<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for postgresql16</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2026:0882-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2026-03-12T10:19:26Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2026-03-12T10:19:26Z</InitialReleaseDate>
    <CurrentReleaseDate>2026-03-12T10:19:26Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for postgresql16</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for postgresql16 fixes the following issues:

Update to version 16.13 (bsc#1258754).

Security issues fixed:

- CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008).
- CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code
  execution (bsc#1258009).
- CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution
  (bsc#1258010).
- CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution
  (bsc#1258011).
    
Regression fixes:

  - the substring() function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the
    source of that value is a database column (caused by CVE-2026-2006 fix).
  - a standby may halt and return an error 'could not access status of transaction'.
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2026-882,SUSE-SLE-Module-Legacy-15-SP7-2026-882,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-882,SUSE-SLE-Module-Server-Applications-15-SP7-2026-882,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-882,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-882,openSUSE-SLE-15.6-2026-882</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260882-1/</URL>
      <Description>Link for SUSE-SU-2026:0882-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2026-March/024683.html</URL>
      <Description>E-Mail link for SUSE-SU-2026:0882-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1258008</URL>
      <Description>SUSE Bug 1258008</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1258009</URL>
      <Description>SUSE Bug 1258009</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1258010</URL>
      <Description>SUSE Bug 1258010</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1258011</URL>
      <Description>SUSE Bug 1258011</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1258754</URL>
      <Description>SUSE Bug 1258754</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2026-2003/</URL>
      <Description>SUSE CVE CVE-2026-2003 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2026-2004/</URL>
      <Description>SUSE CVE CVE-2026-2004 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2026-2005/</URL>
      <Description>SUSE CVE CVE-2026-2005 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2026-2006/</URL>
      <Description>SUSE CVE CVE-2026-2006 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Legacy 15 SP7">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Legacy 15 SP7">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Legacy 15 SP7" CPE="cpe:/o:suse:sle-module-legacy:15:sp7">SUSE Linux Enterprise Module for Legacy 15 SP7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Package Hub 15 SP7">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Package Hub 15 SP7">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Package Hub 15 SP7" CPE="cpe:/o:suse:packagehub:15:sp7">SUSE Linux Enterprise Module for Package Hub 15 SP7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Server Applications 15 SP7">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Server Applications 15 SP7">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Server Applications 15 SP7" CPE="cpe:/o:suse:sle-module-server-applications:15:sp7">SUSE Linux Enterprise Module for Server Applications 15 SP7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP6-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp6">SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6" CPE="cpe:/o:suse:sles_sap:15:sp6">SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 15.6">
      <Branch Type="Product Name" Name="openSUSE Leap 15.6">
        <FullProductName ProductID="openSUSE Leap 15.6" CPE="cpe:/o:opensuse:leap:15.6">openSUSE Leap 15.6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-16.13-150600.16.30.1">postgresql16-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-contrib-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-contrib-16.13-150600.16.30.1">postgresql16-contrib-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-devel-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-devel-16.13-150600.16.30.1">postgresql16-devel-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-docs-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-docs-16.13-150600.16.30.1">postgresql16-docs-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-llvmjit-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-llvmjit-16.13-150600.16.30.1">postgresql16-llvmjit-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-llvmjit-devel-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-llvmjit-devel-16.13-150600.16.30.1">postgresql16-llvmjit-devel-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-plperl-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-plperl-16.13-150600.16.30.1">postgresql16-plperl-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-plpython-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-plpython-16.13-150600.16.30.1">postgresql16-plpython-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-pltcl-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-pltcl-16.13-150600.16.30.1">postgresql16-pltcl-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-server-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-server-16.13-150600.16.30.1">postgresql16-server-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-server-devel-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-server-devel-16.13-150600.16.30.1">postgresql16-server-devel-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql16-test-16.13-150600.16.30.1">
      <FullProductName ProductID="postgresql16-test-16.13-150600.16.30.1">postgresql16-test-16.13-150600.16.30.1</FullProductName>
    </Branch>
    <Relationship ProductReference="postgresql16-contrib-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Legacy 15 SP7">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Legacy 15 SP7:postgresql16-contrib-16.13-150600.16.30.1">postgresql16-contrib-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP7</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-devel-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Legacy 15 SP7">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Legacy 15 SP7:postgresql16-devel-16.13-150600.16.30.1">postgresql16-devel-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP7</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-llvmjit-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Package Hub 15 SP7">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-llvmjit-16.13-150600.16.30.1">postgresql16-llvmjit-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-llvmjit-devel-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Package Hub 15 SP7">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-llvmjit-devel-16.13-150600.16.30.1">postgresql16-llvmjit-devel-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-test-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Package Hub 15 SP7">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-test-16.13-150600.16.30.1">postgresql16-test-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Server Applications 15 SP7">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-16.13-150600.16.30.1">postgresql16-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-server-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Server Applications 15 SP7">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-server-16.13-150600.16.30.1">postgresql16-server-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-server-devel-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Server Applications 15 SP7">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-server-devel-16.13-150600.16.30.1">postgresql16-server-devel-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-16.13-150600.16.30.1">postgresql16-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-contrib-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-contrib-16.13-150600.16.30.1">postgresql16-contrib-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-devel-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-devel-16.13-150600.16.30.1">postgresql16-devel-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-docs-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-docs-16.13-150600.16.30.1">postgresql16-docs-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-plperl-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-plperl-16.13-150600.16.30.1">postgresql16-plperl-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-plpython-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-plpython-16.13-150600.16.30.1">postgresql16-plpython-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-pltcl-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-pltcl-16.13-150600.16.30.1">postgresql16-pltcl-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-server-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-server-16.13-150600.16.30.1">postgresql16-server-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-server-devel-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP6-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-server-devel-16.13-150600.16.30.1">postgresql16-server-devel-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-16.13-150600.16.30.1">postgresql16-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-contrib-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-contrib-16.13-150600.16.30.1">postgresql16-contrib-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-devel-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-devel-16.13-150600.16.30.1">postgresql16-devel-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-docs-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-docs-16.13-150600.16.30.1">postgresql16-docs-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-plperl-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-plperl-16.13-150600.16.30.1">postgresql16-plperl-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-plpython-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-plpython-16.13-150600.16.30.1">postgresql16-plpython-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-pltcl-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-pltcl-16.13-150600.16.30.1">postgresql16-pltcl-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-server-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-server-16.13-150600.16.30.1">postgresql16-server-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-server-devel-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-server-devel-16.13-150600.16.30.1">postgresql16-server-devel-16.13-150600.16.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-16.13-150600.16.30.1">postgresql16-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-contrib-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-contrib-16.13-150600.16.30.1">postgresql16-contrib-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-devel-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-devel-16.13-150600.16.30.1">postgresql16-devel-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-docs-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-docs-16.13-150600.16.30.1">postgresql16-docs-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-llvmjit-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-llvmjit-16.13-150600.16.30.1">postgresql16-llvmjit-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-llvmjit-devel-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-llvmjit-devel-16.13-150600.16.30.1">postgresql16-llvmjit-devel-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-plperl-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-plperl-16.13-150600.16.30.1">postgresql16-plperl-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-plpython-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-plpython-16.13-150600.16.30.1">postgresql16-plpython-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-pltcl-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-pltcl-16.13-150600.16.30.1">postgresql16-pltcl-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-server-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-server-16.13-150600.16.30.1">postgresql16-server-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-server-devel-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-server-devel-16.13-150600.16.30.1">postgresql16-server-devel-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql16-test-16.13-150600.16.30.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:postgresql16-test-16.13-150600.16.30.1">postgresql16-test-16.13-150600.16.30.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory.  We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely.  Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.</Note>
    </Notes>
    <CVE>CVE-2026-2003</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Legacy 15 SP7:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Legacy 15 SP7:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-llvmjit-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-llvmjit-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-test-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-llvmjit-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-llvmjit-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-test-16.13-150600.16.30.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260882-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2026-2003.html</URL>
        <Description>CVE-2026-2003</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1258008</URL>
        <Description>SUSE Bug 1258008</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database.  Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.</Note>
    </Notes>
    <CVE>CVE-2026-2004</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Legacy 15 SP7:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Legacy 15 SP7:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-llvmjit-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-llvmjit-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-test-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-llvmjit-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-llvmjit-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-test-16.13-150600.16.30.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260882-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2026-2004.html</URL>
        <Description>CVE-2026-2004</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1258009</URL>
        <Description>SUSE Bug 1258009</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database.  Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.</Note>
    </Notes>
    <CVE>CVE-2026-2005</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Legacy 15 SP7:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Legacy 15 SP7:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-llvmjit-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-llvmjit-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-test-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-llvmjit-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-llvmjit-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-test-16.13-150600.16.30.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260882-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2026-2005.html</URL>
        <Description>CVE-2026-2005</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1258010</URL>
        <Description>SUSE Bug 1258010</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun.  That suffices to execute arbitrary code as the operating system user running the database.  Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.</Note>
    </Notes>
    <CVE>CVE-2026-2006</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Module for Legacy 15 SP7:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Legacy 15 SP7:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-llvmjit-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-llvmjit-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Package Hub 15 SP7:postgresql16-test-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Server Applications 15 SP7:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP6-LTSS:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP6:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-contrib-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-docs-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-llvmjit-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-llvmjit-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-plperl-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-plpython-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-pltcl-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-server-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-server-devel-16.13-150600.16.30.1</ProductID>
        <ProductID>openSUSE Leap 15.6:postgresql16-test-16.13-150600.16.30.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260882-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2026-2006.html</URL>
        <Description>CVE-2026-2006</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1258011</URL>
        <Description>SUSE Bug 1258011</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
