Red Hat Security Advisory

RHSA-2026:72274

postgresql:12 security update

Released 2026-09-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.s390x::postgresql:12 +47

Fixes 2 records

TI-2025-07975 CVE-2025-8714 · GHSA-6m5q-cc57-2mj6

PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client

MEDIUM 41

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the d…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00778 Published 2025-08-14 Partial fix · 17.6, 16.10 +3 CWE-829

TI-2026-15127 CVE-2026-18408 · GHSA-p745-282f-cxpr

PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client

MEDIUM 40

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00355 Published 2026-08-13 Partial fix · 18.6, 17.11 +3 CWE-829