Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4371-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:4371-1

UNKNOWN

Security update for postgresql14

Published Dec 11, 2025

Modified 1 months ago

Fix available

Details

This update for postgresql14 fixes the following issues:

Upgraded to 14.20:

CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332)
CVE-2025-12818: Fixed integer overflow in allocation-size calculations within libpq (bsc#1253333)

Other fixes:

Use %product_libs_llvm_ver to determine the LLVM version.
Remove conditionals for obsolete PostgreSQL releases.
Sync spec file from version 18.

Affected Packages

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql14

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql14-contrib

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql14-devel

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql14-docs

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql14-plperl

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql14-plpython

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql14-pltcl

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql14-server

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql14-server-devel

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql14

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql14-contrib

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql14-devel

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql14-docs

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql14-plperl

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql14-plpython

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql14-pltcl

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql14-server

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql14-server-devel

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql14-test

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Package Hub 15 SP6postgresql14

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Package Hub 15 SP6postgresql14-llvmjit

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Package Hub 15 SP6postgresql14-test

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Package Hub 15 SP7postgresql14

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Package Hub 15 SP7postgresql14-llvmjit

Fixed in:

14.20-150600.16.23.1

SUSE:Linux Enterprise Module for Package Hub 15 SP7postgresql14-test

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-contrib

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-devel

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-docs

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-llvmjit

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-llvmjit-devel

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-plperl

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-plpython

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-pltcl

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-server

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-server-devel

Fixed in:

14.20-150600.16.23.1

openSUSE:Leap 15.6postgresql14-test

Fixed in:

14.20-150600.16.23.1

References

REPORThttps://bugzilla.suse.com/1253332 REPORThttps://bugzilla.suse.com/1253333 WEBhttps://www.suse.com/security/cve/CVE-2025-12817 WEBhttps://www.suse.com/security/cve/CVE-2025-12818 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-20254371-1/

Upstream

CVE-2025-12817 CVE-2025-12818

Related

CVE-2025-12817 CVE-2025-12818

Ecosystems

SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 openSUSE Leap 15.6

Timeline

PublishedDec 11, 2025

ModifiedDec 11, 2025