Security update for postgresql17 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2026:0787-1 Final 1 1 2026-03-03T14:48:34Z current 2026-03-03T14:48:34Z 2026-03-03T14:48:34Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for postgresql17 This update for postgresql17 fixes the following issue: Update to version 17.9 (bsc#1258754). Regression fixes: - the substring() function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the source of that value is a database column (caused by CVE-2026-2006 fix). - a standby may halt and return an error 'could not access status of transaction'. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2026-787,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-787,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-787,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-787,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-787,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-787,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-787,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-787,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-787 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2026/suse-su-20260787-1/ Link for SUSE-SU-2026:0787-1 https://lists.suse.com/pipermail/sle-security-updates/2026-March/024531.html E-Mail link for SUSE-SU-2026:0787-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1258011 SUSE Bug 1258011 https://bugzilla.suse.com/1258754 SUSE Bug 1258754 https://www.suse.com/security/cve/CVE-2026-2006/ SUSE CVE CVE-2026-2006 page SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-17.9-150200.5.25.1 postgresql17-contrib-17.9-150200.5.25.1 postgresql17-devel-17.9-150200.5.25.1 postgresql17-docs-17.9-150200.5.25.1 postgresql17-llvmjit-17.9-150200.5.25.1 postgresql17-llvmjit-devel-17.9-150200.5.25.1 postgresql17-plperl-17.9-150200.5.25.1 postgresql17-plpython-17.9-150200.5.25.1 postgresql17-pltcl-17.9-150200.5.25.1 postgresql17-server-17.9-150200.5.25.1 postgresql17-server-devel-17.9-150200.5.25.1 postgresql17-test-17.9-150200.5.25.1 postgresql17-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS postgresql17-contrib-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS postgresql17-devel-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS postgresql17-docs-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS postgresql17-plperl-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS postgresql17-plpython-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS postgresql17-pltcl-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS postgresql17-server-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS postgresql17-server-devel-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS postgresql17-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS postgresql17-contrib-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS postgresql17-devel-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS postgresql17-docs-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS postgresql17-plperl-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS postgresql17-plpython-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS postgresql17-pltcl-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS postgresql17-server-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS postgresql17-server-devel-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS postgresql17-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-contrib-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-devel-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-docs-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-llvmjit-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-llvmjit-devel-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-plperl-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-plpython-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-pltcl-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-server-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-server-devel-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS postgresql17-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-contrib-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-devel-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-docs-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-llvmjit-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-llvmjit-devel-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-plperl-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-plpython-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-pltcl-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-server-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 postgresql17-server-devel-17.9-150200.5.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected. CVE-2026-2006 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:postgresql17-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:postgresql17-contrib-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:postgresql17-devel-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:postgresql17-docs-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:postgresql17-plperl-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:postgresql17-plpython-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:postgresql17-pltcl-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:postgresql17-server-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:postgresql17-server-devel-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:postgresql17-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:postgresql17-contrib-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:postgresql17-devel-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:postgresql17-docs-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:postgresql17-plperl-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:postgresql17-plpython-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:postgresql17-pltcl-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:postgresql17-server-17.9-150200.5.25.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:postgresql17-server-devel-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-contrib-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-devel-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-docs-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-llvmjit-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-llvmjit-devel-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-plperl-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-plpython-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-pltcl-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-server-17.9-150200.5.25.1 SUSE Linux Enterprise Server 15 SP5-LTSS:postgresql17-server-devel-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-contrib-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-devel-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-docs-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-llvmjit-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-llvmjit-devel-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-plperl-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-plpython-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-pltcl-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-server-17.9-150200.5.25.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:postgresql17-server-devel-17.9-150200.5.25.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260787-1/ https://www.suse.com/security/cve/CVE-2026-2006.html CVE-2026-2006 https://bugzilla.suse.com/1258011 SUSE Bug 1258011