Security update for postgresql15 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3347-1 Final 1 1 2023-08-17T12:39:44Z current 2023-08-17T12:39:44Z 2023-08-17T12:39:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for postgresql15 This update for postgresql15 fixes the following issues: - Update to 15.4 - CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059) - CVE-2023-39418: Fix MERGE to enforce row security. (bsc#1214061) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/postgres:14-2023-3347,Container suse/postgres:15-2023-3347,Container suse/postgres:latest-2023-3347,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2023-3347,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2023-3347,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2023-3347,Image SLES15-SP4-Manager-Server-4-3-2023-3347,Image SLES15-SP4-Manager-Server-4-3-Azure-llc-2023-3347,Image SLES15-SP4-Manager-Server-4-3-Azure-ltd-2023-3347,Image SLES15-SP4-Manager-Server-4-3-BYOS-2023-3347,Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure-2023-3347,Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2-2023-3347,Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE-2023-3347,Image SLES15-SP4-Manager-Server-4-3-EC2-llc-2023-3347,Image SLES15-SP4-Manager-Server-4-3-EC2-ltd-2023-3347,SUSE-2023-3347,SUSE-SLE-Module-Basesystem-15-SP4-2023-3347,SUSE-SLE-Module-Basesystem-15-SP5-2023-3347,SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-3347,SUSE-SLE-Module-Server-Applications-15-SP4-2023-3347,SUSE-SLE-Module-Server-Applications-15-SP5-2023-3347,SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3347,SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3347,openSUSE-SLE-15.4-2023-3347,openSUSE-SLE-15.5-2023-3347 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233347-1/ Link for SUSE-SU-2023:3347-1 https://lists.suse.com/pipermail/sle-updates/2023-August/031066.html E-Mail link for SUSE-SU-2023:3347-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1214059 SUSE Bug 1214059 https://bugzilla.suse.com/1214061 SUSE Bug 1214061 https://www.suse.com/security/cve/CVE-2023-39417/ SUSE CVE CVE-2023-39417 page https://www.suse.com/security/cve/CVE-2023-39418/ SUSE CVE CVE-2023-39418 page Container suse/postgres:14 Container suse/postgres:15 Container suse/postgres:latest Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3 Image SLES15-SP4-Manager-Server-4-3-Azure-llc Image SLES15-SP4-Manager-Server-4-3-Azure-ltd Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-EC2-llc Image SLES15-SP4-Manager-Server-4-3-EC2-ltd SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.4 openSUSE Leap 15.5 libpq5-15.4-150200.5.12.1 postgresql15-15.4-150200.5.12.1 postgresql15-server-15.4-150200.5.12.1 libecpg6-15.4-150200.5.12.1 libecpg6-32bit-15.4-150200.5.12.1 libecpg6-64bit-15.4-150200.5.12.1 libpq5-32bit-15.4-150200.5.12.1 libpq5-64bit-15.4-150200.5.12.1 postgresql15-contrib-15.4-150200.5.12.1 postgresql15-devel-15.4-150200.5.12.1 postgresql15-devel-mini-15.4-150200.5.12.1 postgresql15-docs-15.4-150200.5.12.1 postgresql15-llvmjit-15.4-150200.5.12.1 postgresql15-llvmjit-devel-15.4-150200.5.12.1 postgresql15-plperl-15.4-150200.5.12.1 postgresql15-plpython-15.4-150200.5.12.1 postgresql15-pltcl-15.4-150200.5.12.1 postgresql15-server-devel-15.4-150200.5.12.1 postgresql15-test-15.4-150200.5.12.1 libpq5-15.4-150200.5.12.1 as a component of Container suse/postgres:14 libpq5-15.4-150200.5.12.1 as a component of Container suse/postgres:15 postgresql15-15.4-150200.5.12.1 as a component of Container suse/postgres:15 postgresql15-server-15.4-150200.5.12.1 as a component of Container suse/postgres:15 libpq5-15.4-150200.5.12.1 as a component of Container suse/postgres:latest libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP4-Manager-Server-4-3 libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-llc libpq5-15.4-150200.5.12.1 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-ltd libpq5-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 postgresql15-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libpq5-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 postgresql15-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 postgresql15-llvmjit-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 postgresql15-llvmjit-devel-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 postgresql15-test-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 libecpg6-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 postgresql15-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 postgresql15-contrib-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 postgresql15-devel-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 postgresql15-docs-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 postgresql15-plperl-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 postgresql15-plpython-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 postgresql15-pltcl-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 postgresql15-server-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 postgresql15-server-devel-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libecpg6-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 postgresql15-contrib-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 postgresql15-devel-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 postgresql15-docs-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 postgresql15-plperl-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 postgresql15-plpython-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 postgresql15-pltcl-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 postgresql15-server-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 postgresql15-server-devel-15.4-150200.5.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libecpg6-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 libpq5-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 postgresql15-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 postgresql15-contrib-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 postgresql15-devel-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 postgresql15-docs-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 postgresql15-plperl-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 postgresql15-plpython-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 postgresql15-pltcl-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 postgresql15-server-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 postgresql15-server-devel-15.4-150200.5.12.1 as a component of SUSE Manager Proxy 4.2 libecpg6-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 libpq5-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 postgresql15-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 postgresql15-contrib-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 postgresql15-devel-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 postgresql15-docs-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 postgresql15-plperl-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 postgresql15-plpython-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 postgresql15-pltcl-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 postgresql15-server-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 postgresql15-server-devel-15.4-150200.5.12.1 as a component of SUSE Manager Server 4.2 libecpg6-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 libecpg6-32bit-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 libpq5-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 libpq5-32bit-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-contrib-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-devel-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-docs-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-llvmjit-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-llvmjit-devel-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-plperl-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-plpython-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-pltcl-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-server-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-server-devel-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 postgresql15-test-15.4-150200.5.12.1 as a component of openSUSE Leap 15.4 libecpg6-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 libecpg6-32bit-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 libpq5-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 libpq5-32bit-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-contrib-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-devel-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-docs-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-llvmjit-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-llvmjit-devel-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-plperl-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-plpython-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-pltcl-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-server-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-server-devel-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 postgresql15-test-15.4-150200.5.12.1 as a component of openSUSE Leap 15.5 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. CVE-2023-39417 Container suse/postgres:14:libpq5-15.4-150200.5.12.1 Container suse/postgres:15:libpq5-15.4-150200.5.12.1 Container suse/postgres:15:postgresql15-15.4-150200.5.12.1 Container suse/postgres:15:postgresql15-server-15.4-150200.5.12.1 Container suse/postgres:latest:libpq5-15.4-150200.5.12.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:libpq5-15.4-150200.5.12.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:libpq5-15.4-150200.5.12.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3:libpq5-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libpq5-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:postgresql15-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libpq5-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:postgresql15-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Package Hub 15 SP4:postgresql15-llvmjit-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Package Hub 15 SP4:postgresql15-llvmjit-devel-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Package Hub 15 SP4:postgresql15-test-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libecpg6-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-contrib-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-devel-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-docs-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-plperl-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-plpython-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-pltcl-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-server-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-server-devel-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libecpg6-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-contrib-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-devel-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-docs-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-plperl-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-plpython-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-pltcl-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-server-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-server-devel-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:libecpg6-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:libpq5-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-contrib-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-devel-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-docs-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-plperl-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-plpython-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-pltcl-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-server-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-server-devel-15.4-150200.5.12.1 SUSE Manager Server 4.2:libecpg6-15.4-150200.5.12.1 SUSE Manager Server 4.2:libpq5-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-contrib-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-devel-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-docs-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-plperl-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-plpython-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-pltcl-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-server-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-server-devel-15.4-150200.5.12.1 openSUSE Leap 15.4:libecpg6-15.4-150200.5.12.1 openSUSE Leap 15.4:libecpg6-32bit-15.4-150200.5.12.1 openSUSE Leap 15.4:libpq5-15.4-150200.5.12.1 openSUSE Leap 15.4:libpq5-32bit-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-contrib-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-devel-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-docs-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-llvmjit-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-llvmjit-devel-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-plperl-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-plpython-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-pltcl-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-server-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-server-devel-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-test-15.4-150200.5.12.1 openSUSE Leap 15.5:libecpg6-15.4-150200.5.12.1 openSUSE Leap 15.5:libecpg6-32bit-15.4-150200.5.12.1 openSUSE Leap 15.5:libpq5-15.4-150200.5.12.1 openSUSE Leap 15.5:libpq5-32bit-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-contrib-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-devel-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-docs-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-llvmjit-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-llvmjit-devel-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-plperl-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-plpython-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-pltcl-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-server-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-server-devel-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-test-15.4-150200.5.12.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233347-1/ https://www.suse.com/security/cve/CVE-2023-39417.html CVE-2023-39417 https://bugzilla.suse.com/1214059 SUSE Bug 1214059 A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user could store such rows. CVE-2023-39418 Container suse/postgres:14:libpq5-15.4-150200.5.12.1 Container suse/postgres:15:libpq5-15.4-150200.5.12.1 Container suse/postgres:15:postgresql15-15.4-150200.5.12.1 Container suse/postgres:15:postgresql15-server-15.4-150200.5.12.1 Container suse/postgres:latest:libpq5-15.4-150200.5.12.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:libpq5-15.4-150200.5.12.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:libpq5-15.4-150200.5.12.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:libpq5-15.4-150200.5.12.1 Image SLES15-SP4-Manager-Server-4-3:libpq5-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libpq5-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:postgresql15-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libpq5-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:postgresql15-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Package Hub 15 SP4:postgresql15-llvmjit-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Package Hub 15 SP4:postgresql15-llvmjit-devel-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Package Hub 15 SP4:postgresql15-test-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libecpg6-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-contrib-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-devel-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-docs-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-plperl-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-plpython-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-pltcl-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-server-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:postgresql15-server-devel-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libecpg6-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-contrib-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-devel-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-docs-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-plperl-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-plpython-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-pltcl-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-server-15.4-150200.5.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postgresql15-server-devel-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:libecpg6-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:libpq5-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-contrib-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-devel-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-docs-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-plperl-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-plpython-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-pltcl-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-server-15.4-150200.5.12.1 SUSE Manager Proxy 4.2:postgresql15-server-devel-15.4-150200.5.12.1 SUSE Manager Server 4.2:libecpg6-15.4-150200.5.12.1 SUSE Manager Server 4.2:libpq5-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-contrib-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-devel-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-docs-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-plperl-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-plpython-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-pltcl-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-server-15.4-150200.5.12.1 SUSE Manager Server 4.2:postgresql15-server-devel-15.4-150200.5.12.1 openSUSE Leap 15.4:libecpg6-15.4-150200.5.12.1 openSUSE Leap 15.4:libecpg6-32bit-15.4-150200.5.12.1 openSUSE Leap 15.4:libpq5-15.4-150200.5.12.1 openSUSE Leap 15.4:libpq5-32bit-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-contrib-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-devel-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-docs-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-llvmjit-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-llvmjit-devel-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-plperl-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-plpython-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-pltcl-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-server-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-server-devel-15.4-150200.5.12.1 openSUSE Leap 15.4:postgresql15-test-15.4-150200.5.12.1 openSUSE Leap 15.5:libecpg6-15.4-150200.5.12.1 openSUSE Leap 15.5:libecpg6-32bit-15.4-150200.5.12.1 openSUSE Leap 15.5:libpq5-15.4-150200.5.12.1 openSUSE Leap 15.5:libpq5-32bit-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-contrib-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-devel-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-docs-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-llvmjit-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-llvmjit-devel-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-plperl-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-plpython-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-pltcl-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-server-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-server-devel-15.4-150200.5.12.1 openSUSE Leap 15.5:postgresql15-test-15.4-150200.5.12.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233347-1/ https://www.suse.com/security/cve/CVE-2023-39418.html CVE-2023-39418 https://bugzilla.suse.com/1214061 SUSE Bug 1214061