Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2025-3030


Security update for postgresql15


Type: security
Severity: important
Issued: 2025-08-29
Description:
This update for postgresql15 fixes the following issues:

Upgrade to 15.14:

- CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120).
- CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superuser of origin server execute arbitrary code in psql
  client (bsc#1248122).
- CVE-2025-8715: improper neutralization of newlines in `pg_dump` allows execution of arbitrary code in psql client and
  in restore target server (bsc#1248119).


              

Packages


  • postgresql15-15.14-150200.5.44.1