Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-2004 (GCVE-0-2026-2004)
Vulnerability from cvelistv5 – Published: 2026-02-12 13:00 – Updated: 2026-07-15 01:20
VLAI
EPSS
VEX
Title
PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
Summary
Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-13 04:56 UTC
CWE
- CWE-1287 - Improper Validation of Specified Type of Input
Assigner
References
34 references
Impacted products
41 products
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | PostgreSQL |
Affected:
18 , < 18.2
(rpm)
Affected: 17 , < 17.8 (rpm) Affected: 16 , < 16.12 (rpm) Affected: 15 , < 15.16 (rpm) Affected: 0 , < 14.21 (rpm) |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:16.13-1.el10_1 , < *
(rpm)
Unaffected: 0:16.13-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:18.3-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:16.13-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260227180702.489197e6 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260227221316.489197e6 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260227221401.489197e6 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260302082007.489197e6 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support |
Unaffected:
8020020260309120440.4cda2c84 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.2 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
8040020260305144728.522a0ee4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
8040020260306101701.522a0ee4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
8040020260305144728.522a0ee4 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
8040020260306101701.522a0ee4 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
8060020260306113941.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
8060020260309111524.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
8060020260306113941.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
8060020260309111524.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
8060020260306113941.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
8060020260309111524.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
8080020260302123717.63b34585 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
8080020260302123049.63b34585 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
8080020260302123717.63b34585 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
8080020260302123049.63b34585 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
8080020260306092921.63b34585 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:13.23-2.el9_7 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
9070020260227094950.rhel9 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
9070020260227095951.rhel9 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:13.23-1.el9_0.1 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
9020020260309133405.rhel9 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:13.23-1.el9_2.1 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:13.23-1.el9_4.1 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
9040020260306102041.rhel9 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
9040020260305163703.rhel9 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:13.23-1.el9_6.1 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
9060020260309125703.rhel9 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
9060020260305153549.rhel9 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Hardened Images |
Unaffected:
18.3-1.2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1773670137 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-2004",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-13T04:56:33.418080Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T14:44:21.641Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "postgresql16",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:16.13-1.el10_1",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:16.13-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "postgresql18",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:18.3-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "postgresql16",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:16.13-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260227180702.489197e6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260227221316.489197e6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "postgresql:16",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260227221401.489197e6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260302082007.489197e6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.2"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8020020260309120440.4cda2c84",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8040020260305144728.522a0ee4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8040020260306101701.522a0ee4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8040020260305144728.522a0ee4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8040020260306101701.522a0ee4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260306113941.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260309111524.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260306113941.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260309111524.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260306113941.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260309111524.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260302123717.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260302123049.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260302123717.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260302123049.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260306092921.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:13.23-2.el9_7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9070020260227094950.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "postgresql:16",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9070020260227095951.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0"
],
"defaultStatus": "affected",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:13.23-1.el9_0.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9020020260309133405.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:13.23-1.el9_2.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:13.23-1.el9_4.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:16",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9040020260306102041.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9040020260305163703.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:13.23-1.el9_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9060020260309125703.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:16",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9060020260305153549.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "postgresql18-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "18.3-1.2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/rhua-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1773670137",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unknown",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unknown",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "postgresql:18/postgresql",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
}
],
"datePublic": "2026-02-12T13:00:08.857Z",
"descriptions": [
{
"lang": "en",
"value": "A type validation flaw has been discovered in PostgreSQL. Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1287",
"description": "Improper Validation of Specified Type of Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-15T01:20:56.958Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-2004"
},
{
"name": "RHBZ#2439325",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439325"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2004.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4441"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3887"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19010"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19009"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4064"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4024"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4059"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4063"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4506"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4509"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4504"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4505"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4516"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4075"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4074"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4515"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4518"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4254"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4475"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4548"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4544"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4524"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4546"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4547"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4528"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3896"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4110"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3730"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8756"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4943"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:4441: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:3887: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19010: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19009: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:4064: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:4024: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:4059: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:4063: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:4506: Red Hat Enterprise Linux AppStream AUS (v. 8.2)"
},
{
"lang": "en",
"value": "RHSA-2026:4509: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:4504: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:4505: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:4516: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:4075: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:4074: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:4515: Red Hat Enterprise Linux AppStream E4S (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:4518: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:4254: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:4475: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:4548: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:4544: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:4524: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:4546: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:4547: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:4528: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:3896: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:4110: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:3730: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:8756: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:4943: Red Hat Update Infrastructure 5"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-02-12T14:01:31.249Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-02-12T13:00:08.857Z",
"value": "Made public."
}
],
"title": "postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "PostgreSQL",
"vendor": "n/a",
"versions": [
{
"lessThan": "18.2",
"status": "affected",
"version": "18",
"versionType": "rpm"
},
{
"lessThan": "17.8",
"status": "affected",
"version": "17",
"versionType": "rpm"
},
{
"lessThan": "16.12",
"status": "affected",
"version": "16",
"versionType": "rpm"
},
{
"lessThan": "15.16",
"status": "affected",
"version": "15",
"versionType": "rpm"
},
{
"lessThan": "14.21",
"status": "affected",
"version": "0",
"versionType": "rpm"
}
]
}
],
"configurations": [
{
"lang": "en",
"value": "Attacker has permission to install a vulnerable extension, e.g. intarray. Alternatively, a vulnerable extension is already installed, and the attacker has permission to create objects (temporary objects or non-temporary objects in at least one schema)."
}
],
"credits": [
{
"lang": "en",
"value": "The PostgreSQL project thanks Daniel Firer, as part of zeroday.cloud, for reporting this problem."
}
],
"descriptions": [
{
"lang": "en",
"value": "Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1287",
"description": "Improper Validation of Specified Type of Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-12T13:00:08.857Z",
"orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
"shortName": "PostgreSQL"
},
"references": [
{
"url": "https://www.postgresql.org/support/security/CVE-2026-2004/"
}
],
"title": "PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code"
}
},
"cveMetadata": {
"assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
"assignerShortName": "PostgreSQL",
"cveId": "CVE-2026-2004",
"datePublished": "2026-02-12T13:00:08.857Z",
"dateReserved": "2026-02-05T18:17:54.681Z",
"dateUpdated": "2026-07-15T01:20:56.958Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-2004",
"date": "2026-08-13",
"epss": "0.00785",
"percentile": "0.52873"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-2004\",\"sourceIdentifier\":\"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007\",\"published\":\"2026-02-12T14:16:02.213\",\"lastModified\":\"2026-07-15T02:19:25.987\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.\"},{\"lang\":\"es\",\"value\":\"Falta de validaci\u00f3n del tipo de entrada en la funci\u00f3n estimadora de selectividad de la extensi\u00f3n intarray de PostgreSQL permite a un creador de objetos ejecutar c\u00f3digo arbitrario como el usuario del sistema operativo que ejecuta la base de datos. Las versiones anteriores a PostgreSQL 18.2, 17.8, 16.12, 15.16 y 14.21 est\u00e1n afectadas.\"}],\"affected\":[{\"source\":\"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007\",\"affectedData\":[{\"vendor\":\"n/a\",\"product\":\"PostgreSQL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"18\",\"lessThan\":\"18.2\",\"versionType\":\"rpm\",\"status\":\"affected\"},{\"version\":\"17\",\"lessThan\":\"17.8\",\"versionType\":\"rpm\",\"status\":\"affected\"},{\"version\":\"16\",\"lessThan\":\"16.12\",\"versionType\":\"rpm\",\"status\":\"affected\"},{\"version\":\"15\",\"lessThan\":\"15.16\",\"versionType\":\"rpm\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"14.21\",\"versionType\":\"rpm\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql16\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:16.13-1.el10_1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:16.13-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql18\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:18.3-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql16\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:16.13-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:13\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260227180702.489197e6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:15\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260227221316.489197e6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:16\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260227221401.489197e6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:12\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260302082007.489197e6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.2 Advanced Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:12\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.2\"],\"versions\":[{\"version\":\"8020020260309120440.4cda2c84\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:13\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"8040020260305144728.522a0ee4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:12\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"8040020260306101701.522a0ee4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:13\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"8040020260305144728.522a0ee4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:12\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"8040020260306101701.522a0ee4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:12\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"8060020260306113941.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:13\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"8060020260309111524.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:12\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6\"],\"versions\":[{\"version\":\"8060020260306113941.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:13\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6\"],\"versions\":[{\"version\":\"8060020260309111524.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:12\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6\"],\"versions\":[{\"version\":\"8060020260306113941.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:13\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6\"],\"versions\":[{\"version\":\"8060020260309111524.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:13\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"8080020260302123717.63b34585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:12\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"8080020260302123049.63b34585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:13\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"8080020260302123717.63b34585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:12\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"8080020260302123049.63b34585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:15\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"8080020260306092921.63b34585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:13.23-2.el9_7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:15\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"9070020260227094950.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:16\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"9070020260227095951.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0\"],\"versions\":[{\"version\":\"0:13.23-1.el9_0.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:15\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"9020020260309133405.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:13.23-1.el9_2.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"0:13.23-1.el9_4.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:16\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"9040020260306102041.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:15\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"9040020260305163703.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:13.23-1.el9_6.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:15\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"9060020260309125703.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:16\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"9060020260305153549.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql18-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"18.3-1.2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/rhua-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1773670137\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"postgresql:18/postgresql\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-02-13T04:56:33.418080Z\",\"id\":\"CVE-2026-2004\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1287\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1287\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"14.0\",\"versionEndExcluding\":\"14.21\",\"matchCriteriaId\":\"4BCEAB7B-E4FC-4F9F-A1F9-62EA7DD6D6CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"15.0\",\"versionEndExcluding\":\"15.16\",\"matchCriteriaId\":\"4B408DAF-2DCD-45FE-94EE-BC84947A41C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"16.0\",\"versionEndExcluding\":\"16.12\",\"matchCriteriaId\":\"6353A59B-FE67-4DD5-B0E6-C10F0D2358D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.0\",\"versionEndExcluding\":\"17.8\",\"matchCriteriaId\":\"E2CCF450-C726-403A-975F-B5717E92A769\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"18.0\",\"versionEndExcluding\":\"18.2\",\"matchCriteriaId\":\"6B872502-5316-4E79-8FA1-24E5D8222C39\"}]}]}],\"references\":[{\"url\":\"https://www.postgresql.org/support/security/CVE-2026-2004/\",\"source\":\"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19009\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19010\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3730\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3887\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3896\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4024\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4059\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4063\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4064\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4074\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4075\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4110\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4254\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4475\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4504\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4505\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4506\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4509\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4515\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4516\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4518\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4524\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4528\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4544\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4546\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4547\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4548\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4943\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8756\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-2004\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2439325\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2004.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-06-30T04:12:46+00:00",
"cve": "CVE-2026-2004",
"id": "CVE-2026-2004",
"initial_release_date": "2026-02-12T13:00:08.857000+00:00",
"product_status:fixed": "3674",
"product_status:known_affected": "40",
"product_status:known_not_affected": "6",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2004.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-15T05:42:41Z",
"cve": "CVE-2026-2004",
"id": "CVE-2026-2004",
"initial_release_date": "2026-02-13T00:26:30Z",
"product_status:known_affected": "54",
"product_status:recommended": "1132",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-2004",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-2004.json",
"version": "31"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-2004\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-02-13T04:56:33.418080Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-02-12T14:32:49.462Z\"}}], \"cna\": {\"title\": \"PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code\", \"credits\": [{\"lang\": \"en\", \"value\": \"The PostgreSQL project thanks Daniel Firer, as part of zeroday.cloud, for reporting this problem.\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\"}}], \"affected\": [{\"vendor\": \"n/a\", \"product\": \"PostgreSQL\", \"versions\": [{\"status\": \"affected\", \"version\": \"18\", \"lessThan\": \"18.2\", \"versionType\": \"rpm\"}, {\"status\": \"affected\", \"version\": \"17\", \"lessThan\": \"17.8\", \"versionType\": \"rpm\"}, {\"status\": \"affected\", \"version\": \"16\", \"lessThan\": \"16.12\", \"versionType\": \"rpm\"}, {\"status\": \"affected\", \"version\": \"15\", \"lessThan\": \"15.16\", \"versionType\": \"rpm\"}, {\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"14.21\", \"versionType\": \"rpm\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.postgresql.org/support/security/CVE-2026-2004/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1287\", \"description\": \"Improper Validation of Specified Type of Input\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"Attacker has permission to install a vulnerable extension, e.g. intarray. Alternatively, a vulnerable extension is already installed, and the attacker has permission to create objects (temporary objects or non-temporary objects in at least one schema).\"}], \"providerMetadata\": {\"orgId\": \"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007\", \"shortName\": \"PostgreSQL\", \"dateUpdated\": \"2026-02-12T13:00:08.857Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-2004\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-02-26T14:44:21.641Z\", \"dateReserved\": \"2026-02-05T18:17:54.681Z\", \"assignerOrgId\": \"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007\", \"datePublished\": \"2026-02-12T13:00:08.857Z\", \"assignerShortName\": \"PostgreSQL\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-0905
Vulnerability from certfr_avis - Published: 2026-07-21 - Updated: 2026-07-24
De multiples vulnérabilités ont été découvertes dans Tenable Security Center. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une injection SQL (SQLi) et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Tenable | Security Center | Security Center sans le correctif de sécurité Patch SC202607.1 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Security Center sans le correctif de s\u00e9curit\u00e9 Patch SC202607.1",
"product": {
"name": "Security Center",
"vendor": {
"name": "Tenable",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-66199",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66199"
},
{
"name": "CVE-2026-23479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23479"
},
{
"name": "CVE-2026-6474",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6474"
},
{
"name": "CVE-2026-6472",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6472"
},
{
"name": "CVE-2025-15469",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15469"
},
{
"name": "CVE-2026-6479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6479"
},
{
"name": "CVE-2026-7261",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7261"
},
{
"name": "CVE-2026-6104",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6104"
},
{
"name": "CVE-2025-69419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69419"
},
{
"name": "CVE-2026-6735",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6735"
},
{
"name": "CVE-2025-15467",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
},
{
"name": "CVE-2026-2006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2006"
},
{
"name": "CVE-2026-6637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6637"
},
{
"name": "CVE-2026-6473",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6473"
},
{
"name": "CVE-2026-2005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2005"
},
{
"name": "CVE-2026-22795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
},
{
"name": "CVE-2026-33857",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33857"
},
{
"name": "CVE-2025-69421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69421"
},
{
"name": "CVE-2026-25589",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25589"
},
{
"name": "CVE-2025-14179",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14179"
},
{
"name": "CVE-2026-6638",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6638"
},
{
"name": "CVE-2026-25588",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25588"
},
{
"name": "CVE-2026-22796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
},
{
"name": "CVE-2026-7568",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7568"
},
{
"name": "CVE-2026-6722",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6722"
},
{
"name": "CVE-2026-23918",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23918"
},
{
"name": "CVE-2026-24072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24072"
},
{
"name": "CVE-2026-6478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6478"
},
{
"name": "CVE-2026-7258",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7258"
},
{
"name": "CVE-2026-23631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23631"
},
{
"name": "CVE-2026-64880",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64880"
},
{
"name": "CVE-2026-64877",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64877"
},
{
"name": "CVE-2026-6475",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6475"
},
{
"name": "CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"name": "CVE-2026-64881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64881"
},
{
"name": "CVE-2025-68160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
},
{
"name": "CVE-2026-6477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6477"
},
{
"name": "CVE-2025-69418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
},
{
"name": "CVE-2025-15468",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15468"
},
{
"name": "CVE-2026-34032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34032"
},
{
"name": "CVE-2026-34059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34059"
},
{
"name": "CVE-2026-42371",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42371"
},
{
"name": "CVE-2025-11187",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11187"
},
{
"name": "CVE-2026-2003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2003"
},
{
"name": "CVE-2026-7259",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7259"
},
{
"name": "CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"name": "CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"name": "CVE-2026-64878",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64878"
},
{
"name": "CVE-2026-7262",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7262"
},
{
"name": "CVE-2026-33523",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33523"
},
{
"name": "CVE-2026-2004",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2004"
},
{
"name": "CVE-2026-7263",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7263"
},
{
"name": "CVE-2025-69420",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69420"
},
{
"name": "CVE-2026-64879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64879"
}
],
"initial_release_date": "2026-07-21T00:00:00",
"last_revision_date": "2026-07-24T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0905",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-21T00:00:00.000000"
},
{
"description": "Ajout de plusieurs identifiants CVE.",
"revision_date": "2026-07-24T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Injection SQL (SQLi)"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Tenable Security Center. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une injection SQL (SQLi) et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Tenable Security Center",
"vendor_advisories": [
{
"published_at": "2026-07-20",
"title": "Bulletin de s\u00e9curit\u00e9 Tenable tns-2026-19",
"url": "https://www.tenable.com/security/tns-2026-19"
}
]
}
CERTFR-2026-AVI-0933
Vulnerability from certfr_avis - Published: 2026-07-24 - Updated: 2026-07-24
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| IBM | QRadar Assistant | QRadar AI Assistant versions antérieures à 2.1.0 | ||
| IBM | Sterling | Sterling B2B Integrator et Sterling File Gateway versions 6.2.2.x antérieures à 6.2.2.1 | ||
| IBM | Sterling | Sterling B2B Integrator et Sterling File Gateway versions 6.2.1.x antérieures à 6.2.1.2 | ||
| IBM | QRadar SIEM | QRadar SIEM versions 7.5.x antérieures à 7.5.0 UP15 IF05 | ||
| IBM | Sterling | Sterling Connect:Direct Web Services versions 6.4.x antérieures à 6.4.0.9 | ||
| IBM | Tivoli | Tivoli System Automation Application Manager 4.1 avec WebSphere Application Server versions 8.5 ou 9.0 sans les derniers correctifs de sécurité | ||
| IBM | Cognos Command Center | Cognos Command Center versions 12.2.4.1 à 12.2.5 FP1 IF3 antérieures à 12.2.5 FP1 IF4 | ||
| IBM | AIX | AIX versions 7.2 et 7.3 sans le dernier correctif de sécurité | ||
| IBM | Sterling | Sterling Connect:Direct Web Services versions 6.3.x antérieures à 6.3.0.20 | ||
| IBM | Sterling | Sterling B2B Integrator et Sterling File Gateway versions 6.2.0.x antérieures à 6.2.0.6_1 | ||
| IBM | WebSphere | WebSphere Application Server - Liberty versions 17.0.0.3 à 26.0.0.7 sans les correctifs de sécurité temporaires PH71839 et PH72167 ou antérieures à 26.0.0.8 (disponibilité prévue pour le troisième trimestre 2026) | ||
| IBM | Tivoli | Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent version 7.3.0 Fix Pack 4 sans le dernier correctif pour Tivoli Monitoring | ||
| IBM | VIOS | VIOS version 4.1 sans le dernier correctif de sécurité | ||
| IBM | Sterling | Sterling B2B Integrator et Sterling File Gateway versions 6.1.2.x antérieures à 6.1.2.8 | ||
| IBM | Tivoli | Tivoli Application Dependency Discovery Manager versions 7.3.0.0 à 7.3.0.12 avec WebSphere Application Server Liberty versions antérieures à 26.0.0.7 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "QRadar AI Assistant versions ant\u00e9rieures \u00e0 2.1.0",
"product": {
"name": "QRadar Assistant",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling B2B Integrator et Sterling File Gateway versions 6.2.2.x ant\u00e9rieures \u00e0 6.2.2.1",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling B2B Integrator et Sterling File Gateway versions 6.2.1.x ant\u00e9rieures \u00e0 6.2.1.2",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "QRadar SIEM versions 7.5.x ant\u00e9rieures \u00e0 7.5.0 UP15 IF05",
"product": {
"name": "QRadar SIEM",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Connect:Direct Web Services versions 6.4.x ant\u00e9rieures \u00e0 6.4.0.9",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Tivoli System Automation Application Manager 4.1 avec WebSphere Application Server versions 8.5 ou 9.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Tivoli",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Cognos Command Center versions 12.2.4.1 \u00e0 12.2.5 FP1 IF3 ant\u00e9rieures \u00e0 12.2.5 FP1 IF4",
"product": {
"name": "Cognos Command Center",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "AIX versions 7.2 et 7.3 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "AIX",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Connect:Direct Web Services versions 6.3.x ant\u00e9rieures \u00e0 6.3.0.20",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling B2B Integrator et Sterling File Gateway versions 6.2.0.x ant\u00e9rieures \u00e0 6.2.0.6_1",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Application Server - Liberty versions 17.0.0.3 \u00e0 26.0.0.7 sans les correctifs de s\u00e9curit\u00e9 temporaires PH71839 et PH72167 ou ant\u00e9rieures \u00e0 26.0.0.8 (disponibilit\u00e9 pr\u00e9vue pour le troisi\u00e8me trimestre 2026)",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent version 7.3.0 Fix Pack 4 sans le dernier correctif pour Tivoli Monitoring",
"product": {
"name": "Tivoli",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "VIOS version 4.1 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "VIOS",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling B2B Integrator et Sterling File Gateway versions 6.1.2.x ant\u00e9rieures \u00e0 6.1.2.8",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Tivoli Application Dependency Discovery Manager versions 7.3.0.0 \u00e0 7.3.0.12 avec WebSphere Application Server Liberty versions ant\u00e9rieures \u00e0 26.0.0.7",
"product": {
"name": "Tivoli",
"vendor": {
"name": "IBM",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-53540",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53540"
},
{
"name": "CVE-2026-54283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54283"
},
{
"name": "CVE-2026-50557",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50557"
},
{
"name": "CVE-2026-33871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33871"
},
{
"name": "CVE-2026-48990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48990"
},
{
"name": "CVE-2026-11383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11383"
},
{
"name": "CVE-2026-34180",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34180"
},
{
"name": "CVE-2026-45416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45416"
},
{
"name": "CVE-2026-42766",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42766"
},
{
"name": "CVE-2026-9076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9076"
},
{
"name": "CVE-2026-42211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42211"
},
{
"name": "CVE-2026-54530",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54530"
},
{
"name": "CVE-2026-54514",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54514"
},
{
"name": "CVE-2021-23336",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23336"
},
{
"name": "CVE-2026-48710",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48710"
},
{
"name": "CVE-2026-42770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42770"
},
{
"name": "CVE-2026-24308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24308"
},
{
"name": "CVE-2026-45673",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45673"
},
{
"name": "CVE-2026-9072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9072"
},
{
"name": "CVE-2026-54275",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54275"
},
{
"name": "CVE-2026-32635",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32635"
},
{
"name": "CVE-2026-27171",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27171"
},
{
"name": "CVE-2026-45445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45445"
},
{
"name": "CVE-2026-29145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29145"
},
{
"name": "CVE-2026-8858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8858"
},
{
"name": "CVE-2026-54651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54651"
},
{
"name": "CVE-2026-54278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54278"
},
{
"name": "CVE-2026-54516",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54516"
},
{
"name": "CVE-2026-53538",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53538"
},
{
"name": "CVE-2026-2006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2006"
},
{
"name": "CVE-2026-54515",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54515"
},
{
"name": "CVE-2026-33245",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33245"
},
{
"name": "CVE-2026-33870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33870"
},
{
"name": "CVE-2025-5115",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5115"
},
{
"name": "CVE-2021-47154",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-47154"
},
{
"name": "CVE-2026-11541",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11541"
},
{
"name": "CVE-2026-11707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11707"
},
{
"name": "CVE-2026-2005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2005"
},
{
"name": "CVE-2026-7383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7383"
},
{
"name": "CVE-2026-48522",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48522"
},
{
"name": "CVE-2026-45674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45674"
},
{
"name": "CVE-2026-34500",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34500"
},
{
"name": "CVE-2026-11594",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11594"
},
{
"name": "CVE-2026-54267",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54267"
},
{
"name": "CVE-2026-29146",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29146"
},
{
"name": "CVE-2026-48735",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48735"
},
{
"name": "CVE-2026-15057",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15057"
},
{
"name": "CVE-2026-45409",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45409"
},
{
"name": "CVE-2026-47265",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47265"
},
{
"name": "CVE-2026-54282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54282"
},
{
"name": "CVE-2026-44249",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44249"
},
{
"name": "CVE-2026-41844",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41844"
},
{
"name": "CVE-2026-48988",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48988"
},
{
"name": "CVE-2026-54268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54268"
},
{
"name": "CVE-2026-5598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5598"
},
{
"name": "CVE-2026-54277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54277"
},
{
"name": "CVE-2026-41842",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41842"
},
{
"name": "CVE-2026-11536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11536"
},
{
"name": "CVE-2026-8646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8646"
},
{
"name": "CVE-2026-54280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54280"
},
{
"name": "CVE-2026-27970",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27970"
},
{
"name": "CVE-2026-9320",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9320"
},
{
"name": "CVE-2026-54265",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54265"
},
{
"name": "CVE-2025-68161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
},
{
"name": "CVE-2026-50171",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50171"
},
{
"name": "CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"name": "CVE-2026-22731",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22731"
},
{
"name": "CVE-2026-41843",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41843"
},
{
"name": "CVE-2026-22732",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22732"
},
{
"name": "CVE-2026-40181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40181"
},
{
"name": "CVE-2026-54274",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54274"
},
{
"name": "CVE-2026-34487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34487"
},
{
"name": "CVE-2026-54512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
},
{
"name": "CVE-2026-41850",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41850"
},
{
"name": "CVE-2026-34197",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34197"
},
{
"name": "CVE-2026-33244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33244"
},
{
"name": "CVE-2026-54266",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54266"
},
{
"name": "CVE-2026-45446",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45446"
},
{
"name": "CVE-2026-40198",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40198"
},
{
"name": "CVE-2026-53537",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53537"
},
{
"name": "CVE-2026-4176",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4176"
},
{
"name": "CVE-2026-48524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48524"
},
{
"name": "CVE-2026-40046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40046"
},
{
"name": "CVE-2026-52725",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-52725"
},
{
"name": "CVE-2026-54273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54273"
},
{
"name": "CVE-2025-64775",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64775"
},
{
"name": "CVE-2026-41852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41852"
},
{
"name": "CVE-2026-27830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27830"
},
{
"name": "CVE-2026-11897",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11897"
},
{
"name": "CVE-2026-25854",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25854"
},
{
"name": "CVE-2026-54531",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54531"
},
{
"name": "CVE-2026-48155",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48155"
},
{
"name": "CVE-2026-41851",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41851"
},
{
"name": "CVE-2026-50010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50010"
},
{
"name": "CVE-2026-54279",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54279"
},
{
"name": "CVE-2026-42767",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42767"
},
{
"name": "CVE-2026-3381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3381"
},
{
"name": "CVE-2026-22733",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22733"
},
{
"name": "CVE-2026-41841",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41841"
},
{
"name": "CVE-2026-39304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39304"
},
{
"name": "CVE-2026-54517",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54517"
},
{
"name": "CVE-2026-50170",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50170"
},
{
"name": "CVE-2026-41846",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41846"
},
{
"name": "CVE-2026-40199",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40199"
},
{
"name": "CVE-2026-54513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
},
{
"name": "CVE-2026-54518",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54518"
},
{
"name": "CVE-2026-54276",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54276"
},
{
"name": "CVE-2025-66566",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66566"
},
{
"name": "CVE-2025-66168",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66168"
},
{
"name": "CVE-2026-42342",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42342"
},
{
"name": "CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"name": "CVE-2026-48523",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48523"
},
{
"name": "CVE-2024-3651",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3651"
},
{
"name": "CVE-2025-66675",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66675"
},
{
"name": "CVE-2026-33227",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33227"
},
{
"name": "CVE-2026-34483",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34483"
},
{
"name": "CVE-2026-34182",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34182"
},
{
"name": "CVE-2026-0636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0636"
},
{
"name": "CVE-2026-47691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47691"
},
{
"name": "CVE-2026-24880",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24880"
},
{
"name": "CVE-2026-48525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48525"
},
{
"name": "CVE-2026-2004",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2004"
},
{
"name": "CVE-2026-9071",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9071"
},
{
"name": "CVE-2026-35554",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35554"
},
{
"name": "CVE-2026-34993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34993"
},
{
"name": "CVE-2026-27727",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27727"
},
{
"name": "CVE-2026-10852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10852"
},
{
"name": "CVE-2025-12183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12183"
},
{
"name": "CVE-2026-41848",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41848"
},
{
"name": "CVE-2025-14813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14813"
},
{
"name": "CVE-2026-48156",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48156"
},
{
"name": "CVE-2026-24281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24281"
},
{
"name": "CVE-2026-34077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34077"
},
{
"name": "CVE-2026-53539",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53539"
},
{
"name": "CVE-2025-11226",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11226"
}
],
"initial_release_date": "2026-07-24T00:00:00",
"last_revision_date": "2026-07-24T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0933",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-24T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
"vendor_advisories": [
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280728",
"url": "https://www.ibm.com/support/pages/node/7280728"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280784",
"url": "https://www.ibm.com/support/pages/node/7280784"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280667",
"url": "https://www.ibm.com/support/pages/node/7280667"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280663",
"url": "https://www.ibm.com/support/pages/node/7280663"
},
{
"published_at": "2026-07-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280907",
"url": "https://www.ibm.com/support/pages/node/7280907"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280731",
"url": "https://www.ibm.com/support/pages/node/7280731"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280720",
"url": "https://www.ibm.com/support/pages/node/7280720"
},
{
"published_at": "2026-07-24",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281073",
"url": "https://www.ibm.com/support/pages/node/7281073"
},
{
"published_at": "2026-07-20",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280519",
"url": "https://www.ibm.com/support/pages/node/7280519"
},
{
"published_at": "2026-07-20",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280540",
"url": "https://www.ibm.com/support/pages/node/7280540"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280730",
"url": "https://www.ibm.com/support/pages/node/7280730"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280726",
"url": "https://www.ibm.com/support/pages/node/7280726"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280783",
"url": "https://www.ibm.com/support/pages/node/7280783"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280650",
"url": "https://www.ibm.com/support/pages/node/7280650"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280654",
"url": "https://www.ibm.com/support/pages/node/7280654"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280644",
"url": "https://www.ibm.com/support/pages/node/7280644"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280729",
"url": "https://www.ibm.com/support/pages/node/7280729"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280785",
"url": "https://www.ibm.com/support/pages/node/7280785"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280695",
"url": "https://www.ibm.com/support/pages/node/7280695"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280719",
"url": "https://www.ibm.com/support/pages/node/7280719"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280727",
"url": "https://www.ibm.com/support/pages/node/7280727"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280646",
"url": "https://www.ibm.com/support/pages/node/7280646"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280670",
"url": "https://www.ibm.com/support/pages/node/7280670"
},
{
"published_at": "2026-07-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280916",
"url": "https://www.ibm.com/support/pages/node/7280916"
},
{
"published_at": "2026-07-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280950",
"url": "https://www.ibm.com/support/pages/node/7280950"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280126",
"url": "https://www.ibm.com/support/pages/node/7280126"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280656",
"url": "https://www.ibm.com/support/pages/node/7280656"
},
{
"published_at": "2026-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280621",
"url": "https://www.ibm.com/support/pages/node/7280621"
},
{
"published_at": "2026-07-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280887",
"url": "https://www.ibm.com/support/pages/node/7280887"
}
]
}
CERTFR-2026-AVI-0958
Vulnerability from certfr_avis - Published: 2026-07-31 - Updated: 2026-07-31
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| IBM | Db2 | Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions v4.8 à v5.3.x antérieures à v5.4 patch 3 | ||
| IBM | AIX | AIX versions 7.3.x sans le correctif de sécurité curl_fix11.tar | ||
| IBM | QRadar | QRadar Data Synchronization App versions antérieures à 4.0.0 | ||
| IBM | QRadar | QRadar Pulse App versions antérieures à 2.2.17 | ||
| IBM | WebSphere Application Server | WebSphere Application Server versions 9.0.x sans les correctifs de sécurité temporaires antérieures à 9.0.5.29 (disponibilité prévue pour le troisième trimestre 2026) | ||
| IBM | Sterling Control Center | Sterling Control Center versions 6.3.1.0 sans le correctif iFix10 | ||
| IBM | WebSphere Application Server | WebSphere Application Server versions 8.5.x sans les correctifs de sécurité temporaires antérieures à 8.5.5.31 (disponibilité prévue pour le troisième trimestre 2026) | ||
| IBM | Sterling Control Center | Sterling Control Center versions 6.4.2.0 sans le correctif iFix05 | ||
| IBM | Sterling | Sterling External Authentication Server versions 6.1.x antérieures à 6.1.1.4 GA | ||
| IBM | QRadar | QRadar SIEM versions 7.5.x antérieures à 7.5.0 UP15 IF05 | ||
| IBM | Sterling B2B Integrator | Sterling B2B Integrator et Sterling File Gateway versions 6.2.0.x antérieures à 6.2.0.6_1 | ||
| IBM | Sterling B2B Integrator | Sterling B2B Integrator et Sterling File Gateway versions 6.2.1.x antérieures à 6.2.1.2 | ||
| IBM | Sterling Control Center | Sterling Control Center versions 6.4.1.0 sans le correctif iFix04 | ||
| IBM | Sterling B2B Integrator | Sterling B2B Integrator et Sterling File Gateway versions 6.2.2.x antérieures à 6.2.2.1 | ||
| IBM | WebSphere Application Server | WebSphere Application Server Liberty versions antérieures à 26.0.0.9 (disponibilité prévue pour le troisième trimestre 2026) |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions v4.8 \u00e0 v5.3.x ant\u00e9rieures \u00e0 v5.4 patch 3",
"product": {
"name": "Db2",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "AIX versions 7.3.x sans le correctif de s\u00e9curit\u00e9 curl_fix11.tar",
"product": {
"name": "AIX",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "QRadar Data Synchronization App versions ant\u00e9rieures \u00e0 4.0.0",
"product": {
"name": "QRadar",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "QRadar Pulse App versions ant\u00e9rieures \u00e0 2.2.17",
"product": {
"name": "QRadar",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Application Server versions 9.0.x sans les correctifs de s\u00e9curit\u00e9 temporaires ant\u00e9rieures \u00e0 9.0.5.29 (disponibilit\u00e9 pr\u00e9vue pour le troisi\u00e8me trimestre 2026)",
"product": {
"name": "WebSphere Application Server",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Control Center versions 6.3.1.0 sans le correctif iFix10",
"product": {
"name": "Sterling Control Center",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Application Server versions 8.5.x sans les correctifs de s\u00e9curit\u00e9 temporaires ant\u00e9rieures \u00e0 8.5.5.31 (disponibilit\u00e9 pr\u00e9vue pour le troisi\u00e8me trimestre 2026)",
"product": {
"name": "WebSphere Application Server",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Control Center versions 6.4.2.0 sans le correctif iFix05",
"product": {
"name": "Sterling Control Center",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling External Authentication Server versions 6.1.x ant\u00e9rieures \u00e0 6.1.1.4 GA",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "QRadar SIEM versions 7.5.x ant\u00e9rieures \u00e0 7.5.0 UP15 IF05",
"product": {
"name": "QRadar",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling B2B Integrator et Sterling File Gateway versions 6.2.0.x ant\u00e9rieures \u00e0 6.2.0.6_1",
"product": {
"name": "Sterling B2B Integrator",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling B2B Integrator et Sterling File Gateway versions 6.2.1.x ant\u00e9rieures \u00e0 6.2.1.2",
"product": {
"name": "Sterling B2B Integrator",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Control Center versions 6.4.1.0 sans le correctif iFix04",
"product": {
"name": "Sterling Control Center",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling B2B Integrator et Sterling File Gateway versions 6.2.2.x ant\u00e9rieures \u00e0 6.2.2.1",
"product": {
"name": "Sterling B2B Integrator",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Application Server Liberty versions ant\u00e9rieures \u00e0 26.0.0.9 (disponibilit\u00e9 pr\u00e9vue pour le troisi\u00e8me trimestre 2026)",
"product": {
"name": "WebSphere Application Server",
"vendor": {
"name": "IBM",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-5588",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5588"
},
{
"name": "CVE-2026-45505",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45505"
},
{
"name": "CVE-2025-66199",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66199"
},
{
"name": "CVE-2026-3449",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3449"
},
{
"name": "CVE-2026-59871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59871"
},
{
"name": "CVE-2026-42588",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42588"
},
{
"name": "CVE-2026-33845",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33845"
},
{
"name": "CVE-2026-44025",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44025"
},
{
"name": "CVE-2026-42253",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42253"
},
{
"name": "CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"name": "CVE-2026-42041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
},
{
"name": "CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"name": "CVE-2026-41716",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41716"
},
{
"name": "CVE-2026-16184",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16184"
},
{
"name": "CVE-2026-15328",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15328"
},
{
"name": "CVE-2025-15469",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15469"
},
{
"name": "CVE-2020-13956",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13956"
},
{
"name": "CVE-2025-47944",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47944"
},
{
"name": "CVE-2025-56200",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-56200"
},
{
"name": "CVE-2026-59874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59874"
},
{
"name": "CVE-2026-42258",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42258"
},
{
"name": "CVE-2026-7769",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7769"
},
{
"name": "CVE-2026-30827",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30827"
},
{
"name": "CVE-2026-22752",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22752"
},
{
"name": "CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"name": "CVE-2025-22228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22228"
},
{
"name": "CVE-2026-8458",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8458"
},
{
"name": "CVE-2026-2391",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2391"
},
{
"name": "CVE-2026-1605",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1605"
},
{
"name": "CVE-2026-46605",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46605"
},
{
"name": "CVE-2026-22013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22013"
},
{
"name": "CVE-2026-53655",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53655"
},
{
"name": "CVE-2026-29145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29145"
},
{
"name": "CVE-2026-22018",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22018"
},
{
"name": "CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"name": "CVE-2020-13955",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13955"
},
{
"name": "CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"name": "CVE-2026-41988",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41988"
},
{
"name": "CVE-2026-14528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14528"
},
{
"name": "CVE-2026-6357",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6357"
},
{
"name": "CVE-2026-23745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23745"
},
{
"name": "CVE-2026-2006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2006"
},
{
"name": "CVE-2026-53550",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53550"
},
{
"name": "CVE-2026-41721",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41721"
},
{
"name": "CVE-2026-54905",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54905"
},
{
"name": "CVE-2026-0994",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0994"
},
{
"name": "CVE-2026-49157",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49157"
},
{
"name": "CVE-2021-47154",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-47154"
},
{
"name": "CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"name": "CVE-2026-54899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54899"
},
{
"name": "CVE-2026-39834",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39834"
},
{
"name": "CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"name": "CVE-2026-41635",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41635"
},
{
"name": "CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"name": "CVE-2026-54901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54901"
},
{
"name": "CVE-2026-42036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42036"
},
{
"name": "CVE-2026-2005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2005"
},
{
"name": "CVE-2022-39135",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-39135"
},
{
"name": "CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"name": "CVE-2026-33558",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33558"
},
{
"name": "CVE-2026-33846",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33846"
},
{
"name": "CVE-2021-23337",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23337"
},
{
"name": "CVE-2026-5758",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5758"
},
{
"name": "CVE-2026-34500",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34500"
},
{
"name": "CVE-2026-54502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54502"
},
{
"name": "CVE-2026-22795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
},
{
"name": "CVE-2026-29146",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29146"
},
{
"name": "CVE-2026-34043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34043"
},
{
"name": "CVE-2025-64718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64718"
},
{
"name": "CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"name": "CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"name": "CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"name": "CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"name": "CVE-2026-10536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10536"
},
{
"name": "CVE-2026-41844",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41844"
},
{
"name": "CVE-2026-8932",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8932"
},
{
"name": "CVE-2026-4424",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
},
{
"name": "CVE-2026-45292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45292"
},
{
"name": "CVE-2024-38820",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38820"
},
{
"name": "CVE-2026-40356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40356"
},
{
"name": "CVE-2026-15325",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15325"
},
{
"name": "CVE-2026-14976",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14976"
},
{
"name": "CVE-2026-5598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5598"
},
{
"name": "CVE-2026-42256",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42256"
},
{
"name": "CVE-2026-42033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
},
{
"name": "CVE-2025-59375",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59375"
},
{
"name": "CVE-2026-54906",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54906"
},
{
"name": "CVE-2026-34040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34040"
},
{
"name": "CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"name": "CVE-2026-41842",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41842"
},
{
"name": "CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"name": "CVE-2026-41695",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41695"
},
{
"name": "CVE-2026-14512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14512"
},
{
"name": "CVE-2026-11856",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11856"
},
{
"name": "CVE-2026-44160",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44160"
},
{
"name": "CVE-2026-42009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42009"
},
{
"name": "CVE-2026-33750",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33750"
},
{
"name": "CVE-2026-5038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5038"
},
{
"name": "CVE-2026-34478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34478"
},
{
"name": "CVE-2026-2359",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2359"
},
{
"name": "CVE-2026-42043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
},
{
"name": "CVE-2025-11143",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11143"
},
{
"name": "CVE-2026-34480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34480"
},
{
"name": "CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"name": "CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"name": "CVE-2025-12758",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12758"
},
{
"name": "CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"name": "CVE-2026-5079",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5079"
},
{
"name": "CVE-2026-5795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5795"
},
{
"name": "CVE-2024-23953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23953"
},
{
"name": "CVE-2025-68161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
},
{
"name": "CVE-2026-44930",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44930"
},
{
"name": "CVE-2026-14974",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14974"
},
{
"name": "CVE-2024-29869",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29869"
},
{
"name": "CVE-2026-42010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42010"
},
{
"name": "CVE-2026-42506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42506"
},
{
"name": "CVE-2026-34479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34479"
},
{
"name": "CVE-2026-22796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
},
{
"name": "CVE-2026-26960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26960"
},
{
"name": "CVE-2026-42040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42040"
},
{
"name": "CVE-2026-4867",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4867"
},
{
"name": "CVE-2026-2303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2303"
},
{
"name": "CVE-2024-6763",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6763"
},
{
"name": "CVE-2026-27903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27903"
},
{
"name": "CVE-2026-14981",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14981"
},
{
"name": "CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"name": "CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"name": "CVE-2026-8924",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8924"
},
{
"name": "CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"name": "CVE-2026-14529",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14529"
},
{
"name": "CVE-2026-59875",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59875"
},
{
"name": "CVE-2026-41843",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41843"
},
{
"name": "CVE-2026-54896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54896"
},
{
"name": "CVE-2026-25680",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25680"
},
{
"name": "CVE-2026-34487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34487"
},
{
"name": "CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"name": "CVE-2026-42578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42578"
},
{
"name": "CVE-2026-41850",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41850"
},
{
"name": "CVE-2026-4519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4519"
},
{
"name": "CVE-2026-34197",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34197"
},
{
"name": "CVE-2024-12905",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12905"
},
{
"name": "CVE-2024-52046",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52046"
},
{
"name": "CVE-2026-59873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59873"
},
{
"name": "CVE-2026-24842",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24842"
},
{
"name": "CVE-2025-47935",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47935"
},
{
"name": "CVE-2026-40198",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40198"
},
{
"name": "CVE-2026-4111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4111"
},
{
"name": "CVE-2024-38827",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38827"
},
{
"name": "CVE-2026-41694",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41694"
},
{
"name": "CVE-2026-23950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23950"
},
{
"name": "CVE-2026-40046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40046"
},
{
"name": "CVE-2022-22968",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22968"
},
{
"name": "CVE-2026-16192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16192"
},
{
"name": "CVE-2026-2950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2950"
},
{
"name": "CVE-2026-54500",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54500"
},
{
"name": "CVE-2026-3304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3304"
},
{
"name": "CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"name": "CVE-2018-10237",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10237"
},
{
"name": "CVE-2026-14515",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14515"
},
{
"name": "CVE-2026-22016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22016"
},
{
"name": "CVE-2026-22021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22021"
},
{
"name": "CVE-2026-6100",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6100"
},
{
"name": "CVE-2026-54904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54904"
},
{
"name": "CVE-2026-22007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22007"
},
{
"name": "CVE-2025-68160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
},
{
"name": "CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"name": "CVE-2026-54897",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54897"
},
{
"name": "CVE-2026-34268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34268"
},
{
"name": "CVE-2026-41852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41852"
},
{
"name": "CVE-2021-22569",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22569"
},
{
"name": "CVE-2026-3520",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3520"
},
{
"name": "CVE-2026-29786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29786"
},
{
"name": "CVE-2026-41006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41006"
},
{
"name": "CVE-2026-41711",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41711"
},
{
"name": "CVE-2026-27830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27830"
},
{
"name": "CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"name": "CVE-2026-2482",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2482"
},
{
"name": "CVE-2026-42038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42038"
},
{
"name": "CVE-2026-49844",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49844"
},
{
"name": "CVE-2026-25854",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25854"
},
{
"name": "CVE-2026-2332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2332"
},
{
"name": "CVE-2026-41851",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41851"
},
{
"name": "CVE-2026-42039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
},
{
"name": "CVE-2026-8149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8149"
},
{
"name": "CVE-2026-6009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6009"
},
{
"name": "CVE-2026-9358",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9358"
},
{
"name": "CVE-2026-14446",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14446"
},
{
"name": "CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"name": "CVE-2020-8908",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8908"
},
{
"name": "CVE-2026-42245",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42245"
},
{
"name": "CVE-2026-8723",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8723"
},
{
"name": "CVE-2026-40988",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40988"
},
{
"name": "CVE-2026-41841",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41841"
},
{
"name": "CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"name": "CVE-2025-69418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
},
{
"name": "CVE-2026-54903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54903"
},
{
"name": "CVE-2026-39304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39304"
},
{
"name": "CVE-2026-49270",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49270"
},
{
"name": "CVE-2025-15468",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15468"
},
{
"name": "CVE-2026-25639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25639"
},
{
"name": "CVE-2026-15064",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15064"
},
{
"name": "CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"name": "CVE-2026-54900",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54900"
},
{
"name": "CVE-2018-16487",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16487"
},
{
"name": "CVE-2023-22899",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22899"
},
{
"name": "CVE-2026-42034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42034"
},
{
"name": "CVE-2026-8927",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8927"
},
{
"name": "CVE-2026-41846",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41846"
},
{
"name": "CVE-2025-5889",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5889"
},
{
"name": "CVE-2026-41035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41035"
},
{
"name": "CVE-2026-40199",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40199"
},
{
"name": "CVE-2025-27789",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27789"
},
{
"name": "CVE-2026-46598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46598"
},
{
"name": "CVE-2026-44024",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44024"
},
{
"name": "CVE-2026-42246",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42246"
},
{
"name": "CVE-2025-66566",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66566"
},
{
"name": "CVE-2025-66168",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66168"
},
{
"name": "CVE-2026-41409",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41409"
},
{
"name": "CVE-2025-11187",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11187"
},
{
"name": "CVE-2026-14980",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14980"
},
{
"name": "CVE-2026-54898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54898"
},
{
"name": "CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"name": "CVE-2026-44431",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
},
{
"name": "CVE-2026-26996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
},
{
"name": "CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"name": "CVE-2026-33227",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33227"
},
{
"name": "CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"name": "CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"name": "CVE-2026-44161",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44161"
},
{
"name": "CVE-2026-4786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4786"
},
{
"name": "CVE-2025-64756",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64756"
},
{
"name": "CVE-2026-34483",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34483"
},
{
"name": "CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"name": "CVE-2026-0636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0636"
},
{
"name": "CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"name": "CVE-2025-48997",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48997"
},
{
"name": "CVE-2026-24880",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24880"
},
{
"name": "CVE-2021-22570",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22570"
},
{
"name": "CVE-2026-9547",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9547"
},
{
"name": "CVE-2026-41007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41007"
},
{
"name": "CVE-2026-42037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42037"
},
{
"name": "CVE-2026-2004",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2004"
},
{
"name": "CVE-2026-42042",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42042"
},
{
"name": "CVE-2025-21502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21502"
},
{
"name": "CVE-2026-35554",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35554"
},
{
"name": "CVE-2025-48387",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48387"
},
{
"name": "CVE-2026-12590",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12590"
},
{
"name": "CVE-2026-27727",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27727"
},
{
"name": "CVE-2026-34477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34477"
},
{
"name": "CVE-2026-54902",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54902"
},
{
"name": "CVE-2026-44490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44490"
},
{
"name": "CVE-2026-54592",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54592"
},
{
"name": "CVE-2023-5752",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5752"
},
{
"name": "CVE-2026-39827",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39827"
},
{
"name": "CVE-2025-12183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12183"
},
{
"name": "CVE-2025-7338",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7338"
},
{
"name": "CVE-2026-15280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15280"
},
{
"name": "CVE-2026-41848",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41848"
},
{
"name": "CVE-2025-14813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14813"
},
{
"name": "CVE-2026-31802",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31802"
},
{
"name": "CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"name": "CVE-2026-13311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13311"
},
{
"name": "CVE-2026-41907",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41907"
},
{
"name": "CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"name": "CVE-2025-59343",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59343"
},
{
"name": "CVE-2026-34481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34481"
},
{
"name": "CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
},
{
"name": "CVE-2026-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8286"
},
{
"name": "CVE-2026-42257",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42257"
},
{
"name": "CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
}
],
"initial_release_date": "2026-07-31T00:00:00",
"last_revision_date": "2026-07-31T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0958",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-31T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Injection SQL (SQLi)"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
"vendor_advisories": [
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281450",
"url": "https://www.ibm.com/support/pages/node/7281450"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281625",
"url": "https://www.ibm.com/support/pages/node/7281625"
},
{
"published_at": "2026-07-30",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281949",
"url": "https://www.ibm.com/support/pages/node/7281949"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277692",
"url": "https://www.ibm.com/support/pages/node/7277692"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281628",
"url": "https://www.ibm.com/support/pages/node/7281628"
},
{
"published_at": "2026-07-24",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281135",
"url": "https://www.ibm.com/support/pages/node/7281135"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281375",
"url": "https://www.ibm.com/support/pages/node/7281375"
},
{
"published_at": "2026-07-29",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281743",
"url": "https://www.ibm.com/support/pages/node/7281743"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281373",
"url": "https://www.ibm.com/support/pages/node/7281373"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281388",
"url": "https://www.ibm.com/support/pages/node/7281388"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281721",
"url": "https://www.ibm.com/support/pages/node/7281721"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281369",
"url": "https://www.ibm.com/support/pages/node/7281369"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281648",
"url": "https://www.ibm.com/support/pages/node/7281648"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281374",
"url": "https://www.ibm.com/support/pages/node/7281374"
},
{
"published_at": "2026-07-24",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281136",
"url": "https://www.ibm.com/support/pages/node/7281136"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281641",
"url": "https://www.ibm.com/support/pages/node/7281641"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281631",
"url": "https://www.ibm.com/support/pages/node/7281631"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281371",
"url": "https://www.ibm.com/support/pages/node/7281371"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281633",
"url": "https://www.ibm.com/support/pages/node/7281633"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281438",
"url": "https://www.ibm.com/support/pages/node/7281438"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281370",
"url": "https://www.ibm.com/support/pages/node/7281370"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281565",
"url": "https://www.ibm.com/support/pages/node/7281565"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281368",
"url": "https://www.ibm.com/support/pages/node/7281368"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281350",
"url": "https://www.ibm.com/support/pages/node/7281350"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281651",
"url": "https://www.ibm.com/support/pages/node/7281651"
},
{
"published_at": "2026-07-30",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281950",
"url": "https://www.ibm.com/support/pages/node/7281950"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281567",
"url": "https://www.ibm.com/support/pages/node/7281567"
},
{
"published_at": "2026-07-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7280950",
"url": "https://www.ibm.com/support/pages/node/7280950"
},
{
"published_at": "2026-07-27",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281441",
"url": "https://www.ibm.com/support/pages/node/7281441"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7281649",
"url": "https://www.ibm.com/support/pages/node/7281649"
}
]
}
CERTFR-2026-AVI-0962
Vulnerability from certfr_avis - Published: 2026-08-04 - Updated: 2026-08-04
De multiples vulnérabilités ont été découvertes dans les produits Tenable. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à l'intégrité des données et une injection SQL (SQLi).
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Tenable | Enclave Security | Enclave Security sans le correctif de sécurité SC202607.2 | ||
| Tenable | Sensor Proxy | Sensor Proxy versions antérieures à 1.4.2 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Enclave Security sans le correctif de s\u00e9curit\u00e9 SC202607.2",
"product": {
"name": "Enclave Security",
"vendor": {
"name": "Tenable",
"scada": false
}
}
},
{
"description": "Sensor Proxy versions ant\u00e9rieures \u00e0 1.4.2",
"product": {
"name": "Sensor Proxy",
"vendor": {
"name": "Tenable",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-66199",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66199"
},
{
"name": "CVE-2026-23479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23479"
},
{
"name": "CVE-2026-6474",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6474"
},
{
"name": "CVE-2026-6472",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6472"
},
{
"name": "CVE-2025-15469",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15469"
},
{
"name": "CVE-2026-6479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6479"
},
{
"name": "CVE-2026-7261",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7261"
},
{
"name": "CVE-2026-6104",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6104"
},
{
"name": "CVE-2025-69419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69419"
},
{
"name": "CVE-2026-6735",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6735"
},
{
"name": "CVE-2025-15467",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
},
{
"name": "CVE-2026-18667",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18667"
},
{
"name": "CVE-2026-2006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2006"
},
{
"name": "CVE-2026-6637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6637"
},
{
"name": "CVE-2026-6473",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6473"
},
{
"name": "CVE-2026-2005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2005"
},
{
"name": "CVE-2026-22795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
},
{
"name": "CVE-2026-33857",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33857"
},
{
"name": "CVE-2025-69421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69421"
},
{
"name": "CVE-2026-25589",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25589"
},
{
"name": "CVE-2025-14179",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14179"
},
{
"name": "CVE-2026-6638",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6638"
},
{
"name": "CVE-2026-25588",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25588"
},
{
"name": "CVE-2026-22796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
},
{
"name": "CVE-2026-7568",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7568"
},
{
"name": "CVE-2026-6722",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6722"
},
{
"name": "CVE-2026-23918",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23918"
},
{
"name": "CVE-2026-24072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24072"
},
{
"name": "CVE-2026-6478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6478"
},
{
"name": "CVE-2026-7258",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7258"
},
{
"name": "CVE-2026-23631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23631"
},
{
"name": "CVE-2026-64880",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64880"
},
{
"name": "CVE-2026-64877",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64877"
},
{
"name": "CVE-2026-6475",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6475"
},
{
"name": "CVE-2026-25243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
},
{
"name": "CVE-2026-64881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64881"
},
{
"name": "CVE-2025-68160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
},
{
"name": "CVE-2026-6477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6477"
},
{
"name": "CVE-2025-69418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
},
{
"name": "CVE-2025-15468",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15468"
},
{
"name": "CVE-2026-34032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34032"
},
{
"name": "CVE-2026-34059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34059"
},
{
"name": "CVE-2026-42371",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42371"
},
{
"name": "CVE-2025-11187",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11187"
},
{
"name": "CVE-2026-2003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2003"
},
{
"name": "CVE-2026-7259",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7259"
},
{
"name": "CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"name": "CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"name": "CVE-2026-64878",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64878"
},
{
"name": "CVE-2026-7262",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7262"
},
{
"name": "CVE-2026-33523",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33523"
},
{
"name": "CVE-2026-2004",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2004"
},
{
"name": "CVE-2026-7263",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7263"
},
{
"name": "CVE-2025-69420",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69420"
},
{
"name": "CVE-2026-64879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64879"
}
],
"initial_release_date": "2026-08-04T00:00:00",
"last_revision_date": "2026-08-04T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0962",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-04T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Injection SQL (SQLi)"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Tenable. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une injection SQL (SQLi).",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Tenable",
"vendor_advisories": [
{
"published_at": "2026-08-03",
"title": "Bulletin de s\u00e9curit\u00e9 Tenable tns-2026-21",
"url": "https://www.tenable.com/security/tns-2026-21"
},
{
"published_at": "2026-07-31",
"title": "Bulletin de s\u00e9curit\u00e9 Tenable tns-2026-20",
"url": "https://www.tenable.com/security/tns-2026-20"
}
]
}
cleanstart-2026-nz43393
Vulnerability from cleanstart
Published
2026-07-30 07:10
Modified
2026-07-30 09:33
Summary
Security fixes in postgresql 17.8-r0
Details
Package postgresql version 17.8-r0 fixes 4 vulnerabilities: CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"package": {
"ecosystem": "Alpine",
"name": "postgresql"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "17.8-r0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"17.8-r0"
]
}
],
"credits": [],
"database_specific": {},
"details": "Package postgresql version 17.8-r0 fixes 4 vulnerabilities: CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006",
"id": "CLEANSTART-2026-NZ43393",
"modified": "2026-07-30T09:33:07Z",
"published": "2026-07-30T07:10:53Z",
"references": [
{
"type": "WEB",
"url": "https://www.postgresql.org/"
}
],
"related": [],
"schema_version": "1.7.3",
"summary": "Security fixes in postgresql 17.8-r0",
"upstream": [
"CVE-2026-2003",
"CVE-2026-2004",
"CVE-2026-2005",
"CVE-2026-2006"
]
}
FKIE_CVE-2026-2004
Vulnerability from fkie_nvd - Published: 2026-02-12 14:16 - Updated: 2026-07-15 02:19
Severity
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
References
| URL | Tags | ||
|---|---|---|---|
| f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 | https://www.postgresql.org/support/security/CVE-2026-2004/ | Vendor Advisory | |
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:19009 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:19010 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:3730 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:3887 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:3896 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4024 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4059 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4063 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4064 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4074 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4075 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4110 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4254 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4441 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4475 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4504 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4505 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4506 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4509 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4515 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4516 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4518 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4524 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4528 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4544 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4546 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4547 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4548 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:4943 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:8756 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/security/cve/CVE-2026-2004 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://bugzilla.redhat.com/show_bug.cgi?id=2439325 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2004.json |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| postgresql | postgresql | * | |
| postgresql | postgresql | * | |
| postgresql | postgresql | * | |
| postgresql | postgresql | * | |
| postgresql | postgresql | * |
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"product": "PostgreSQL",
"vendor": "n/a",
"versions": [
{
"lessThan": "18.2",
"status": "affected",
"version": "18",
"versionType": "rpm"
},
{
"lessThan": "17.8",
"status": "affected",
"version": "17",
"versionType": "rpm"
},
{
"lessThan": "16.12",
"status": "affected",
"version": "16",
"versionType": "rpm"
},
{
"lessThan": "15.16",
"status": "affected",
"version": "15",
"versionType": "rpm"
},
{
"lessThan": "14.21",
"status": "affected",
"version": "0",
"versionType": "rpm"
}
]
}
],
"source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
},
{
"affectedData": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "postgresql16",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:16.13-1.el10_1",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:16.13-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "postgresql18",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:18.3-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "postgresql16",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:16.13-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260227180702.489197e6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260227221316.489197e6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "postgresql:16",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260227221401.489197e6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260302082007.489197e6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.2"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8020020260309120440.4cda2c84",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8040020260305144728.522a0ee4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8040020260306101701.522a0ee4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8040020260305144728.522a0ee4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8040020260306101701.522a0ee4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260306113941.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260309111524.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260306113941.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260309111524.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260306113941.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260309111524.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260302123717.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260302123049.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "postgresql:13",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260302123717.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "postgresql:12",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260302123049.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260306092921.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:13.23-2.el9_7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9070020260227094950.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "postgresql:16",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9070020260227095951.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0"
],
"defaultStatus": "affected",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:13.23-1.el9_0.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9020020260309133405.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:13.23-1.el9_2.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:13.23-1.el9_4.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:16",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9040020260306102041.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9040020260305163703.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:13.23-1.el9_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:15",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9060020260309125703.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "postgresql:16",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9060020260305153549.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "postgresql18-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "18.3-1.2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/rhua-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1773670137",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unknown",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unknown",
"packageName": "postgresql",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "postgresql:18/postgresql",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
}
],
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4BCEAB7B-E4FC-4F9F-A1F9-62EA7DD6D6CC",
"versionEndExcluding": "14.21",
"versionStartIncluding": "14.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4B408DAF-2DCD-45FE-94EE-BC84947A41C8",
"versionEndExcluding": "15.16",
"versionStartIncluding": "15.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6353A59B-FE67-4DD5-B0E6-C10F0D2358D0",
"versionEndExcluding": "16.12",
"versionStartIncluding": "16.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E2CCF450-C726-403A-975F-B5717E92A769",
"versionEndExcluding": "17.8",
"versionStartIncluding": "17.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6B872502-5316-4E79-8FA1-24E5D8222C39",
"versionEndExcluding": "18.2",
"versionStartIncluding": "18.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected."
},
{
"lang": "es",
"value": "Falta de validaci\u00f3n del tipo de entrada en la funci\u00f3n estimadora de selectividad de la extensi\u00f3n intarray de PostgreSQL permite a un creador de objetos ejecutar c\u00f3digo arbitrario como el usuario del sistema operativo que ejecuta la base de datos. Las versiones anteriores a PostgreSQL 18.2, 17.8, 16.12, 15.16 y 14.21 est\u00e1n afectadas."
}
],
"id": "CVE-2026-2004",
"lastModified": "2026-07-15T02:19:25.987",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-2004",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-13T04:56:33.418080Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-02-12T14:16:02.213",
"references": [
{
"source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
"tags": [
"Vendor Advisory"
],
"url": "https://www.postgresql.org/support/security/CVE-2026-2004/"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:19009"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:19010"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:3730"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:3887"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:3896"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4024"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4059"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4063"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4064"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4074"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4075"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4110"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4254"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4441"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4475"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4504"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4505"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4506"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4509"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4515"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4516"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4518"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4524"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4528"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4544"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4546"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4547"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4548"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:4943"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:8756"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/security/cve/CVE-2026-2004"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439325"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2004.json"
}
],
"sourceIdentifier": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-1287"
}
],
"source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-1287"
}
],
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"type": "Secondary"
}
]
}
GHSA-QW3H-8VXV-JF6C
Vulnerability from github – Published: 2026-02-12 15:32 – Updated: 2026-06-30 03:35
VLAI
Details
Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
Severity
8.8 (High)
{
"affected": [],
"aliases": [
"CVE-2026-2004"
],
"database_specific": {
"cwe_ids": [
"CWE-1287"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-02-12T14:16:02Z",
"severity": "HIGH"
},
"details": "Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"id": "GHSA-qw3h-8vxv-jf6c",
"modified": "2026-06-30T03:35:35Z",
"published": "2026-02-12T15:32:48Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2004"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19009"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4509"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4515"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4516"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4518"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4524"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4528"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4544"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4546"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4547"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4548"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4943"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:8756"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2026-2004"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439325"
},
{
"type": "WEB",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2004.json"
},
{
"type": "WEB",
"url": "https://www.postgresql.org/support/security/CVE-2026-2004"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19010"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:3730"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:3887"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:3896"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4024"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4059"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4063"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4064"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4074"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4075"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4110"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4254"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4441"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4475"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4504"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4505"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:4506"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
OPENSUSE-SU-2026:10190-1
Vulnerability from csaf_opensuse - Published: 2026-02-12 00:00 - Updated: 2026-02-12 00:00Summary
postgresql14-14.21-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: postgresql14-14.21-1.1 on GA media
Description of the patch: These are all security issues fixed in the postgresql14-14.21-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10190
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.3 (Medium)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
14 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://www.suse.com/security/cve/CVE-2026-2003/ | self |
| https://www.suse.com/security/cve/CVE-2026-2004/ | self |
| https://www.suse.com/security/cve/CVE-2026-2005/ | self |
| https://www.suse.com/security/cve/CVE-2026-2006/ | self |
| https://www.suse.com/security/cve/CVE-2026-2003 | external |
| https://bugzilla.suse.com/1258008 | external |
| https://www.suse.com/security/cve/CVE-2026-2004 | external |
| https://bugzilla.suse.com/1258009 | external |
| https://www.suse.com/security/cve/CVE-2026-2005 | external |
| https://bugzilla.suse.com/1258010 | external |
| https://www.suse.com/security/cve/CVE-2026-2006 | external |
| https://bugzilla.suse.com/1258011 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "postgresql14-14.21-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the postgresql14-14.21-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10190",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10190-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2003/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2004 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2005 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2006 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2006/"
}
],
"title": "postgresql14-14.21-1.1 on GA media",
"tracking": {
"current_release_date": "2026-02-12T00:00:00Z",
"generator": {
"date": "2026-02-12T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10190-1",
"initial_release_date": "2026-02-12T00:00:00Z",
"revision_history": [
{
"date": "2026-02-12T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "postgresql14-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-14.21-1.1.aarch64",
"product_id": "postgresql14-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-contrib-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-contrib-14.21-1.1.aarch64",
"product_id": "postgresql14-contrib-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-devel-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-devel-14.21-1.1.aarch64",
"product_id": "postgresql14-devel-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-docs-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-docs-14.21-1.1.aarch64",
"product_id": "postgresql14-docs-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-llvmjit-14.21-1.1.aarch64",
"product_id": "postgresql14-llvmjit-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"product_id": "postgresql14-llvmjit-devel-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-plperl-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-plperl-14.21-1.1.aarch64",
"product_id": "postgresql14-plperl-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-plpython-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-plpython-14.21-1.1.aarch64",
"product_id": "postgresql14-plpython-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-pltcl-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-pltcl-14.21-1.1.aarch64",
"product_id": "postgresql14-pltcl-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-server-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-server-14.21-1.1.aarch64",
"product_id": "postgresql14-server-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-server-devel-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-server-devel-14.21-1.1.aarch64",
"product_id": "postgresql14-server-devel-14.21-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql14-test-14.21-1.1.aarch64",
"product": {
"name": "postgresql14-test-14.21-1.1.aarch64",
"product_id": "postgresql14-test-14.21-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql14-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-14.21-1.1.ppc64le",
"product_id": "postgresql14-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-contrib-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-contrib-14.21-1.1.ppc64le",
"product_id": "postgresql14-contrib-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-devel-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-devel-14.21-1.1.ppc64le",
"product_id": "postgresql14-devel-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-docs-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-docs-14.21-1.1.ppc64le",
"product_id": "postgresql14-docs-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-llvmjit-14.21-1.1.ppc64le",
"product_id": "postgresql14-llvmjit-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"product_id": "postgresql14-llvmjit-devel-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-plperl-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-plperl-14.21-1.1.ppc64le",
"product_id": "postgresql14-plperl-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-plpython-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-plpython-14.21-1.1.ppc64le",
"product_id": "postgresql14-plpython-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-pltcl-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-pltcl-14.21-1.1.ppc64le",
"product_id": "postgresql14-pltcl-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-server-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-server-14.21-1.1.ppc64le",
"product_id": "postgresql14-server-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-server-devel-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-server-devel-14.21-1.1.ppc64le",
"product_id": "postgresql14-server-devel-14.21-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql14-test-14.21-1.1.ppc64le",
"product": {
"name": "postgresql14-test-14.21-1.1.ppc64le",
"product_id": "postgresql14-test-14.21-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql14-14.21-1.1.s390x",
"product": {
"name": "postgresql14-14.21-1.1.s390x",
"product_id": "postgresql14-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-contrib-14.21-1.1.s390x",
"product": {
"name": "postgresql14-contrib-14.21-1.1.s390x",
"product_id": "postgresql14-contrib-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-devel-14.21-1.1.s390x",
"product": {
"name": "postgresql14-devel-14.21-1.1.s390x",
"product_id": "postgresql14-devel-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-docs-14.21-1.1.s390x",
"product": {
"name": "postgresql14-docs-14.21-1.1.s390x",
"product_id": "postgresql14-docs-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-14.21-1.1.s390x",
"product": {
"name": "postgresql14-llvmjit-14.21-1.1.s390x",
"product_id": "postgresql14-llvmjit-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-devel-14.21-1.1.s390x",
"product": {
"name": "postgresql14-llvmjit-devel-14.21-1.1.s390x",
"product_id": "postgresql14-llvmjit-devel-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-plperl-14.21-1.1.s390x",
"product": {
"name": "postgresql14-plperl-14.21-1.1.s390x",
"product_id": "postgresql14-plperl-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-plpython-14.21-1.1.s390x",
"product": {
"name": "postgresql14-plpython-14.21-1.1.s390x",
"product_id": "postgresql14-plpython-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-pltcl-14.21-1.1.s390x",
"product": {
"name": "postgresql14-pltcl-14.21-1.1.s390x",
"product_id": "postgresql14-pltcl-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-server-14.21-1.1.s390x",
"product": {
"name": "postgresql14-server-14.21-1.1.s390x",
"product_id": "postgresql14-server-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-server-devel-14.21-1.1.s390x",
"product": {
"name": "postgresql14-server-devel-14.21-1.1.s390x",
"product_id": "postgresql14-server-devel-14.21-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql14-test-14.21-1.1.s390x",
"product": {
"name": "postgresql14-test-14.21-1.1.s390x",
"product_id": "postgresql14-test-14.21-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql14-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-14.21-1.1.x86_64",
"product_id": "postgresql14-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-contrib-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-contrib-14.21-1.1.x86_64",
"product_id": "postgresql14-contrib-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-devel-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-devel-14.21-1.1.x86_64",
"product_id": "postgresql14-devel-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-docs-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-docs-14.21-1.1.x86_64",
"product_id": "postgresql14-docs-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-llvmjit-14.21-1.1.x86_64",
"product_id": "postgresql14-llvmjit-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"product_id": "postgresql14-llvmjit-devel-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-plperl-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-plperl-14.21-1.1.x86_64",
"product_id": "postgresql14-plperl-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-plpython-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-plpython-14.21-1.1.x86_64",
"product_id": "postgresql14-plpython-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-pltcl-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-pltcl-14.21-1.1.x86_64",
"product_id": "postgresql14-pltcl-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-server-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-server-14.21-1.1.x86_64",
"product_id": "postgresql14-server-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-server-devel-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-server-devel-14.21-1.1.x86_64",
"product_id": "postgresql14-server-devel-14.21-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql14-test-14.21-1.1.x86_64",
"product": {
"name": "postgresql14-test-14.21-1.1.x86_64",
"product_id": "postgresql14-test-14.21-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x"
},
"product_reference": "postgresql14-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-contrib-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-contrib-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-contrib-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-contrib-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-contrib-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x"
},
"product_reference": "postgresql14-contrib-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-contrib-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-contrib-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-devel-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-devel-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-devel-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-devel-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-devel-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x"
},
"product_reference": "postgresql14-devel-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-devel-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-devel-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-docs-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-docs-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-docs-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-docs-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-docs-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x"
},
"product_reference": "postgresql14-docs-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-docs-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-docs-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-llvmjit-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-llvmjit-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x"
},
"product_reference": "postgresql14-llvmjit-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-llvmjit-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-devel-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-devel-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-devel-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x"
},
"product_reference": "postgresql14-llvmjit-devel-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-llvmjit-devel-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plperl-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-plperl-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plperl-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-plperl-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plperl-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x"
},
"product_reference": "postgresql14-plperl-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plperl-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-plperl-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plpython-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-plpython-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plpython-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-plpython-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plpython-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x"
},
"product_reference": "postgresql14-plpython-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-plpython-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-plpython-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-pltcl-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-pltcl-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-pltcl-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-pltcl-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-pltcl-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x"
},
"product_reference": "postgresql14-pltcl-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-pltcl-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-pltcl-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-server-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-server-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x"
},
"product_reference": "postgresql14-server-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-server-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-devel-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-server-devel-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-devel-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-server-devel-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-devel-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x"
},
"product_reference": "postgresql14-server-devel-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-server-devel-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-server-devel-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-test-14.21-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64"
},
"product_reference": "postgresql14-test-14.21-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-test-14.21-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le"
},
"product_reference": "postgresql14-test-14.21-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-test-14.21-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x"
},
"product_reference": "postgresql14-test-14.21-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql14-test-14.21-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
},
"product_reference": "postgresql14-test-14.21-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-2003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2003"
}
],
"notes": [
{
"category": "general",
"text": "Improper validation of type \"oidvector\" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2003",
"url": "https://www.suse.com/security/cve/CVE-2026-2003"
},
{
"category": "external",
"summary": "SUSE Bug 1258008 for CVE-2026-2003",
"url": "https://bugzilla.suse.com/1258008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-2003"
},
{
"cve": "CVE-2026-2004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2004"
}
],
"notes": [
{
"category": "general",
"text": "Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2004",
"url": "https://www.suse.com/security/cve/CVE-2026-2004"
},
{
"category": "external",
"summary": "SUSE Bug 1258009 for CVE-2026-2004",
"url": "https://bugzilla.suse.com/1258009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-2004"
},
{
"cve": "CVE-2026-2005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2005"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2005",
"url": "https://www.suse.com/security/cve/CVE-2026-2005"
},
{
"category": "external",
"summary": "SUSE Bug 1258010 for CVE-2026-2005",
"url": "https://bugzilla.suse.com/1258010"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-2005"
},
{
"cve": "CVE-2026-2006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2006"
}
],
"notes": [
{
"category": "general",
"text": "Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2006",
"url": "https://www.suse.com/security/cve/CVE-2026-2006"
},
{
"category": "external",
"summary": "SUSE Bug 1258011 for CVE-2026-2006",
"url": "https://bugzilla.suse.com/1258011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql14-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-contrib-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-docs-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-llvmjit-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plperl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-plpython-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-pltcl-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-server-devel-14.21-1.1.x86_64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.aarch64",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.s390x",
"openSUSE Tumbleweed:postgresql14-test-14.21-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-2006"
}
]
}
OPENSUSE-SU-2026:10191-1
Vulnerability from csaf_opensuse - Published: 2026-02-12 00:00 - Updated: 2026-02-12 00:00Summary
postgresql15-15.16-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: postgresql15-15.16-1.1 on GA media
Description of the patch: These are all security issues fixed in the postgresql15-15.16-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10191
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.3 (Medium)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
14 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://www.suse.com/security/cve/CVE-2026-2003/ | self |
| https://www.suse.com/security/cve/CVE-2026-2004/ | self |
| https://www.suse.com/security/cve/CVE-2026-2005/ | self |
| https://www.suse.com/security/cve/CVE-2026-2006/ | self |
| https://www.suse.com/security/cve/CVE-2026-2003 | external |
| https://bugzilla.suse.com/1258008 | external |
| https://www.suse.com/security/cve/CVE-2026-2004 | external |
| https://bugzilla.suse.com/1258009 | external |
| https://www.suse.com/security/cve/CVE-2026-2005 | external |
| https://bugzilla.suse.com/1258010 | external |
| https://www.suse.com/security/cve/CVE-2026-2006 | external |
| https://bugzilla.suse.com/1258011 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "postgresql15-15.16-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the postgresql15-15.16-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10191",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10191-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2003/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2004 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2005 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2006 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2006/"
}
],
"title": "postgresql15-15.16-1.1 on GA media",
"tracking": {
"current_release_date": "2026-02-12T00:00:00Z",
"generator": {
"date": "2026-02-12T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10191-1",
"initial_release_date": "2026-02-12T00:00:00Z",
"revision_history": [
{
"date": "2026-02-12T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "postgresql15-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-15.16-1.1.aarch64",
"product_id": "postgresql15-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-contrib-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-contrib-15.16-1.1.aarch64",
"product_id": "postgresql15-contrib-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-devel-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-devel-15.16-1.1.aarch64",
"product_id": "postgresql15-devel-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-docs-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-docs-15.16-1.1.aarch64",
"product_id": "postgresql15-docs-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-llvmjit-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-llvmjit-15.16-1.1.aarch64",
"product_id": "postgresql15-llvmjit-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"product_id": "postgresql15-llvmjit-devel-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-plperl-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-plperl-15.16-1.1.aarch64",
"product_id": "postgresql15-plperl-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-plpython-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-plpython-15.16-1.1.aarch64",
"product_id": "postgresql15-plpython-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-pltcl-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-pltcl-15.16-1.1.aarch64",
"product_id": "postgresql15-pltcl-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-server-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-server-15.16-1.1.aarch64",
"product_id": "postgresql15-server-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-server-devel-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-server-devel-15.16-1.1.aarch64",
"product_id": "postgresql15-server-devel-15.16-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql15-test-15.16-1.1.aarch64",
"product": {
"name": "postgresql15-test-15.16-1.1.aarch64",
"product_id": "postgresql15-test-15.16-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql15-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-15.16-1.1.ppc64le",
"product_id": "postgresql15-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-contrib-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-contrib-15.16-1.1.ppc64le",
"product_id": "postgresql15-contrib-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-devel-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-devel-15.16-1.1.ppc64le",
"product_id": "postgresql15-devel-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-docs-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-docs-15.16-1.1.ppc64le",
"product_id": "postgresql15-docs-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-llvmjit-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-llvmjit-15.16-1.1.ppc64le",
"product_id": "postgresql15-llvmjit-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"product_id": "postgresql15-llvmjit-devel-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-plperl-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-plperl-15.16-1.1.ppc64le",
"product_id": "postgresql15-plperl-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-plpython-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-plpython-15.16-1.1.ppc64le",
"product_id": "postgresql15-plpython-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-pltcl-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-pltcl-15.16-1.1.ppc64le",
"product_id": "postgresql15-pltcl-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-server-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-server-15.16-1.1.ppc64le",
"product_id": "postgresql15-server-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-server-devel-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-server-devel-15.16-1.1.ppc64le",
"product_id": "postgresql15-server-devel-15.16-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql15-test-15.16-1.1.ppc64le",
"product": {
"name": "postgresql15-test-15.16-1.1.ppc64le",
"product_id": "postgresql15-test-15.16-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql15-15.16-1.1.s390x",
"product": {
"name": "postgresql15-15.16-1.1.s390x",
"product_id": "postgresql15-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-contrib-15.16-1.1.s390x",
"product": {
"name": "postgresql15-contrib-15.16-1.1.s390x",
"product_id": "postgresql15-contrib-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-devel-15.16-1.1.s390x",
"product": {
"name": "postgresql15-devel-15.16-1.1.s390x",
"product_id": "postgresql15-devel-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-docs-15.16-1.1.s390x",
"product": {
"name": "postgresql15-docs-15.16-1.1.s390x",
"product_id": "postgresql15-docs-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-llvmjit-15.16-1.1.s390x",
"product": {
"name": "postgresql15-llvmjit-15.16-1.1.s390x",
"product_id": "postgresql15-llvmjit-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-llvmjit-devel-15.16-1.1.s390x",
"product": {
"name": "postgresql15-llvmjit-devel-15.16-1.1.s390x",
"product_id": "postgresql15-llvmjit-devel-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-plperl-15.16-1.1.s390x",
"product": {
"name": "postgresql15-plperl-15.16-1.1.s390x",
"product_id": "postgresql15-plperl-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-plpython-15.16-1.1.s390x",
"product": {
"name": "postgresql15-plpython-15.16-1.1.s390x",
"product_id": "postgresql15-plpython-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-pltcl-15.16-1.1.s390x",
"product": {
"name": "postgresql15-pltcl-15.16-1.1.s390x",
"product_id": "postgresql15-pltcl-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-server-15.16-1.1.s390x",
"product": {
"name": "postgresql15-server-15.16-1.1.s390x",
"product_id": "postgresql15-server-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-server-devel-15.16-1.1.s390x",
"product": {
"name": "postgresql15-server-devel-15.16-1.1.s390x",
"product_id": "postgresql15-server-devel-15.16-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql15-test-15.16-1.1.s390x",
"product": {
"name": "postgresql15-test-15.16-1.1.s390x",
"product_id": "postgresql15-test-15.16-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql15-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-15.16-1.1.x86_64",
"product_id": "postgresql15-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-contrib-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-contrib-15.16-1.1.x86_64",
"product_id": "postgresql15-contrib-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-devel-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-devel-15.16-1.1.x86_64",
"product_id": "postgresql15-devel-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-docs-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-docs-15.16-1.1.x86_64",
"product_id": "postgresql15-docs-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-llvmjit-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-llvmjit-15.16-1.1.x86_64",
"product_id": "postgresql15-llvmjit-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"product_id": "postgresql15-llvmjit-devel-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-plperl-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-plperl-15.16-1.1.x86_64",
"product_id": "postgresql15-plperl-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-plpython-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-plpython-15.16-1.1.x86_64",
"product_id": "postgresql15-plpython-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-pltcl-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-pltcl-15.16-1.1.x86_64",
"product_id": "postgresql15-pltcl-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-server-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-server-15.16-1.1.x86_64",
"product_id": "postgresql15-server-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-server-devel-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-server-devel-15.16-1.1.x86_64",
"product_id": "postgresql15-server-devel-15.16-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql15-test-15.16-1.1.x86_64",
"product": {
"name": "postgresql15-test-15.16-1.1.x86_64",
"product_id": "postgresql15-test-15.16-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x"
},
"product_reference": "postgresql15-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-contrib-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-contrib-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-contrib-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-contrib-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-contrib-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x"
},
"product_reference": "postgresql15-contrib-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-contrib-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-contrib-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-devel-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-devel-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-devel-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-devel-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-devel-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x"
},
"product_reference": "postgresql15-devel-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-devel-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-devel-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-docs-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-docs-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-docs-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-docs-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-docs-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x"
},
"product_reference": "postgresql15-docs-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-docs-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-docs-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-llvmjit-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-llvmjit-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-llvmjit-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-llvmjit-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-llvmjit-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x"
},
"product_reference": "postgresql15-llvmjit-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-llvmjit-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-llvmjit-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-llvmjit-devel-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-llvmjit-devel-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-llvmjit-devel-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x"
},
"product_reference": "postgresql15-llvmjit-devel-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-llvmjit-devel-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-plperl-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-plperl-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-plperl-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-plperl-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-plperl-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x"
},
"product_reference": "postgresql15-plperl-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-plperl-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-plperl-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-plpython-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-plpython-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-plpython-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-plpython-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-plpython-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x"
},
"product_reference": "postgresql15-plpython-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-plpython-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-plpython-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-pltcl-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-pltcl-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-pltcl-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-pltcl-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-pltcl-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x"
},
"product_reference": "postgresql15-pltcl-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-pltcl-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-pltcl-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-server-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-server-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-server-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-server-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-server-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x"
},
"product_reference": "postgresql15-server-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-server-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-server-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-server-devel-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-server-devel-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-server-devel-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-server-devel-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-server-devel-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x"
},
"product_reference": "postgresql15-server-devel-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-server-devel-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-server-devel-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-test-15.16-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64"
},
"product_reference": "postgresql15-test-15.16-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-test-15.16-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le"
},
"product_reference": "postgresql15-test-15.16-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-test-15.16-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x"
},
"product_reference": "postgresql15-test-15.16-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql15-test-15.16-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
},
"product_reference": "postgresql15-test-15.16-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-2003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2003"
}
],
"notes": [
{
"category": "general",
"text": "Improper validation of type \"oidvector\" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2003",
"url": "https://www.suse.com/security/cve/CVE-2026-2003"
},
{
"category": "external",
"summary": "SUSE Bug 1258008 for CVE-2026-2003",
"url": "https://bugzilla.suse.com/1258008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-2003"
},
{
"cve": "CVE-2026-2004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2004"
}
],
"notes": [
{
"category": "general",
"text": "Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2004",
"url": "https://www.suse.com/security/cve/CVE-2026-2004"
},
{
"category": "external",
"summary": "SUSE Bug 1258009 for CVE-2026-2004",
"url": "https://bugzilla.suse.com/1258009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-2004"
},
{
"cve": "CVE-2026-2005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2005"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2005",
"url": "https://www.suse.com/security/cve/CVE-2026-2005"
},
{
"category": "external",
"summary": "SUSE Bug 1258010 for CVE-2026-2005",
"url": "https://bugzilla.suse.com/1258010"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-2005"
},
{
"cve": "CVE-2026-2006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2006"
}
],
"notes": [
{
"category": "general",
"text": "Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2006",
"url": "https://www.suse.com/security/cve/CVE-2026-2006"
},
{
"category": "external",
"summary": "SUSE Bug 1258011 for CVE-2026-2006",
"url": "https://bugzilla.suse.com/1258011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql15-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-contrib-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-docs-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-llvmjit-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plperl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-plpython-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-pltcl-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-server-devel-15.16-1.1.x86_64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.aarch64",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.s390x",
"openSUSE Tumbleweed:postgresql15-test-15.16-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-2006"
}
]
}
OPENSUSE-SU-2026:10192-1
Vulnerability from csaf_opensuse - Published: 2026-02-12 00:00 - Updated: 2026-02-12 00:00Summary
postgresql16-16.12-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: postgresql16-16.12-1.1 on GA media
Description of the patch: These are all security issues fixed in the postgresql16-16.12-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10192
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.3 (Medium)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
14 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://www.suse.com/security/cve/CVE-2026-2003/ | self |
| https://www.suse.com/security/cve/CVE-2026-2004/ | self |
| https://www.suse.com/security/cve/CVE-2026-2005/ | self |
| https://www.suse.com/security/cve/CVE-2026-2006/ | self |
| https://www.suse.com/security/cve/CVE-2026-2003 | external |
| https://bugzilla.suse.com/1258008 | external |
| https://www.suse.com/security/cve/CVE-2026-2004 | external |
| https://bugzilla.suse.com/1258009 | external |
| https://www.suse.com/security/cve/CVE-2026-2005 | external |
| https://bugzilla.suse.com/1258010 | external |
| https://www.suse.com/security/cve/CVE-2026-2006 | external |
| https://bugzilla.suse.com/1258011 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "postgresql16-16.12-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the postgresql16-16.12-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10192",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10192-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2003/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2004 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2005 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-2006 page",
"url": "https://www.suse.com/security/cve/CVE-2026-2006/"
}
],
"title": "postgresql16-16.12-1.1 on GA media",
"tracking": {
"current_release_date": "2026-02-12T00:00:00Z",
"generator": {
"date": "2026-02-12T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10192-1",
"initial_release_date": "2026-02-12T00:00:00Z",
"revision_history": [
{
"date": "2026-02-12T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "postgresql16-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-16.12-1.1.aarch64",
"product_id": "postgresql16-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-contrib-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-contrib-16.12-1.1.aarch64",
"product_id": "postgresql16-contrib-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-devel-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-devel-16.12-1.1.aarch64",
"product_id": "postgresql16-devel-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-docs-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-docs-16.12-1.1.aarch64",
"product_id": "postgresql16-docs-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-llvmjit-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-llvmjit-16.12-1.1.aarch64",
"product_id": "postgresql16-llvmjit-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"product_id": "postgresql16-llvmjit-devel-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-plperl-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-plperl-16.12-1.1.aarch64",
"product_id": "postgresql16-plperl-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-plpython-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-plpython-16.12-1.1.aarch64",
"product_id": "postgresql16-plpython-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-pltcl-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-pltcl-16.12-1.1.aarch64",
"product_id": "postgresql16-pltcl-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-server-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-server-16.12-1.1.aarch64",
"product_id": "postgresql16-server-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-server-devel-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-server-devel-16.12-1.1.aarch64",
"product_id": "postgresql16-server-devel-16.12-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "postgresql16-test-16.12-1.1.aarch64",
"product": {
"name": "postgresql16-test-16.12-1.1.aarch64",
"product_id": "postgresql16-test-16.12-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql16-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-16.12-1.1.ppc64le",
"product_id": "postgresql16-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-contrib-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-contrib-16.12-1.1.ppc64le",
"product_id": "postgresql16-contrib-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-devel-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-devel-16.12-1.1.ppc64le",
"product_id": "postgresql16-devel-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-docs-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-docs-16.12-1.1.ppc64le",
"product_id": "postgresql16-docs-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-llvmjit-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-llvmjit-16.12-1.1.ppc64le",
"product_id": "postgresql16-llvmjit-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"product_id": "postgresql16-llvmjit-devel-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-plperl-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-plperl-16.12-1.1.ppc64le",
"product_id": "postgresql16-plperl-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-plpython-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-plpython-16.12-1.1.ppc64le",
"product_id": "postgresql16-plpython-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-pltcl-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-pltcl-16.12-1.1.ppc64le",
"product_id": "postgresql16-pltcl-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-server-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-server-16.12-1.1.ppc64le",
"product_id": "postgresql16-server-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-server-devel-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-server-devel-16.12-1.1.ppc64le",
"product_id": "postgresql16-server-devel-16.12-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "postgresql16-test-16.12-1.1.ppc64le",
"product": {
"name": "postgresql16-test-16.12-1.1.ppc64le",
"product_id": "postgresql16-test-16.12-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql16-16.12-1.1.s390x",
"product": {
"name": "postgresql16-16.12-1.1.s390x",
"product_id": "postgresql16-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-contrib-16.12-1.1.s390x",
"product": {
"name": "postgresql16-contrib-16.12-1.1.s390x",
"product_id": "postgresql16-contrib-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-devel-16.12-1.1.s390x",
"product": {
"name": "postgresql16-devel-16.12-1.1.s390x",
"product_id": "postgresql16-devel-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-docs-16.12-1.1.s390x",
"product": {
"name": "postgresql16-docs-16.12-1.1.s390x",
"product_id": "postgresql16-docs-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-llvmjit-16.12-1.1.s390x",
"product": {
"name": "postgresql16-llvmjit-16.12-1.1.s390x",
"product_id": "postgresql16-llvmjit-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-llvmjit-devel-16.12-1.1.s390x",
"product": {
"name": "postgresql16-llvmjit-devel-16.12-1.1.s390x",
"product_id": "postgresql16-llvmjit-devel-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-plperl-16.12-1.1.s390x",
"product": {
"name": "postgresql16-plperl-16.12-1.1.s390x",
"product_id": "postgresql16-plperl-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-plpython-16.12-1.1.s390x",
"product": {
"name": "postgresql16-plpython-16.12-1.1.s390x",
"product_id": "postgresql16-plpython-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-pltcl-16.12-1.1.s390x",
"product": {
"name": "postgresql16-pltcl-16.12-1.1.s390x",
"product_id": "postgresql16-pltcl-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-server-16.12-1.1.s390x",
"product": {
"name": "postgresql16-server-16.12-1.1.s390x",
"product_id": "postgresql16-server-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-server-devel-16.12-1.1.s390x",
"product": {
"name": "postgresql16-server-devel-16.12-1.1.s390x",
"product_id": "postgresql16-server-devel-16.12-1.1.s390x"
}
},
{
"category": "product_version",
"name": "postgresql16-test-16.12-1.1.s390x",
"product": {
"name": "postgresql16-test-16.12-1.1.s390x",
"product_id": "postgresql16-test-16.12-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "postgresql16-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-16.12-1.1.x86_64",
"product_id": "postgresql16-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-contrib-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-contrib-16.12-1.1.x86_64",
"product_id": "postgresql16-contrib-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-devel-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-devel-16.12-1.1.x86_64",
"product_id": "postgresql16-devel-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-docs-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-docs-16.12-1.1.x86_64",
"product_id": "postgresql16-docs-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-llvmjit-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-llvmjit-16.12-1.1.x86_64",
"product_id": "postgresql16-llvmjit-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"product_id": "postgresql16-llvmjit-devel-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-plperl-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-plperl-16.12-1.1.x86_64",
"product_id": "postgresql16-plperl-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-plpython-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-plpython-16.12-1.1.x86_64",
"product_id": "postgresql16-plpython-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-pltcl-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-pltcl-16.12-1.1.x86_64",
"product_id": "postgresql16-pltcl-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-server-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-server-16.12-1.1.x86_64",
"product_id": "postgresql16-server-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-server-devel-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-server-devel-16.12-1.1.x86_64",
"product_id": "postgresql16-server-devel-16.12-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "postgresql16-test-16.12-1.1.x86_64",
"product": {
"name": "postgresql16-test-16.12-1.1.x86_64",
"product_id": "postgresql16-test-16.12-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x"
},
"product_reference": "postgresql16-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-contrib-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-contrib-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-contrib-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-contrib-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-contrib-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x"
},
"product_reference": "postgresql16-contrib-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-contrib-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-contrib-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-devel-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-devel-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-devel-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-devel-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-devel-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x"
},
"product_reference": "postgresql16-devel-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-devel-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-devel-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-docs-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-docs-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-docs-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-docs-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-docs-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x"
},
"product_reference": "postgresql16-docs-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-docs-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-docs-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-llvmjit-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-llvmjit-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-llvmjit-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-llvmjit-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-llvmjit-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x"
},
"product_reference": "postgresql16-llvmjit-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-llvmjit-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-llvmjit-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-llvmjit-devel-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-llvmjit-devel-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-llvmjit-devel-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x"
},
"product_reference": "postgresql16-llvmjit-devel-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-llvmjit-devel-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-plperl-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-plperl-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-plperl-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-plperl-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-plperl-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x"
},
"product_reference": "postgresql16-plperl-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-plperl-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-plperl-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-plpython-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-plpython-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-plpython-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-plpython-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-plpython-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x"
},
"product_reference": "postgresql16-plpython-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-plpython-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-plpython-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-pltcl-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-pltcl-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-pltcl-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-pltcl-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-pltcl-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x"
},
"product_reference": "postgresql16-pltcl-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-pltcl-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-pltcl-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-server-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-server-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-server-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-server-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-server-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x"
},
"product_reference": "postgresql16-server-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-server-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-server-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-server-devel-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-server-devel-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-server-devel-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-server-devel-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-server-devel-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x"
},
"product_reference": "postgresql16-server-devel-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-server-devel-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-server-devel-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-test-16.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64"
},
"product_reference": "postgresql16-test-16.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-test-16.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le"
},
"product_reference": "postgresql16-test-16.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-test-16.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x"
},
"product_reference": "postgresql16-test-16.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "postgresql16-test-16.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
},
"product_reference": "postgresql16-test-16.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-2003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2003"
}
],
"notes": [
{
"category": "general",
"text": "Improper validation of type \"oidvector\" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2003",
"url": "https://www.suse.com/security/cve/CVE-2026-2003"
},
{
"category": "external",
"summary": "SUSE Bug 1258008 for CVE-2026-2003",
"url": "https://bugzilla.suse.com/1258008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-2003"
},
{
"cve": "CVE-2026-2004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2004"
}
],
"notes": [
{
"category": "general",
"text": "Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2004",
"url": "https://www.suse.com/security/cve/CVE-2026-2004"
},
{
"category": "external",
"summary": "SUSE Bug 1258009 for CVE-2026-2004",
"url": "https://bugzilla.suse.com/1258009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-2004"
},
{
"cve": "CVE-2026-2005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2005"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2005",
"url": "https://www.suse.com/security/cve/CVE-2026-2005"
},
{
"category": "external",
"summary": "SUSE Bug 1258010 for CVE-2026-2005",
"url": "https://bugzilla.suse.com/1258010"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-2005"
},
{
"cve": "CVE-2026-2006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-2006"
}
],
"notes": [
{
"category": "general",
"text": "Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-2006",
"url": "https://www.suse.com/security/cve/CVE-2026-2006"
},
{
"category": "external",
"summary": "SUSE Bug 1258011 for CVE-2026-2006",
"url": "https://bugzilla.suse.com/1258011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:postgresql16-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-contrib-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-docs-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-llvmjit-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plperl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-plpython-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-pltcl-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-server-devel-16.12-1.1.x86_64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.aarch64",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.ppc64le",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.s390x",
"openSUSE Tumbleweed:postgresql16-test-16.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-2006"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…