SUSE-SU-2025:03003-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-202503003-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:03003-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2025:03003-1
- Upstream
- Related
- Published
- 2025-08-27T13:42:33Z
- Modified
- 2026-03-23T04:46:59.990757Z
- Summary
- Security update for postgresql13
- Details
-
This update for postgresql13 fixes the following issues:
Upgrade to 13.22:
- CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120).
- CVE-2025-8714: untrusted data inclusion in
pg_dumplets superuser of origin server execute arbitrary code in psql client (bsc#1248122). - CVE-2025-8715: improper neutralization of newlines in
pg_dumpallows execution of arbitrary code in psql client and in restore target server (bsc#1248119).
- References
-
- https://www.suse.com/support/update/announcement/2025/suse-su-202503003-1/
- https://bugzilla.suse.com/1248119
- https://bugzilla.suse.com/1248120
- https://bugzilla.suse.com/1248122
- https://www.suse.com/security/cve/CVE-2025-8713
- https://www.suse.com/security/cve/CVE-2025-8714
- https://www.suse.com/security/cve/CVE-2025-8715
Affected packages
SUSE:Linux Enterprise Server 12 SP5-LTSS / postgresql13
Package
- Name
- postgresql13
- Purl
- pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed13.22-3.66.1
Ecosystem specific
{
"binaries": [
{
"postgresql13-devel": "13.22-3.66.1",
"postgresql13-docs": "13.22-3.66.1",
"postgresql13-plperl": "13.22-3.66.1",
"postgresql13-server-devel": "13.22-3.66.1",
"postgresql13-pltcl": "13.22-3.66.1",
"postgresql13-contrib": "13.22-3.66.1",
"postgresql13-plpython": "13.22-3.66.1",
"postgresql13": "13.22-3.66.1",
"postgresql13-server": "13.22-3.66.1"
}
]
}
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / postgresql13
Package
- Name
- postgresql13
- Purl
- pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed13.22-3.66.1
Ecosystem specific
{
"binaries": [
{
"postgresql13-devel": "13.22-3.66.1",
"postgresql13-docs": "13.22-3.66.1",
"postgresql13-plperl": "13.22-3.66.1",
"postgresql13-server-devel": "13.22-3.66.1",
"postgresql13-pltcl": "13.22-3.66.1",
"postgresql13-contrib": "13.22-3.66.1",
"postgresql13-plpython": "13.22-3.66.1",
"postgresql13": "13.22-3.66.1",
"postgresql13-server": "13.22-3.66.1"
}
]
}