[SECURITY] [DSA 6132-1] postgresql-15 security update To : debian-security-announce@lists.debian.org Subject : [SECURITY] [DSA 6132-1] postgresql-15 security update From : Moritz Muehlenhoff < jmm@debian.org > Date : Thu, 12 Feb 2026 19:47:01 +0000 Message-id : < [🔎] aY4uNc77kNaI21tE@seger.debian.org > Reply-to : debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6132-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 12, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : postgresql-15 CVE ID : CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 Multiple security issues were discovered in PostgreSQL, which may result in memory disclosure or the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 15.16-0+deb12u1. We recommend that you upgrade your postgresql-15 packages. For the detailed security status of postgresql-15 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/postgresql-15 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmmOLKUACgkQEMKTtsN8 TjYT7g//bgpeHluUQcFAXQXIsdyl83LwTkypK8KREnvJzpEuC25epgxBXTtLaIDs vYwdTcs+KmYPj19K+8xv2FY87oriIQHNjrZsIp9UKgGzNB8XbwSQoP4sFYqi8C9S ZWj2VF1dt7G89L4CuMTjLKDH17cn4s61Mal+liv92oQYwWKO8hz7wjxAKSdVl8Iq qqHO8aH19N5qLwXvy7tMiJAeRcokXAvkry6ZuzUT5Aywwj8t2N2PXZj0wmuCsk0/ cZo1jyWmePW+Z90kdwMIKnwDIFTR3pvMKf01GjIeDDOUmIua0oRFVWthzEeK88Gv QrUYfkusItDok9DE5jS8BYLaWGrSdWLnCipFVaJHulcd7Aa/pLOj33kwO9IBtVY1 3/cLbmdLXgWqpIwBKtDJ2N9eawD+LnSrEwTW1gBomfgFCh2NAvFoaOyHycV2UTuc sVh9ZT1UzqqAw1zcNRb+sG1ZD9s37plgHC75x4hohtEbyzee6SusTY+JQi6PKINE xDpANHlKEPX/VRZhpUXFbAytOJxryy/3WLY58+igDsa/4oWRJ1c7iNcH2g9EGAeR m7DEplrCugiEOfb5B8g2mg9od7LHvd2ZxiFWM+KT7SW+2BpNuvyL2swh9JpT9pUc bWYsAnXmZSoM8PianwG33Ze4UPxOnsiBT9RfwPZ7fHrvn2A+MOY= =EYhB -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Moritz Muehlenhoff (on-list) Moritz Muehlenhoff (off-list) Prev by Date: [SECURITY] [DSA 6131-1] nginx security update Next by Date: [SECURITY] [DSA 6133-1] postgresql-17 security update Previous by thread: [SECURITY] [DSA 6131-1] nginx security update Next by thread: [SECURITY] [DSA 6133-1] postgresql-17 security update Index(es): Date Thread