Security update for postgresql14
Announcement ID: | SUSE-SU-2025:03031-1 |
---|---|
Release Date: | 2025-08-29T15:14:26Z |
Rating: | important |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves three vulnerabilities can now be installed.
Description:
This update for postgresql14 fixes the following issues:
Upgrade to 14.19:
- CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120).
- CVE-2025-8714: untrusted data inclusion in
pg_dump
lets superuser of origin server execute arbitrary code in psql client (bsc#1248122). - CVE-2025-8715: improper neutralization of newlines in
pg_dump
allows execution of arbitrary code in psql client and in restore target server (bsc#1248119).
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
SUSE Manager Server 4.3 LTS
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2025-3031=1
-
SUSE Enterprise Storage 7.1
zypper in -t patch SUSE-Storage-7.1-2025-3031=1
-
SUSE Package Hub 15 15-SP3
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2025-3031=1
-
SUSE Package Hub 15 15-SP4
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2025-3031=1
-
SUSE Package Hub 15 15-SP5
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2025-3031=1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-3031=1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-3031=1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-3031=1
-
SUSE Linux Enterprise Server 15 SP3 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-3031=1
-
SUSE Linux Enterprise Server 15 SP4 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-3031=1
-
SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-3031=1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP3
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-3031=1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-3031=1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-3031=1
-
SUSE Manager Proxy 4.3 LTS
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2025-3031=1
-
SUSE Manager Retail Branch Server 4.3 LTS
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-LTS-2025-3031=1
Package List:
-
SUSE Manager Server 4.3 LTS (ppc64le s390x x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Manager Server 4.3 LTS (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Enterprise Storage 7.1 (aarch64 x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Enterprise Storage 7.1 (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Package Hub 15 15-SP3 (aarch64 ppc64le s390x x86_64)
- postgresql14-llvmjit-debuginfo-14.19-150200.5.61.1
- postgresql14-llvmjit-14.19-150200.5.61.1
-
SUSE Package Hub 15 15-SP3 (x86_64)
- postgresql14-test-14.19-150200.5.61.1
-
SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64)
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-llvmjit-14.19-150200.5.61.1
- postgresql14-test-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-llvmjit-devel-14.19-150200.5.61.1
- postgresql14-llvmjit-debuginfo-14.19-150200.5.61.1
-
SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64)
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-test-14.19-150200.5.61.1
- postgresql14-llvmjit-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-llvmjit-debuginfo-14.19-150200.5.61.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server 15 SP3 LTSS (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server 15 SP4 LTSS (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-llvmjit-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-llvmjit-devel-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-llvmjit-debuginfo-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server 15 SP5 LTSS (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-llvmjit-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-llvmjit-devel-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-llvmjit-debuginfo-14.19-150200.5.61.1
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Manager Proxy 4.3 LTS (x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Manager Proxy 4.3 LTS (noarch)
- postgresql14-docs-14.19-150200.5.61.1
-
SUSE Manager Retail Branch Server 4.3 LTS (x86_64)
- postgresql14-devel-14.19-150200.5.61.1
- postgresql14-server-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-debugsource-14.19-150200.5.61.1
- postgresql14-14.19-150200.5.61.1
- postgresql14-contrib-14.19-150200.5.61.1
- postgresql14-server-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-debuginfo-14.19-150200.5.61.1
- postgresql14-devel-debuginfo-14.19-150200.5.61.1
- postgresql14-pltcl-debuginfo-14.19-150200.5.61.1
- postgresql14-plperl-14.19-150200.5.61.1
- postgresql14-plpython-debuginfo-14.19-150200.5.61.1
- postgresql14-debuginfo-14.19-150200.5.61.1
- postgresql14-server-devel-14.19-150200.5.61.1
- postgresql14-server-14.19-150200.5.61.1
- postgresql14-contrib-debuginfo-14.19-150200.5.61.1
- postgresql14-plpython-14.19-150200.5.61.1
- postgresql14-pltcl-14.19-150200.5.61.1
-
SUSE Manager Retail Branch Server 4.3 LTS (noarch)
- postgresql14-docs-14.19-150200.5.61.1
References:
- https://www.suse.com/security/cve/CVE-2025-8713.html
- https://www.suse.com/security/cve/CVE-2025-8714.html
- https://www.suse.com/security/cve/CVE-2025-8715.html
- https://bugzilla.suse.com/show_bug.cgi?id=1248119
- https://bugzilla.suse.com/show_bug.cgi?id=1248120
- https://bugzilla.suse.com/show_bug.cgi?id=1248122