SUSE-SU-2025:4486-1

HIGH8.8

Security update for postgresql13

Published Dec 18, 2025

Modified 5 months ago

Fix available

Details

Description of the patch:

This update for postgresql13 fixes the following issues:

Upgraded to 13.23:

CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332)
CVE-2025-12818: Fixed integer overflow in allocation-size calculations within libpq (bsc#1253333)

Other fixes:

Use %product_libs_llvm_ver to determine the LLVM version.
Remove conditionals for obsolete PostgreSQL releases.
Sync spec file from version 18.

Affected Packages(11 packages)

postgresql13

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

13.23-150200.5.78.2

postgresql13-contrib

Fixed in:

13.23-150200.5.78.2

postgresql13-devel

Fixed in:

13.23-150200.5.78.2

postgresql13-docs

Fixed in:

13.23-150200.5.78.2

postgresql13-plperl

Fixed in:

13.23-150200.5.78.2

postgresql13-plpython

Fixed in:

13.23-150200.5.78.2

postgresql13-pltcl

Fixed in:

13.23-150200.5.78.2

postgresql13-server

Fixed in:

13.23-150200.5.78.2

postgresql13-server-devel

Fixed in:

13.23-150200.5.78.2

postgresql13-llvmjit

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP4

Fixed in:

13.23-150200.5.78.2

References

ADVISORY

https://bugzilla.suse.com/1253332

ADVISORY

https://bugzilla.suse.com/1253333

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2025-December/023610.html

ADVISORY

https://www.suse.com/security/cve/CVE-2025-12817/

ADVISORY