Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

openSUSE Leap 16.0 PostgreSQL16 Important Integer Overflow CVE-2025-12818

opensuse
Calendar Grey February 3, 2026
Dist Opensuse Esm H88
Update for openSUSE postgresql16 addresses critical issues and fixes multiple bugs. Important security fixes included.
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.

Description

This update for postgresql16 fixes the following issues:

Security fixes:

- CVE-2025-12817: Missing check for CREATE

privileges on the schema in CREATE STATISTICS allowed table

owners to create statistics in any schema, potentially leading

to unexpected naming conflicts (bsc#1253332)

- CVE-2025-12818: Several places in libpq were not

sufficiently careful about computing the required size of a

memory allocation. Sufficiently large inputs could cause

integer overflow, resulting in an undersized buffer, which

would then lead to writing past the end of the buffer (bsc#1253333)

Other fixes:

- Upgrade to 16.11

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-215=1

Topics%20covered

Topics Covered

security advisory important integer overflow OpenSUSE postgresql16 cve-2025-12818

Patch

Package List

- openSUSE Leap 16.0:

postgresql16-16.11-160000.1.1

postgresql16-contrib-16.11-160000.1.1

postgresql16-devel-16.11-160000.1.1

postgresql16-docs-16.11-160000.1.1

postgresql16-llvmjit-16.11-160000.1.1

postgresql16-llvmjit-devel-16.11-160000.1.1

postgresql16-plperl-16.11-160000.1.1

postgresql16-plpython-16.11-160000.1.1

postgresql16-pltcl-16.11-160000.1.1

postgresql16-server-16.11-160000.1.1

postgresql16-server-devel-16.11-160000.1.1

postgresql16-test-16.11-160000.1.1

References

* bsc#1253332

* bsc#1253333

References:

* https://www.suse.com/security/cve/CVE-2025-12817.html

* https://www.suse.com/security/cve/CVE-2025-12818.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:20130-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Topics%20covered

Topics Covered

security advisory important integer overflow OpenSUSE postgresql16 cve-2025-12818

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here