openSUSE Leap 16.0 PostgreSQL13 Important Security Fixes 2026-20449-1

This update for postgresql13 fixes the following issues:

Security fixes:

- CVE-2025-12817: Fixed missing check for CREATE privileges

on the schema in CREATE STATISTICS allowed table owners to create

statistics in any schema, potentially leading to unexpected naming

conflicts (bsc#1253332)

- CVE-2025-12818: Fixed several places in libpq were not

sufficiently careful about computing the required size of a memory

allocation. Sufficiently large inputs could cause integer overflow,

resulting in an undersized buffer, which would then lead to writing

past the end of the buffer (bsc#1253333)

Other fixes:

- Update to 13.23

* https://www.postgresql.org/about/news/postgresql-181-177-1611-1515-1420-and-1323-released-3171/

* https://www.postgresql.org/docs/release/13.23

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed...