Red Hat Security AdvisoryRHSA-2025:14869
postgresql security update
Released 2025-08-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) postgresql-13.22-1.el9_2, postgresql-contrib-13.22-1.el9_2, postgresql-plperl-13.22-1.el9_2 +5
Fixes 3 records
Priority MEDIUM 41
Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump,…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00474 · Published 2025-08-14 · Partial fix · 17.6, 16.10 +3 CWE-93
Priority MEDIUM 41
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the d…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00778 · Published 2025-08-14 · Partial fix · 17.6, 16.10 +3 CWE-829
Priority LOW 15
PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access.
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00262 · Published 2025-08-14 · Partial fix · 17.6, 16.10 +3 CWE-1230
