diff --git a/postgresql.spec b/postgresql.spec
index e37ed3ba566cb6d28d4b2e0f03749317f91669de..6d69155fcfc2122f35019877dc0369e23d9c09dc 100644
--- a/postgresql.spec
+++ b/postgresql.spec
@@ -44,8 +44,8 @@
 
 Summary:       PostgreSQL client programs
 Name:          postgresql
-Version:       15.14
-Release:       2%{?dist}
+Version:       15.15
+Release:       1%{?dist}
 License:       PostgreSQL
 Url:           http://www.postgresql.org/
 Source0:       https://ftp.postgresql.org/pub/source/v%{version}/postgresql-%{version}.tar.bz2
@@ -1094,6 +1094,10 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
+* Fri Nov 21 2025 Upgrade Robot <upbot@opencloudos.tech> - 15.15-1
+- Upgrade to version 15.15
+- Fix CVE-2025-12818, CVE-2025-12817
+
 * Wed Sep 10 2025 Rebuild Robot <rebot@opencloudos.org> - 15.14-2
 - [Type] sync
 - [DESC] Rebuilt for icu
diff --git a/sources b/sources
index 1714b2eaaae633cf2f212a84e53d6f6a66ee9654..836276b62bb7a225ff811160085bf3e0068e3a77 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (postgresql-15.14.tar.bz2) = 6bef254af257eb79a6b4ec1fd09a996351848561a493e529b7e44b053b368753d56cd76de74b07fff6d637606773963e83e4c3bb321682774b12d24dfa1ca8f4
+SHA512 (postgresql-15.15.tar.bz2) = efd5dcdb6e45bc13cd4b1b73f4de19fc3ae2bac96e85086cacd649bfbf50969429c40193e86717380759c6995204c18e14ac5352565d5ae85df61c0a127a1562
 SHA512 (postgresql-14.16.tar.bz2) = 260b6a6bc42a448f9bb3bf4194f601d2c10de517e39c8437b194662e41aae5013f2921b3712014ada24a274edb0db5f7b9f69d15cbb48d77d36b4c53092c93e4
 SHA512 (postgresql-setup-8.9.tar.gz) = 118e9ebf858722a38b0e90324bc1b49fc7058cda601ca0a7e78c94e7b95e89d6dbbc46f377626364b068614ced3cde3cb4733973ad2d71bf17892ad773657ef7