Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:4486-1

Опубликовано: 18 дек. 2025
Источник: suse-cvrf

Описание

Security update for postgresql13

This update for postgresql13 fixes the following issues:

Upgraded to 13.23:

  • CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332)
  • CVE-2025-12818: Fixed integer overflow in allocation-size calculations within libpq (bsc#1253333)

Other fixes:

  • Use %product_libs_llvm_ver to determine the LLVM version.
  • Remove conditionals for obsolete PostgreSQL releases.
  • Sync spec file from version 18.

Список пакетов

SUSE Enterprise Storage 7.1
postgresql13-13.23-150200.5.78.2
postgresql13-contrib-13.23-150200.5.78.2
postgresql13-devel-13.23-150200.5.78.2
postgresql13-docs-13.23-150200.5.78.2
postgresql13-plperl-13.23-150200.5.78.2
postgresql13-plpython-13.23-150200.5.78.2
postgresql13-pltcl-13.23-150200.5.78.2
postgresql13-server-13.23-150200.5.78.2
postgresql13-server-devel-13.23-150200.5.78.2
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
postgresql13-13.23-150200.5.78.2
postgresql13-contrib-13.23-150200.5.78.2
postgresql13-devel-13.23-150200.5.78.2
postgresql13-docs-13.23-150200.5.78.2
postgresql13-plperl-13.23-150200.5.78.2
postgresql13-plpython-13.23-150200.5.78.2
postgresql13-pltcl-13.23-150200.5.78.2
postgresql13-server-13.23-150200.5.78.2
postgresql13-server-devel-13.23-150200.5.78.2
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
postgresql13-13.23-150200.5.78.2
postgresql13-contrib-13.23-150200.5.78.2
postgresql13-devel-13.23-150200.5.78.2
postgresql13-docs-13.23-150200.5.78.2
postgresql13-llvmjit-13.23-150200.5.78.2
postgresql13-llvmjit-devel-13.23-150200.5.78.2
postgresql13-plperl-13.23-150200.5.78.2
postgresql13-plpython-13.23-150200.5.78.2
postgresql13-pltcl-13.23-150200.5.78.2
postgresql13-server-13.23-150200.5.78.2
postgresql13-server-devel-13.23-150200.5.78.2
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
postgresql13-13.23-150200.5.78.2
postgresql13-contrib-13.23-150200.5.78.2
postgresql13-devel-13.23-150200.5.78.2
postgresql13-docs-13.23-150200.5.78.2
postgresql13-llvmjit-13.23-150200.5.78.2
postgresql13-llvmjit-devel-13.23-150200.5.78.2
postgresql13-plperl-13.23-150200.5.78.2
postgresql13-plpython-13.23-150200.5.78.2
postgresql13-pltcl-13.23-150200.5.78.2
postgresql13-server-13.23-150200.5.78.2
postgresql13-server-devel-13.23-150200.5.78.2
SUSE Linux Enterprise Server 15 SP3-LTSS
postgresql13-13.23-150200.5.78.2
postgresql13-contrib-13.23-150200.5.78.2
postgresql13-devel-13.23-150200.5.78.2
postgresql13-docs-13.23-150200.5.78.2
postgresql13-plperl-13.23-150200.5.78.2
postgresql13-plpython-13.23-150200.5.78.2
postgresql13-pltcl-13.23-150200.5.78.2
postgresql13-server-13.23-150200.5.78.2
postgresql13-server-devel-13.23-150200.5.78.2
SUSE Linux Enterprise Server 15 SP4-LTSS
postgresql13-13.23-150200.5.78.2
postgresql13-contrib-13.23-150200.5.78.2
postgresql13-devel-13.23-150200.5.78.2
postgresql13-docs-13.23-150200.5.78.2
postgresql13-llvmjit-13.23-150200.5.78.2
postgresql13-llvmjit-devel-13.23-150200.5.78.2
postgresql13-plperl-13.23-150200.5.78.2
postgresql13-plpython-13.23-150200.5.78.2
postgresql13-pltcl-13.23-150200.5.78.2
postgresql13-server-13.23-150200.5.78.2
postgresql13-server-devel-13.23-150200.5.78.2
SUSE Linux Enterprise Server for SAP Applications 15 SP3
postgresql13-13.23-150200.5.78.2
postgresql13-contrib-13.23-150200.5.78.2
postgresql13-devel-13.23-150200.5.78.2
postgresql13-docs-13.23-150200.5.78.2
postgresql13-plperl-13.23-150200.5.78.2
postgresql13-plpython-13.23-150200.5.78.2
postgresql13-pltcl-13.23-150200.5.78.2
postgresql13-server-13.23-150200.5.78.2
postgresql13-server-devel-13.23-150200.5.78.2
SUSE Linux Enterprise Server for SAP Applications 15 SP4
postgresql13-13.23-150200.5.78.2
postgresql13-contrib-13.23-150200.5.78.2
postgresql13-devel-13.23-150200.5.78.2
postgresql13-docs-13.23-150200.5.78.2
postgresql13-llvmjit-13.23-150200.5.78.2
postgresql13-llvmjit-devel-13.23-150200.5.78.2
postgresql13-plperl-13.23-150200.5.78.2
postgresql13-plpython-13.23-150200.5.78.2
postgresql13-pltcl-13.23-150200.5.78.2
postgresql13-server-13.23-150200.5.78.2
postgresql13-server-devel-13.23-150200.5.78.2

Ссылки

Описание

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

Затронутые продукты
SUSE Enterprise Storage 7.1:postgresql13-13.23-150200.5.78.2
SUSE Enterprise Storage 7.1:postgresql13-contrib-13.23-150200.5.78.2
SUSE Enterprise Storage 7.1:postgresql13-devel-13.23-150200.5.78.2
SUSE Enterprise Storage 7.1:postgresql13-docs-13.23-150200.5.78.2
Ссылки

Описание

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.

Затронутые продукты
SUSE Enterprise Storage 7.1:postgresql13-13.23-150200.5.78.2
SUSE Enterprise Storage 7.1:postgresql13-contrib-13.23-150200.5.78.2
SUSE Enterprise Storage 7.1:postgresql13-devel-13.23-150200.5.78.2
SUSE Enterprise Storage 7.1:postgresql13-docs-13.23-150200.5.78.2
Ссылки