File _patchinfo of Package patchinfo.40264
<patchinfo incident="40264">
<issue tracker="cve" id="2025-8714"/>
<issue tracker="cve" id="2025-8713"/>
<issue tracker="cve" id="2025-8715"/>
<issue tracker="bnc" id="1248119">VUL-0: CVE-2025-8715: postgresql: improper neutralization of newlines in pg_dump can lead to arbitrary code execution in the psql client and in the restore target server</issue>
<issue tracker="bnc" id="1248122">VUL-0: CVE-2025-8714: postgresql: untrusted data inclusion in pg_dump allows superuser of origin server to execute arbitrary code in psql client</issue>
<issue tracker="bnc" id="1248120">VUL-0: CVE-2025-8713: postgresql: optimizer statistics can expose sampled data within a view, partition, or child table to unauthorized users</issue>
<packager>rmax</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for postgresql16</summary>
<description>This update for postgresql16 fixes the following issues:
Upgraded to 16.10:
* CVE-2025-8713: Fixed optimizer statistics exposing
sampled data within a view, partition, or child table
(bsc#1248120)
* CVE-2025-8714: Fixed untrusted data inclusion in pg_dump
allows superuser of origin server to execute arbitrary code
in psql client (bsc#1248122)
* CVE-2025-8715: Fixed improper neutralization of newlines
in pg_dump leading to arbitrary code execution in the psql
client and in the restore target server (bsc#1248119)
</description>
</patchinfo>