suse · CVE-2026-2005

Quick triage

Priority: high Published: 2026-03-05 00:19:23 UTC Updated: 2026-04-16 13:38:37 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2026-2005 severity important: SUSE including 346 source package names (2.2.1-5.40:grub2-2.12-slfo.1.1_2.1, 2.2.1-5.40:grub2-i386-pc-2.12-slfo.1.1_2.1, …), 1251 product×package rows across 73 product lines (Container suse/manager/5.0/x86_64/server, Container suse/manager/5.0/x86_64/server-migration-14-16, … (73 product lines)): Fixed 1204, First Fixed 47.

Description:

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

cvelogic Threat Intelligence