diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000000000000000000000000000000000000..7e1ef7361c0c425300666c33c07b395359100e58
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+*.bz2 filter=lfs diff=lfs merge=lfs -text
diff --git a/.lfsconfig b/.lfsconfig
new file mode 100644
index 0000000000000000000000000000000000000000..98643f98766fa0c4ba780d024e51923fcccff6a9
--- /dev/null
+++ b/.lfsconfig
@@ -0,0 +1,2 @@
+[lfs]
+	url = https://artlfs.openeuler.openatom.cn/src-openEuler/libpq
diff --git a/libpq.spec b/libpq.spec
index 277f43c111c724f1acb9493e01e7d40110fa2156..96efa76aba90237f2ea6b7b7e45f62cfe775d54a 100644
--- a/libpq.spec
+++ b/libpq.spec
@@ -1,5 +1,5 @@
 Name: libpq
-Version: 15.9
+Version: 15.12
 Release: 1
 Summary: PostgreSQL client library
 License: PostgreSQL
@@ -80,6 +80,9 @@ cat pg_config-15.lang >>libpq-devel.lst
 %_libdir/pkgconfig/libpq.pc
 
 %changelog
+* Thu Feb 20 2025 Funda Wang <fundawang@yeah.net> - 15.12-1
+- update to 15.12 to fix CVE-2025-1094
+
 * Fri Nov 15 2024 Funda Wang <fundawang@yeah.net> - 15.9-1
 - update to 15.9
 
diff --git a/postgresql-15.12.tar.bz2 b/postgresql-15.12.tar.bz2
new file mode 100644
index 0000000000000000000000000000000000000000..534f1d1f5f5b5f88a5d721ecf048af13f68716fa
--- /dev/null
+++ b/postgresql-15.12.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3bc8462a38ca0857270cc88b949a3f6659f0d5c44c029c482355835b61a0f6f7
+size 23170228
diff --git a/postgresql-15.9.tar.bz2 b/postgresql-15.9.tar.bz2
deleted file mode 100644
index e59b60937ce1e03da8f95597fff76e0b172d0a3d..0000000000000000000000000000000000000000
Binary files a/postgresql-15.9.tar.bz2 and /dev/null differ