OPENSUSE-SU-2026:12550-1
Vulnerability from csaf_opensuse - Published: 2026-11-13 00:00 - Updated: 2026-11-14 10:21| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "postgresql14-14.25-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the postgresql14-14.25-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-12550",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/2026/opensuse-su-2026_12550-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116303 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116303/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116304 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116306 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116306/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116307 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116307/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116308 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116309 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116309/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116311 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116311/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116314 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116314/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116315 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116315/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116316 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116316/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116317 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116319 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116319/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116320 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116320/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116321 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116321/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116326 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116326/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116327 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116327/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116330 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116330/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116331 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116331/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116332 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116335 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116335/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-116336 page",
"url": "https://www.suse.com/security/cve/CVE-2026-116336/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120139 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120141 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120143 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120145 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120146 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120147 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120148 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120149 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120150 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120151 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120153 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120153/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-120154 page",
"url": "https://www.suse.com/security/cve/CVE-2026-120154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14661 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16237 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16237/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16240 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16240/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-18447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-18447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6460 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6467 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6467/"
}
],
"title": "postgresql14-14.25-1.1 on GA media",
"tracking": {
"current_release_date": "2026-11-14T10:21:44Z",
"generator": {
"date": "2026-11-13T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:12550-1",
"initial_release_date": "2026-11-13T00:00:00Z",
"revision_history": [
{
"date": "2026-11-13T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-11-14T10:21:44Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "postgresql14-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-0:14.25-1.1.aarch64",
"product_id": "postgresql14-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-contrib-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-contrib-0:14.25-1.1.aarch64",
"product_id": "postgresql14-contrib-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-contrib@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-devel-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-devel-0:14.25-1.1.aarch64",
"product_id": "postgresql14-devel-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-devel@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-docs-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-docs-0:14.25-1.1.aarch64",
"product_id": "postgresql14-docs-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-docs@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-llvmjit-0:14.25-1.1.aarch64",
"product_id": "postgresql14-llvmjit-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-llvmjit@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"product_id": "postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-llvmjit-devel@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-plperl-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-plperl-0:14.25-1.1.aarch64",
"product_id": "postgresql14-plperl-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-plperl@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-plpython-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-plpython-0:14.25-1.1.aarch64",
"product_id": "postgresql14-plpython-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-plpython@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-pltcl-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-pltcl-0:14.25-1.1.aarch64",
"product_id": "postgresql14-pltcl-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-pltcl@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-server-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-server-0:14.25-1.1.aarch64",
"product_id": "postgresql14-server-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-server@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-server-devel-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-server-devel-0:14.25-1.1.aarch64",
"product_id": "postgresql14-server-devel-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-server-devel@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-test-0:14.25-1.1.aarch64",
"product": {
"name": "postgresql14-test-0:14.25-1.1.aarch64",
"product_id": "postgresql14-test-0:14.25-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-test@14.25-1.1?arch=aarch64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql14-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-contrib-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-contrib-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-contrib-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-contrib@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-devel-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-devel-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-devel-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-devel@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-docs-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-docs-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-docs-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-docs@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-llvmjit@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-llvmjit-devel@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-plperl-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-plperl-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-plperl-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-plperl@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-plpython-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-plpython-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-plpython-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-plpython@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-pltcl-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-pltcl-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-pltcl-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-pltcl@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-server-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-server-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-server-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-server@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-server-devel-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-server-devel-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-server-devel-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-server-devel@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-test-0:14.25-1.1.ppc64le",
"product": {
"name": "postgresql14-test-0:14.25-1.1.ppc64le",
"product_id": "postgresql14-test-0:14.25-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-test@14.25-1.1?arch=ppc64le\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql14-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-0:14.25-1.1.s390x",
"product_id": "postgresql14-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-contrib-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-contrib-0:14.25-1.1.s390x",
"product_id": "postgresql14-contrib-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-contrib@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-devel-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-devel-0:14.25-1.1.s390x",
"product_id": "postgresql14-devel-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-devel@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-docs-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-docs-0:14.25-1.1.s390x",
"product_id": "postgresql14-docs-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-docs@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-llvmjit-0:14.25-1.1.s390x",
"product_id": "postgresql14-llvmjit-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-llvmjit@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"product_id": "postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-llvmjit-devel@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-plperl-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-plperl-0:14.25-1.1.s390x",
"product_id": "postgresql14-plperl-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-plperl@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-plpython-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-plpython-0:14.25-1.1.s390x",
"product_id": "postgresql14-plpython-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-plpython@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-pltcl-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-pltcl-0:14.25-1.1.s390x",
"product_id": "postgresql14-pltcl-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-pltcl@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-server-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-server-0:14.25-1.1.s390x",
"product_id": "postgresql14-server-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-server@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-server-devel-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-server-devel-0:14.25-1.1.s390x",
"product_id": "postgresql14-server-devel-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-server-devel@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-test-0:14.25-1.1.s390x",
"product": {
"name": "postgresql14-test-0:14.25-1.1.s390x",
"product_id": "postgresql14-test-0:14.25-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-test@14.25-1.1?arch=s390x\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql14-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-0:14.25-1.1.x86_64",
"product_id": "postgresql14-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-contrib-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-contrib-0:14.25-1.1.x86_64",
"product_id": "postgresql14-contrib-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-contrib@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-devel-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-devel-0:14.25-1.1.x86_64",
"product_id": "postgresql14-devel-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-devel@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-docs-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-docs-0:14.25-1.1.x86_64",
"product_id": "postgresql14-docs-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-docs@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-llvmjit-0:14.25-1.1.x86_64",
"product_id": "postgresql14-llvmjit-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-llvmjit@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"product_id": "postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-llvmjit-devel@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-plperl-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-plperl-0:14.25-1.1.x86_64",
"product_id": "postgresql14-plperl-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-plperl@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-plpython-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-plpython-0:14.25-1.1.x86_64",
"product_id": "postgresql14-plpython-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-plpython@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-pltcl-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-pltcl-0:14.25-1.1.x86_64",
"product_id": "postgresql14-pltcl-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-pltcl@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-server-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-server-0:14.25-1.1.x86_64",
"product_id": "postgresql14-server-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-server@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-server-devel-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-server-devel-0:14.25-1.1.x86_64",
"product_id": "postgresql14-server-devel-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-server-devel@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "postgresql14-test-0:14.25-1.1.x86_64",
"product": {
"name": "postgresql14-test-0:14.25-1.1.x86_64",
"product_id": "postgresql14-test-0:14.25-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:postgresql:postgresql:14.25:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/postgresql14-test@14.25-1.1?arch=x86_64\u0026upstream=postgresql14-0:14.25-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-contrib-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-contrib-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-contrib-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-contrib-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-contrib-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-contrib-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-contrib-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-contrib-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-devel-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-devel-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-devel-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-devel-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-devel-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-devel-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-devel-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-devel-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-docs-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-docs-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-docs-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-docs-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-docs-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-docs-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-docs-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-docs-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-llvmjit-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-llvmjit-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-llvmjit-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-devel-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plperl-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-plperl-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plperl-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-plperl-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plperl-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-plperl-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plperl-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-plperl-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plpython-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-plpython-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plpython-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-plpython-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plpython-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-plpython-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plpython-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-plpython-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-pltcl-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-pltcl-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-pltcl-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-pltcl-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-pltcl-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-pltcl-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-pltcl-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-pltcl-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-server-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-server-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-server-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-server-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-devel-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-server-devel-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-devel-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-server-devel-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-devel-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-server-devel-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-devel-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-server-devel-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-test-0:14.25-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64"
},
"product_reference": "postgresql14-test-0:14.25-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-test-0:14.25-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le"
},
"product_reference": "postgresql14-test-0:14.25-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-test-0:14.25-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x"
},
"product_reference": "postgresql14-test-0:14.25-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-test-0:14.25-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
},
"product_reference": "postgresql14-test-0:14.25-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-116303",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116303"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via foreign keys, to_json(), and others. A successful attack requires the attacker to search each database for access-restricted cast functions and identify confidentiality impact specific to each function implementation found. There are few or no practical examples of an access-restricted cast function or of a cast function having confidentiality impact. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116303",
"url": "https://www.suse.com/security/cve/CVE-2026-116303"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116303",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116303"
},
{
"cve": "CVE-2026-116304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116304"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PostgreSQL coordination of anonymous RECORD type identifiers among parallel workers allows a database user to execute arbitrary code as the operating system user running the database, via causing one process to free a shared tuple descriptor while another process retains and later uses its address. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116304",
"url": "https://www.suse.com/security/cve/CVE-2026-116304"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116304",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116304"
},
{
"cve": "CVE-2026-116306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116306"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PostgreSQL composite-value field assignment allows an object creator to execute arbitrary code as the operating system user running the database, via changing a composite type between deforming and reforming a value. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116306",
"url": "https://www.suse.com/security/cve/CVE-2026-116306"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116306",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116306"
},
{
"cve": "CVE-2026-116307",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116307"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via re-entering plperl and freeing a prepared query while an outer invocation is executing it. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116307",
"url": "https://www.suse.com/security/cve/CVE-2026-116307"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116307",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116307"
},
{
"cve": "CVE-2026-116308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116308"
}
],
"notes": [
{
"category": "general",
"text": "Buffer over-read in PostgreSQL dict_int allows a database user to disclose portions of server memory, via a zero-length token. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116308",
"url": "https://www.suse.com/security/cve/CVE-2026-116308"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116308",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116308"
},
{
"cve": "CVE-2026-116309",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116309"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PostgreSQL plperl may allow an object creator to execute arbitrary code, via blessing a non-hash reference into PostgreSQL::InServer::ARRAY. We have not confirmed or ruled out a way to control the pointer sufficiently to achieve security impact, but we are proceeding as though that is possible. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116309",
"url": "https://www.suse.com/security/cve/CVE-2026-116309"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116309",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116309"
},
{
"cve": "CVE-2026-116311",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116311"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in PostgreSQL DROP OWNED allows a role to remove itself from restrictive row level security policies, thereby reading or modifying rows that the policy was intended to deny, via queries after the DROP OWNED. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116311",
"url": "https://www.suse.com/security/cve/CVE-2026-116311"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116311",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116311"
},
{
"cve": "CVE-2026-116314",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116314"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in PostgreSQL pg_restore allows a non-plain archive provider to execute arbitrary code as the operating system user running pg_restore, via a crafted archive. Note a contrast: crafted archive data may legitimately cause arbitrary SQL to execute at the restore destination, but it does not legitimately confer arbitrary code execution in the pg_restore OS process. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116314",
"url": "https://www.suse.com/security/cve/CVE-2026-116314"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116314",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116314"
},
{
"cve": "CVE-2026-116315",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116315"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in PostgreSQL tsvector_delete() allows a database user to execute arbitrary code as the operating system user running the database, via a tsvector whose lexeme data uses a nonstandard but valid ordering that requires additional alignment padding in the result. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116315",
"url": "https://www.suse.com/security/cve/CVE-2026-116315"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116315",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116315"
},
{
"cve": "CVE-2026-116316",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116316"
}
],
"notes": [
{
"category": "general",
"text": "Improper protection of alternate path in PostgreSQL security-restricted operations allows an object creator to execute arbitrary SQL as the operation\u0027s caller, via a domain, enum, or range type created in pg_temp. The victim session must later run a query containing an unqualified type name, e.g. \"SELECT \u00271\u0027::bigint\"; autovacuum and other common security-restricted operation users do not do so, so they are unaffected. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116316",
"url": "https://www.suse.com/security/cve/CVE-2026-116316"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116316",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116316"
},
{
"cve": "CVE-2026-116317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116317"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116317",
"url": "https://www.suse.com/security/cve/CVE-2026-116317"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116317",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116317"
},
{
"cve": "CVE-2026-116319",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116319"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via reentrant return_next() calls. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116319",
"url": "https://www.suse.com/security/cve/CVE-2026-116319"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116319",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116319"
},
{
"cve": "CVE-2026-116320",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116320"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via dropping the final reference to a Perl array or hash while PostgreSQL is converting that object. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116320",
"url": "https://www.suse.com/security/cve/CVE-2026-116320"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116320",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116320"
},
{
"cve": "CVE-2026-116321",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116321"
}
],
"notes": [
{
"category": "general",
"text": "Improper null termination in PostgreSQL array element assignment allows a database user to disclose server memory, via changing the final byte of a fixed-length name value to a nonzero byte and passing it to code that treats the value as a C string. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116321",
"url": "https://www.suse.com/security/cve/CVE-2026-116321"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116321",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116321"
},
{
"cve": "CVE-2026-116323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116323"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PostgreSQL pltcl allows an object creator to execute arbitrary code as the operating system user running the database, via a domain CHECK that re-enters the Tcl interpreter and frees or changes a string still used by the outer result conversion. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116323",
"url": "https://www.suse.com/security/cve/CVE-2026-116323"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116323",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116323"
},
{
"cve": "CVE-2026-116326",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116326"
}
],
"notes": [
{
"category": "general",
"text": "Uncaught exceptions in PostgreSQL plperl allow an object creator to cause use of a stale sigjmp_buf, via a tied Perl object, or a Perl object whose overloaded conversion throws while plperl is handling another error. We have not ruled out arbitrary code execution on some platform. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116326",
"url": "https://www.suse.com/security/cve/CVE-2026-116326"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116326",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116326"
},
{
"cve": "CVE-2026-116327",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116327"
}
],
"notes": [
{
"category": "general",
"text": "Exposure of sensitive information in PostgreSQL security_barrier processing allows a database user to infer values hidden by a security_barrier view, via applying a leaky function to a CASE test value or internal parameter that indirectly represents a protected column. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116327",
"url": "https://www.suse.com/security/cve/CVE-2026-116327"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116327",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116327"
},
{
"cve": "CVE-2026-116330",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116330"
}
],
"notes": [
{
"category": "general",
"text": "Untrusted data inclusion in PostgreSQL pg_dump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is undocumented. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116330",
"url": "https://www.suse.com/security/cve/CVE-2026-116330"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116330",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116330"
},
{
"cve": "CVE-2026-116331",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116331"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PostgreSQL min/max aggregate optimization allows an object creator to execute arbitrary code as the operating system user running the database, via a user-defined aggregate whose SORTOP option causes the planner to treat the aggregate\u0027s input and result as the same type when they differ. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116331",
"url": "https://www.suse.com/security/cve/CVE-2026-116331"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116331",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116331"
},
{
"cve": "CVE-2026-116332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116332"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the portal currently being prepared. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116332",
"url": "https://www.suse.com/security/cve/CVE-2026-116332"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116332",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116332"
},
{
"cve": "CVE-2026-116335",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116335"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PostgreSQL operator commutator and negator links allows an object creator to execute arbitrary code as the operating system user running the database, via linking operators having different result types or creating inconsistent reciprocal links. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116335",
"url": "https://www.suse.com/security/cve/CVE-2026-116335"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116335",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116335"
},
{
"cve": "CVE-2026-116336",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-116336"
}
],
"notes": [
{
"category": "general",
"text": "Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-116336",
"url": "https://www.suse.com/security/cve/CVE-2026-116336"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-116336",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-116336"
},
{
"cve": "CVE-2026-120139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120139"
}
],
"notes": [
{
"category": "general",
"text": "Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120139",
"url": "https://www.suse.com/security/cve/CVE-2026-120139"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120139",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120139"
},
{
"cve": "CVE-2026-120141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120141"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PostgreSQL materialized set-returning functions allows a database user to execute arbitrary code as the operating system user running the database, via returning rows having different dynamic RECORD return types. json_populate_recordset() is one affected function. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120141",
"url": "https://www.suse.com/security/cve/CVE-2026-120141"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120141",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120141"
},
{
"cve": "CVE-2026-120143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120143"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a cursor over a transition table. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120143",
"url": "https://www.suse.com/security/cve/CVE-2026-120143"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120143",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120143"
},
{
"cve": "CVE-2026-120145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120145"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in PostgreSQL logical replication allows a compromised publisher to execute arbitrary code as the operating system user running the superuser-owned subscription, via naming a system catalog as a replication target. Only subscriptions owned by a superuser are vulnerable. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120145",
"url": "https://www.suse.com/security/cve/CVE-2026-120145"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120145",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120145"
},
{
"cve": "CVE-2026-120146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120146"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization in PostgreSQL REASSIGN OWNED allows a role granted INHERIT but not SET to transfer objects to the granted role. It also allows reassignment of database ownership without the CREATEDB privilege. The equivalent ALTER ... OWNER commands block this. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120146",
"url": "https://www.suse.com/security/cve/CVE-2026-120146"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120146",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120146"
},
{
"cve": "CVE-2026-120147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120147"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in the PostgreSQL dblink extension allows an object creator to execute arbitrary code as the operating system user running the database, via type conversion code that re-enters dblink and closes a connection whose results an outer dblink call is reading. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120147",
"url": "https://www.suse.com/security/cve/CVE-2026-120147"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120147",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120147"
},
{
"cve": "CVE-2026-120148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120148"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the operating system user running the database, via a statistics expression of an anonymous RECORD type whose backend-local type identifier denotes a different row type in another session. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120148",
"url": "https://www.suse.com/security/cve/CVE-2026-120148"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120148",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120148"
},
{
"cve": "CVE-2026-120149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120149"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in PostgreSQL foreign batch inserts allows a foreign server to execute arbitrary code, via reporting that it inserted more rows than the server supplied. postgres_fdw can legitimately encounter this when a rule on the remote table expands an INSERT into additional rows. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120149",
"url": "https://www.suse.com/security/cve/CVE-2026-120149"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120149",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120149"
},
{
"cve": "CVE-2026-120150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120150"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PostgreSQL expanded-record domain checks allows an object creator to execute arbitrary code as the operating system user running the database, via repeated checks of a domain over a composite type that cause reuse of a dangling memory-context pointer. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120150",
"url": "https://www.suse.com/security/cve/CVE-2026-120150"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120150",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120150"
},
{
"cve": "CVE-2026-120151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120151"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PostgreSQL plpgsql record-field assignment allows an object creator to execute arbitrary code as the operating system user running the database, via a reentrant domain CHECK that changes a RECORD variable\u0027s row type while a value is being cast. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120151",
"url": "https://www.suse.com/security/cve/CVE-2026-120151"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120151",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120151"
},
{
"cve": "CVE-2026-120153",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120153"
}
],
"notes": [
{
"category": "general",
"text": "SQL injection in PostgreSQL extension-script substitutions allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via a schema or owner name containing newlines or other special substrings. This is similar to CVE-2023-39417, but it requires a non-bundled extension with a vulnerable script pattern. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120153",
"url": "https://www.suse.com/security/cve/CVE-2026-120153"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120153",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120153"
},
{
"cve": "CVE-2026-120154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-120154"
}
],
"notes": [
{
"category": "general",
"text": "Improper protection in PostgreSQL INSERT ... ON CONFLICT allows an attacker having INSERT, UPDATE, and applicable SELECT privileges on the table to read every row despite row security policies, via iterated INSERT ... ON CONFLICT DO UPDATE. Unlike CVE-2026-16237, this does not facilitate improper writes. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-120154",
"url": "https://www.suse.com/security/cve/CVE-2026-120154"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-120154",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-120154"
},
{
"cve": "CVE-2026-14661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14661"
}
],
"notes": [
{
"category": "general",
"text": "External control of file name in PostgreSQL dblink and CREATE/ALTER SUBSCRIPTION allows a user to achieve persistent denial of service, via appending invalid data to a chosen file. Specifically, the \"sslkeylogfile\" connection parameter appends data, in NSS keylog format, to a file of the user\u0027s choosing. This \"sslkeylogfile\" mechanism cannot add arbitrary bytes. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are also affected if libpq version 18 or later is installed and in use by the server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14661",
"url": "https://www.suse.com/security/cve/CVE-2026-14661"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-14661",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-14661"
},
{
"cve": "CVE-2026-16237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16237"
}
],
"notes": [
{
"category": "general",
"text": "Improper protection in PostgreSQL INSERT ... ON CONFLICT on auto-updatable views allows an attacker having INSERT and UPDATE privileges on the view to read and modify every row in the view\u0027s base table, via iterated INSERT ... ON CONFLICT DO UPDATE. This bypasses the view\u0027s WHERE condition, whether or not the view is a security_barrier view. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16237",
"url": "https://www.suse.com/security/cve/CVE-2026-16237"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-16237",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-16237"
},
{
"cve": "CVE-2026-16240",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16240"
}
],
"notes": [
{
"category": "general",
"text": "Use of externally-controlled format string in PostgreSQL pg_basebackup allows an attacker having already compromised a server to achieve disclosure from pg_basebackup memory, via backup manifest bytes. The vulnerability does not return the improperly-read bytes back to the attacker\u0027s server, so a successful attack would need separate implementation-specific secrets for that. Integrity impact is unlikely; in particular, the applicable formatter does not support %n. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16240",
"url": "https://www.suse.com/security/cve/CVE-2026-16240"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-16240",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-16240"
},
{
"cve": "CVE-2026-18447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-18447"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type \"any\". Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-18447",
"url": "https://www.suse.com/security/cve/CVE-2026-18447"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-18447",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-18447"
},
{
"cve": "CVE-2026-6460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6460"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running the database, via ALTER ... SET DATA TYPE primarily. Other DDL attack routes exist, such as \"ALTER TABLE ... ADD COLUMN; ROLLBACK; ALTER TABLE ... ADD COLUMN\". The system had inadequate tracking of typed values, and values were not self-identifying. Stale values could appear in data dictionary entries, PL/pgSQL variables, and many other parts of the system. PostgreSQL Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6460",
"url": "https://www.suse.com/security/cve/CVE-2026-6460"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-6460",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-6460"
},
{
"cve": "CVE-2026-6467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6467"
}
],
"notes": [
{
"category": "general",
"text": "Uncontrolled search path element in PostgreSQL CREATE EXTENSION allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via ALTER SCHEMA ... RENAME or CREATE EXTENSION ... SCHEMA \"$user\". ALTER EXTENSION was also affected. A trusted-extension script located the wrong object and executed arbitrary SQL of the attacker\u0027s choice. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6467",
"url": "https://www.suse.com/security/cve/CVE-2026-6467"
},
{
"category": "external",
"summary": "SUSE Bug 1290237 for CVE-2026-6467",
"url": "https://bugzilla.suse.com/1290237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-0:14.25-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-0:14.25-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-13T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-6467"
}
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.