openSUSE postgresql14 Important 24 Vulnerabilities Resolved 2026-3944

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

This update for postgresql14 fixes the following issues:

* CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines

as `psql` commands (bsc#1275046).

* CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership

* CVE-2026-6470: failure to check type `USAGE` privilege (bsc#1275043).

* CVE-2026-6471: logical decoding can `dlopen` arbitrary file (bsc#1275042).

* CVE-2026-14662: `tsvector` and `tsquery` undersize allocations, via integer

wraparound (bsc#1275001).

* CVE-2026-14663: `pgcrypto`, for OpenSSL-disabled ciphers, silently encrypts

to and decrypts from cleartext (bsc#1275002).

* CVE-2026-14664: `regexp` heap buffer overflow executes arbitrary code

* CVE-2026-14666: row security caching disregards role modifications

* CVE-2026-14668: `ctid` type confusion in selectivity estimator discloses

derivative of arbitrary read (bsc#1275066).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3944=1

* SUSE Package Hub 15 15-SP7

zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-3944=1

* Legacy Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-3944=1

zypper in -t patch SUSE-2026-3944=1

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3944=1

* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)

* postgresql14-server-devel-debuginfo-14.24-150600.16.36.1

* postgresql14-llvmjit-14.24-150600.16.36.1

* postgresql14-test-14.24-150600.16.36.1

* postgresql14-devel-debuginfo-14.24-150600.16.36.1

* postgresql14-plperl-debuginfo-14.24-150600.16.36.1

* postgresql14-contrib-14.24-150600.16.36.1

* postgresql14-server-14.24-150600.16.36.1

* postgresql14-plpython-debuginfo-14.24-150600.16.36.1

* postgresql14-plperl-14.24-150600.16.36.1

* postgresql14-debuginfo-14.24-150600.16.36.1

* postgresql14-pltcl-debuginfo-14.24-150600.16.36.1

* postgresql14-plpython-14.24-150600.16.36.1

* postgresql14-server-debuginfo-14.24-150600.16.36.1

* postgresql14-14.24-150600.16.36.1

* postgresql14-devel-14.24-150600.16.36.1

* postgresql14-pltcl-14.24-150600.16.36.1

* postgresql14-contrib-debuginfo-14.24-150600.16.36.1

* postgresql14-llvmjit-debuginfo-14.24-150600.16.36.1

* postgresql14-server-devel-14.24-150600.16.36.1

* postgresql14-llvmjit-devel-14.24-150600.16.36.1

*

*

*

*

*

*

*

*

*

*

*

*

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases