{"id":"SUSE-SU-2022:2989-2","summary":"Security update for postgresql14","details":"This update for postgresql14 fixes the following issues:\n\n- Upgrade to version 14.5:\n- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).\n\n- Upgrade to version 14.4 (bsc#1200437)\n- Release notes: https://www.postgresql.org/docs/release/14.4/\n- Release announcement: https://www.postgresql.org/about/news/p-2470/\n- Prevent possible corruption of indexes created or rebuilt with the CONCURRENTLY option (bsc#1200437)\n- Pin to llvm13 until the next patchlevel update (bsc#1198166)\n","modified":"2026-03-11T07:20:41.579273Z","published":"2022-09-26T09:11:19Z","related":["CVE-2022-2625"],"upstream":["CVE-2022-2625"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222989-2/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1198166"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200437"},{"type":"REPORT","url":"https://bugzilla.suse.com/1202368"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-2625"}],"affected":[{"package":{"name":"postgresql14","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","purl":"pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.5-150200.5.17.1"}]}],"ecosystem_specific":{"binaries":[{"postgresql14-llvmjit":"14.5-150200.5.17.1","postgresql14-test":"14.5-150200.5.17.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2989-2.json"}}],"schema_version":"1.7.5"}