Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4484-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:4484-1

UNKNOWN

Security update for postgresql15

Published Dec 18, 2025

Modified 3 weeks ago

Fix available

Details

This update for postgresql15 fixes the following issues:

Upgraded to 15.15:

CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332)
CVE-2025-12818: Fixed integer overflow in allocation-size calculations within libpq (bsc#1253333)

Other fixes:

Use %product_libs_llvm_ver to determine the LLVM version.
Remove conditionals for obsolete PostgreSQL releases.
Sync spec file from version 18.

Affected Packages

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql15

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql15-contrib

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql15-devel

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql15-docs

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql15-plperl

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql15-plpython

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql15-pltcl

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql15-server

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP6postgresql15-server-devel

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql15

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql15-contrib

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql15-devel

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql15-plperl

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql15-plpython

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql15-pltcl

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql15-server

Fixed in:

15.15-150600.16.23.1

SUSE:Linux Enterprise Module for Legacy 15 SP7postgresql15-server-devel

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-contrib

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-devel

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-docs

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-llvmjit

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-llvmjit-devel

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-plperl

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-plpython

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-pltcl

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-server

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-server-devel

Fixed in:

15.15-150600.16.23.1

openSUSE:Leap 15.6postgresql15-test

Fixed in:

15.15-150600.16.23.1

References

REPORThttps://bugzilla.suse.com/1253332 REPORThttps://bugzilla.suse.com/1253333 WEBhttps://www.suse.com/security/cve/CVE-2025-12817 WEBhttps://www.suse.com/security/cve/CVE-2025-12818 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-20254484-1/

Upstream

CVE-2025-12817 CVE-2025-12818

Related

CVE-2025-12817 CVE-2025-12818

Ecosystems

SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP7 openSUSE Leap 15.6

Timeline

PublishedDec 18, 2025

ModifiedDec 18, 2025