Red Hat Security AdvisoryRHSA-2025:15021
postgresql:13 security update
Released 2025-09-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.s390x::postgresql:13 +47
Fixes 3 records
Priority MEDIUM 41
Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump,…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00474 · Published 2025-08-14 · Partial fix · 17.6, 16.10 +3 CWE-93
Priority MEDIUM 41
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the d…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00778 · Published 2025-08-14 · Partial fix · 17.6, 16.10 +3 CWE-829
Priority LOW 28
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00758 · Published 2025-05-08 · Partial fix · 17.5, 16.9 +3 CWE-126
