Red Hat Security Advisory

RHSA-2025:15115

postgresql:12 security update

Released 2025-09-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.s390x::postgresql:12 +47

Fixes 1 record

TI-2025-07976 CVE-2025-8715 · GHSA-xh8r-9824-53cf

PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server

MEDIUM 41

Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump,…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00474 Published 2025-08-14 Partial fix · 17.6, 16.10 +3 CWE-93