< back to search

gpp_maybe Security update for postgresql18
SUSE-SLE-Module-Server-Applications-15-SP7-2026-4014

This update for postgresql18 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044). - CVE-2026-6470: failure to check type `USAGE` privilege (bsc#1275043). - CVE-2026-6471: logical decoding can `dlopen` arbitrary file (bsc#1275042). - CVE-2026-14662: `tsvector` and `tsquery` undersize allocations, via integer wraparound (bsc#1275001). - CVE-2026-14663: `pgcrypto`, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext (bsc#1275002). - CVE-2026-14664: `regexp` heap buffer overflow executes arbitrary code (bsc#1275068). - CVE-2026-14666: row security caching disregards role modifications (bsc#1275067). - CVE-2026-14668: `ctid` type confusion in selectivity estimator discloses derivative of arbitrary read (bsc#1275066). - CVE-2026-14669: `to_char` heap buffer overflow executes arbitrary code (bsc#1275065). - CVE-2026-14670: `plperl` tied object heap buffer overflow executes arbitrary code (bsc#1275064). - CVE-2026-14671: `refint` plan cache type confusion executes arbitrary code (bsc#1275063). - CVE-2026-14672: observable response discrepancy with non-default `scram_iterations` provides user existence oracle (bsc#1275062). - CVE-2026-14673: `amcheck` does not clear untrusted search path (bsc#1275061). - CVE-2026-14676: `pg_stat_statements` heap buffer overflow executes arbitrary code (bsc#1275060). - CVE-2026-14677: 32-bit `pltcl` and `plperl` undersize allocations, via integer wraparound (bsc#1275059). - CVE-2026-14678: `pg_trgm` `picksplit` reads past end of buffer (bsc#1275058). - CVE-2026-14679: stack buffer overflow in argument match writes `0x0` and `0x1` to server memory (bsc#1275057). - CVE-2026-14680: type confusion via "internal" arguments (bsc#1275056). - CVE-2026-14681: improper enforcement of GSSAPI encryption when coupled with SSL (bsc#1275055). - CVE-2026-15741: expression deparse allows SQL injection via `EXTRACT` argument (bsc#1275054). - CVE-2026-15742: `fuzzystrmatch` writes effectively-arbitrary addresses, via integer wraparound (bsc#1275053). - CVE-2026-16238: type confusion in `pg_restore_attribute_stats()` executes arbitrary code (bsc#1275052). - CVE-2026-16239: type confusion in cursor `CLOSE + DECLARE` executes arbitrary code (bsc#1275051). - CVE-2026-16241: ECPG integer underflow can crash the client (bsc#1275050). - CVE-2026-18024: `ascii()` function reads past end of buffer (bsc#1275049). - CVE-2026-18408: `psql` `\unrestrict` lets superuser of `pg_dump` origin server execute arbitrary code in `psql` client (bsc#1275048). - CVE-2026-19385: `pg_dump` heap buffer overflow executes arbitrary code (bsc#1275047). Changes for postgresql18: - Update to version 18.6: * https://www.postgresql.org/docs/18/release-18-6.html * https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/

cloud_download Downloads

Server Applications Module 15.7 aarch64
  • Packages
    libecpg6
    Shared Libraries Required for PostgreSQL Clients
    18.6-150600.13.16.1 lock rpm
    postgresql18
    Basic Clients and Utilities for PostgreSQL
    18.6-150600.13.16.1 lock src
    postgresql18-contrib
    Contributed Extensions and Additions to PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-devel
    PostgreSQL client development header files and libraries
    18.6-150600.13.16.1 lock rpm
    postgresql18-docs
    HTML Documentation for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-plperl
    The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-plpython
    The PL/Python Procedural Languages for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-pltcl
    PL/Tcl Procedural Language for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-server
    The Programs Needed to Create and Run a PostgreSQL Server
    18.6-150600.13.16.1 lock rpm
    postgresql18-server-devel
    PostgreSQL server development header files and utilities
    18.6-150600.13.16.1 lock rpm
Server Applications Module 15.7 ppc64le
  • Packages
    libecpg6
    Shared Libraries Required for PostgreSQL Clients
    18.6-150600.13.16.1 lock rpm
    postgresql18
    Basic Clients and Utilities for PostgreSQL
    18.6-150600.13.16.1 lock src
    postgresql18-contrib
    Contributed Extensions and Additions to PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-devel
    PostgreSQL client development header files and libraries
    18.6-150600.13.16.1 lock rpm
    postgresql18-docs
    HTML Documentation for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-plperl
    The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-plpython
    The PL/Python Procedural Languages for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-pltcl
    PL/Tcl Procedural Language for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-server
    The Programs Needed to Create and Run a PostgreSQL Server
    18.6-150600.13.16.1 lock rpm
    postgresql18-server-devel
    PostgreSQL server development header files and utilities
    18.6-150600.13.16.1 lock rpm
Server Applications Module 15.7 s390x
  • Packages
    libecpg6
    Shared Libraries Required for PostgreSQL Clients
    18.6-150600.13.16.1 lock rpm
    postgresql18
    Basic Clients and Utilities for PostgreSQL
    18.6-150600.13.16.1 lock src
    postgresql18-contrib
    Contributed Extensions and Additions to PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-devel
    PostgreSQL client development header files and libraries
    18.6-150600.13.16.1 lock rpm
    postgresql18-docs
    HTML Documentation for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-plperl
    The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-plpython
    The PL/Python Procedural Languages for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-pltcl
    PL/Tcl Procedural Language for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-server
    The Programs Needed to Create and Run a PostgreSQL Server
    18.6-150600.13.16.1 lock rpm
    postgresql18-server-devel
    PostgreSQL server development header files and utilities
    18.6-150600.13.16.1 lock rpm
Server Applications Module 15.7 x86_64
  • Packages
    libecpg6
    Shared Libraries Required for PostgreSQL Clients
    18.6-150600.13.16.1 lock rpm
    postgresql18
    Basic Clients and Utilities for PostgreSQL
    18.6-150600.13.16.1 lock src
    postgresql18-contrib
    Contributed Extensions and Additions to PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-devel
    PostgreSQL client development header files and libraries
    18.6-150600.13.16.1 lock rpm
    postgresql18-docs
    HTML Documentation for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-plperl
    The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-plpython
    The PL/Python Procedural Languages for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-pltcl
    PL/Tcl Procedural Language for PostgreSQL
    18.6-150600.13.16.1 lock rpm
    postgresql18-server
    The Programs Needed to Create and Run a PostgreSQL Server
    18.6-150600.13.16.1 lock rpm
    postgresql18-server-devel
    PostgreSQL server development header files and utilities
    18.6-150600.13.16.1 lock rpm