Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2025-3031


Security update for postgresql14


Type: security
Severity: important
Issued: 2025-08-29
Description:
This update for postgresql14 fixes the following issues:

Upgrade to 14.19:

- CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120).
- CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superuser of origin server execute arbitrary code in psql
  client (bsc#1248122).
- CVE-2025-8715: improper neutralization of newlines in `pg_dump` allows execution of arbitrary code in psql client and
  in restore target server (bsc#1248119).


              

Packages


  • postgresql14-14.19-150200.5.61.1