo-15.17-150200.5.54.1 * postgresql15-15.17-150200.5.54.1 * postgresql15-plpython-15.17-150200.5.54.1 * postgresql15-server-15.17-150200.5.54.1 * postgresql15-server-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-debugsource-15.17-150200.5.54.1 * postgresql15-contrib-debuginfo-15.17-150200.5.54.1 * postgresql15-plperl-15.17-150200.5.54.1 * SUSE LinuxEnterprise High Performance Computing LTSS 15 SP4 (noarch) * postgresql15-docs-15.17-150200.5.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * postgresql15-server-devel-15.17-150200.5.54.1 * postgresql15-plperl-debuginfo-15.17-150200.5.54.1 * postgresql15-contrib-15.17-150200.5.54.1 * postgresql15-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-plpython-debuginfo-15.17-150200.5.54.1 * postgresql15-server-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-15.17-150200.5.54.1 * postgresql15-pltcl-15.17-150200.5.54.1 * postgresql15-pltcl-debuginfo-15.17-150200.5.54.1 * postgresql15-15.17-150200.5.54.1 * postgresql15-plpython-15.17-150200.5.54.1 * postgresql15-server-15.17-150200.5.54.1 * postgresql15-server-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-debugsource-15.17-150200.5.54.1 * postgresql15-contrib-debuginfo-15.17-150200.5.54.1 * postgresql15-plperl-15.17-150200.5.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * postgresql15-docs-15.17-150200.5.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * postgresql15-server-devel-15.17-150200.5.54.1 * postgresql15-plperl-debuginfo-15.17-150200.5.54.1 * postgresql15-contrib-15.17-150200.5.54.1 * postgresql15-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-plpython-debuginfo-15.17-150200.5.54.1 * postgresql15-server-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-15.17-150200.5.54.1 * postgresql15-pltcl-15.17-150200.5.54.1 * postgresql15-pltcl-debuginfo-15.17-150200.5.54.1 * postgresql15-15.17-150200.5.54.1 * postgresql15-plpython-15.17-150200.5.54.1 * postgresql15-server-15.17-150200.5.54.1 * postgresql15-server-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-debugsource-15.17-150200.5.54.1 *postgresql15-contrib-debuginfo-15.17-150200.5.54.1 * postgresql15-plperl-15.17-150200.5.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * postgresql15-docs-15.17-150200.5.54.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * postgresql15-server-devel-15.17-150200.5.54.1 * postgresql15-plperl-debuginfo-15.17-150200.5.54.1 * postgresql15-contrib-15.17-150200.5.54.1 * postgresql15-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-plpython-debuginfo-15.17-150200.5.54.1 * postgresql15-server-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-15.17-150200.5.54.1 * postgresql15-pltcl-15.17-150200.5.54.1 * postgresql15-pltcl-debuginfo-15.17-150200.5.54.1 * postgresql15-15.17-150200.5.54.1 * postgresql15-plpython-15.17-150200.5.54.1 * postgresql15-server-15.17-150200.5.54.1 * postgresql15-server-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-debugsource-15.17-150200.5.54.1 * postgresql15-contrib-debuginfo-15.17-150200.5.54.1 * postgresql15-plperl-15.17-150200.5.54.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * postgresql15-docs-15.17-150200.5.54.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * postgresql15-server-devel-15.17-150200.5.54.1 * postgresql15-plperl-debuginfo-15.17-150200.5.54.1 * postgresql15-contrib-15.17-150200.5.54.1 * postgresql15-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-plpython-debuginfo-15.17-150200.5.54.1 * postgresql15-server-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-15.17-150200.5.54.1 * postgresql15-pltcl-15.17-150200.5.54.1 * postgresql15-pltcl-debuginfo-15.17-150200.5.54.1 * postgresql15-15.17-150200.5.54.1 * postgresql15-plpython-15.17-150200.5.54.1 * postgresql15-server-15.17-150200.5.54.1 * postgresql15-server-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-debugsource-15.17-150200.5.54.1 * postgresql15-contrib-debuginfo-15.17-150200.5.54.1 * postgresql15-plperl-15.17-150200.5.54.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * postgresql15-docs-15.17-150200.5.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * postgresql15-server-devel-15.17-150200.5.54.1 * postgresql15-plperl-debuginfo-15.17-150200.5.54.1 * postgresql15-contrib-15.17-150200.5.54.1 * postgresql15-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-plpython-debuginfo-15.17-150200.5.54.1 * postgresql15-server-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-15.17-150200.5.54.1 * postgresql15-pltcl-15.17-150200.5.54.1 * postgresql15-pltcl-debuginfo-15.17-150200.5.54.1 * postgresql15-15.17-150200.5.54.1 * postgresql15-plpython-15.17-150200.5.54.1 * postgresql15-server-15.17-150200.5.54.1 * postgresql15-server-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-debugsource-15.17-150200.5.54.1 * postgresql15-contrib-debuginfo-15.17-150200.5.54.1 * postgresql15-plperl-15.17-150200.5.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * postgresql15-docs-15.17-150200.5.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * postgresql15-server-devel-15.17-150200.5.54.1 * postgresql15-plperl-debuginfo-15.17-150200.5.54.1 * postgresql15-contrib-15.17-150200.5.54.1 * postgresql15-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-plpython-debuginfo-15.17-150200.5.54.1 * postgresql15-server-debuginfo-15.17-150200.5.54.1 * postgresql15-devel-15.17-150200.5.54.1 * postgresql15-pltcl-15.17-150200.5.54.1 * postgresql15-pltcl-debuginfo-15.17-150200.5.54.1 * postgresql15-15.17-150200.5.54.1 * postgresql15-plpython-15.17-150200.5.54.1 * postgresql15-server-15.17-150200.5.54.1 *postgresql15-server-devel-debuginfo-15.17-150200.5.54.1 * postgresql15-debugsource-15.17-150200.5.54.1 * postgresql15-contrib-debuginfo-15.17-150200.5.54.1 * postgresql15-plperl-15.17-150200.5.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * postgresql15-docs-15.17-150200.5.54.1 ## References: * https://www.suse.com/security/cve/CVE-2026-2003.html * https://www.suse.com/security/cve/CVE-2026-2004.html * https://www.suse.com/security/cve/CVE-2026-2005.html * https://www.suse.com/security/cve/CVE-2026-2006.html * https://bugzilla.suse.com/show_bug.cgi?id=1258008 * https://bugzilla.suse.com/show_bug.cgi?id=1258009 * https://bugzilla.suse.com/show_bug.cgi?id=1258010 * https://bugzilla.suse.com/show_bug.cgi?id=1258011 * https://bugzilla.suse.com/show_bug.cgi?id=1258754 . SUSE updates postgresql15 to fix four critical issues leading to code execution risks requiring immediate action.. SUSE security updates, postgresql15 vulnerabilities, code execution risks, security advisory SUSE, patch instructions postgresql. . Severity: Important. LinuxSecurity.com Team
Mar 03, 2026
•Important
SuSE
100
security advisorydenial serviceSuSESUSE Linux 15 Postgresql15 Important Security Fixes SUSE-SU-2026-0771-1
An update that solves four vulnerabilities and has one security fix can now be installed.. # Security update for postgresql15 Announcement ID: SUSE-SU-2026:0771-1 Release Date: 2026-03-03T13:13:57Z Rating: important References: * bsc#1258008 * bsc#1258009 * bsc#1258010 * bsc#1258011 * bsc#1258754 Cross-References: * CVE-2026-2003 * CVE-2026-2004 * CVE-2026-2005 * CVE-2026-2006 CVSS scores: * CVE-2026-2003 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-2003 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-2004 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2004 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2005 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2005 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2006 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-2006 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Legacy Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities and has one security fix can now be installed. ## Description: This update for postgresql15 fixes the following issues: Update to version 15.17 (bsc#1258754). Security issues fixed: * CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory (bsc#1258008). * CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code execution (bsc#1258009). * CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution (bsc#1258010). * CVE-2026-2006:inadequate validation of multibyte character lengths could lead to arbitrary code execution (bsc#1258011). Regression fixes: * the substring() function raises an error "invalid byte sequence for encoding" on non-ASCII text values if the source of that value is a database column (caused by CVE-2026-2006 fix). * a standby may halt and return an error "could not access status of transaction". ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-771=1 SUSE-2026-771=1 * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-771=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-771=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-771=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * postgresql15-debuginfo-15.17-150600.16.28.1 * postgresql15-server-debuginfo-15.17-150600.16.28.1 * postgresql15-15.17-150600.16.28.1 * postgresql15-contrib-15.17-150600.16.28.1 * postgresql15-contrib-debuginfo-15.17-150600.16.28.1 * postgresql15-llvmjit-debuginfo-15.17-150600.16.28.1 * postgresql15-debugsource-15.17-150600.16.28.1 * postgresql15-plpython-15.17-150600.16.28.1 * postgresql15-plperl-debuginfo-15.17-150600.16.28.1 * postgresql15-pltcl-15.17-150600.16.28.1 * postgresql15-devel-debuginfo-15.17-150600.16.28.1 * postgresql15-pltcl-debuginfo-15.17-150600.16.28.1 * postgresql15-plpython-debuginfo-15.17-150600.16.28.1 * postgresql15-devel-15.17-150600.16.28.1 * postgresql15-plperl-15.17-150600.16.28.1 * postgresql15-test-15.17-150600.16.28.1 * postgresql15-server-devel-15.17-150600.16.28.1 *postgresql15-server-devel-debuginfo-15.17-150600.16.28.1 * postgresql15-llvmjit-devel-15.17-150600.16.28.1 * postgresql15-server-15.17-150600.16.28.1 * postgresql15-llvmjit-15.17-150600.16.28.1 * openSUSE Leap 15.6 (noarch) * postgresql15-docs-15.17-150600.16.28.1 * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * postgresql15-contrib-15.17-150600.16.28.1 * postgresql15-plpython-debuginfo-15.17-150600.16.28.1 * postgresql15-contrib-debuginfo-15.17-150600.16.28.1 * postgresql15-debuginfo-15.17-150600.16.28.1 * postgresql15-debugsource-15.17-150600.16.28.1 * postgresql15-server-15.17-150600.16.28.1 * postgresql15-devel-debuginfo-15.17-150600.16.28.1 * postgresql15-pltcl-debuginfo-15.17-150600.16.28.1 * postgresql15-server-debuginfo-15.17-150600.16.28.1 * postgresql15-plpython-15.17-150600.16.28.1 * postgresql15-plperl-debuginfo-15.17-150600.16.28.1 * postgresql15-server-devel-15.17-150600.16.28.1 * postgresql15-server-devel-debuginfo-15.17-150600.16.28.1 * postgresql15-pltcl-15.17-150600.16.28.1 * postgresql15-15.17-150600.16.28.1 * postgresql15-devel-15.17-150600.16.28.1 * postgresql15-plperl-15.17-150600.16.28.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * postgresql15-contrib-15.17-150600.16.28.1 * postgresql15-plpython-debuginfo-15.17-150600.16.28.1 * postgresql15-contrib-debuginfo-15.17-150600.16.28.1 * postgresql15-debuginfo-15.17-150600.16.28.1 * postgresql15-debugsource-15.17-150600.16.28.1 * postgresql15-server-15.17-150600.16.28.1 * postgresql15-devel-debuginfo-15.17-150600.16.28.1 * postgresql15-pltcl-debuginfo-15.17-150600.16.28.1 * postgresql15-server-debuginfo-15.17-150600.16.28.1 * postgresql15-plpython-15.17-150600.16.28.1 * postgresql15-plperl-debuginfo-15.17-150600.16.28.1 * postgresql15-server-devel-15.17-150600.16.28.1 * postgresql15-server-devel-debuginfo-15.17-150600.16.28.1 *postgresql15-pltcl-15.17-150600.16.28.1 * postgresql15-15.17-150600.16.28.1 * postgresql15-devel-15.17-150600.16.28.1 * postgresql15-plperl-15.17-150600.16.28.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * postgresql15-docs-15.17-150600.16.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * postgresql15-contrib-15.17-150600.16.28.1 * postgresql15-plpython-debuginfo-15.17-150600.16.28.1 * postgresql15-contrib-debuginfo-15.17-150600.16.28.1 * postgresql15-debuginfo-15.17-150600.16.28.1 * postgresql15-debugsource-15.17-150600.16.28.1 * postgresql15-server-15.17-150600.16.28.1 * postgresql15-devel-debuginfo-15.17-150600.16.28.1 * postgresql15-pltcl-debuginfo-15.17-150600.16.28.1 * postgresql15-server-debuginfo-15.17-150600.16.28.1 * postgresql15-plpython-15.17-150600.16.28.1 * postgresql15-plperl-debuginfo-15.17-150600.16.28.1 * postgresql15-server-devel-15.17-150600.16.28.1 * postgresql15-server-devel-debuginfo-15.17-150600.16.28.1 * postgresql15-pltcl-15.17-150600.16.28.1 * postgresql15-15.17-150600.16.28.1 * postgresql15-devel-15.17-150600.16.28.1 * postgresql15-plperl-15.17-150600.16.28.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * postgresql15-docs-15.17-150600.16.28.1 ## References: * https://www.suse.com/security/cve/CVE-2026-2003.html * https://www.suse.com/security/cve/CVE-2026-2004.html * https://www.suse.com/security/cve/CVE-2026-2005.html * https://www.suse.com/security/cve/CVE-2026-2006.html * https://bugzilla.suse.com/show_bug.cgi?id=1258008 * https://bugzilla.suse.com/show_bug.cgi?id=1258009 * https://bugzilla.suse.com/show_bug.cgi?id=1258010 * https://bugzilla.suse.com/show_bug.cgi?id=1258011 * https://bugzilla.suse.com/show_bug.cgi?id=1258754 . An important SUSE security update for postgresql15 fixes four issues and enhances system stability with recommended patches.. SUSE update, postgresql15 security, patchinstructions. . Severity: Important. LinuxSecurity.com Team
Mar 03, 2026
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!