Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2026:0016-1

UNKNOWN

Security update for pgadmin4

Published Jan 5, 2026

Modified 1 weeks ago

Fix available

Details

This update for pgadmin4 fixes the following issues:

CVE-2025-12765: insufficient checks in the LDAP authentication flow allow a for bypass of TLS certificate validation that can lead to the stealing of bind credentials and the altering of directory responses (bsc#1253478).
CVE-2025-12764: improper validation of characters in a username allows for LDAP injections that force the processing of unusual amounts of data and leads to a DoS (bsc#1253477).

Affected Packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSpgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSpgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSpgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSpgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSpgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSpgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSpgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSpgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSpgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSpgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSpgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSpgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Module for Python 3 15 SP7pgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Module for Python 3 15 SP7pgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Module for Python 3 15 SP7pgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server 15 SP4-LTSSpgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server 15 SP4-LTSSpgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server 15 SP4-LTSSpgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server 15 SP5-LTSSpgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server 15 SP5-LTSSpgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server 15 SP5-LTSSpgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server 15 SP6-LTSSpgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server 15 SP6-LTSSpgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server 15 SP6-LTSSpgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4pgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4pgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4pgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5pgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5pgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5pgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP6pgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP6pgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Manager Proxy LTS 4.3pgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Manager Proxy LTS 4.3pgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Manager Proxy LTS 4.3pgadmin4-web

Fixed in:

4.30-150300.3.21.1

SUSE:Manager Server LTS 4.3pgadmin4

Fixed in:

4.30-150300.3.21.1

SUSE:Manager Server LTS 4.3pgadmin4-doc

Fixed in:

4.30-150300.3.21.1

SUSE:Manager Server LTS 4.3pgadmin4-web

Fixed in:

4.30-150300.3.21.1

References

REPORThttps://bugzilla.suse.com/1253477 REPORThttps://bugzilla.suse.com/1253478 WEBhttps://www.suse.com/security/cve/CVE-2025-12764 WEBhttps://www.suse.com/security/cve/CVE-2025-12765 ADVISORYhttps://www.suse.com/support/update/announcement/2026/suse-su-20260016-1/

Upstream

CVE-2025-12764 CVE-2025-12765

Related

CVE-2025-12764 CVE-2025-12765

Ecosystems

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Manager Proxy LTS 4.3 SUSE Manager Server LTS 4.3

Timeline

PublishedJan 5, 2026

ModifiedJan 5, 2026

SUSE-SU-2026:0016-1 | Mondoo Vulnerability Intelligence