Red Hat Security Advisory

RHSA-2025:15034

postgresql:12 security update

Released 2025-09-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.src::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.4.0+11288+c193d6d7.src::postgresql:12 +15

Fixes 2 records

TI-2025-07976 CVE-2025-8715 · GHSA-xh8r-9824-53cf

PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server

MEDIUM 41

Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump,…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00474 Published 2025-08-14 Partial fix · 17.6, 16.10 +3 CWE-93

TI-2025-07975 CVE-2025-8714 · GHSA-6m5q-cc57-2mj6

PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client

MEDIUM 41

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the d…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00778 Published 2025-08-14 Partial fix · 17.6, 16.10 +3 CWE-829