Skip to content
OpenAdvisories
High ELSA-2025-15021 2 CVEs

Important: postgresql:13 security update (Oracle Linux 8)

Published Sep 2, 2025 · Updated Sep 2, 2025

Summary

pgaudit
[1.5.0-1]
- Update to version 1.5.0
Related: #1855776

pg_repack
[1.4.6-3]
- Release bump - enable gating

[1.4.6-2]
- Rebuild
- Resolves:#1954442

[1.4.6-1]
- Rebase to upstream release 1.4.6

[1.4.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.4.5-1]
- Initial packaging

postgres-decoderbufs
[0.10.0-2]
- Release bump for rebuild against libpq-12.1-3

* Wed Oct 09 2019 Patrik Novotny <panovotn@redhat.com - 0-10-0-1
- Initial release for upstream version 0.10.0

postgresql
[13.22-1]
- Update to 13.22

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 8 pg_repack 0:1.4.6-3.module+el8.9.0+90098+1560b6c2
Oracle Linux · 8 pgaudit 0:1.5.0-1.module+el8.9.0+90098+1560b6c2
Oracle Linux · 8 postgres-decoderbufs 0:0.10.0-2.module+el8.9.0+90098+1560b6c2
Oracle Linux · 8 postgresql 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-contrib 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-docs 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-plperl 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-plpython3 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-pltcl 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-server 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-server-devel 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-static 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-test 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-test-rpm-macros 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-upgrade 0:13.22-1.module+el8.10.0+90650+9f37c94f
Oracle Linux · 8 postgresql-upgrade-devel 0:13.22-1.module+el8.10.0+90650+9f37c94f

Vulnerabilities 2

  • High 8.8
    CVE-2025-8714 Public exploit

    PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client

    Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pg_dumpall…

  • High 8.8

    PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server

    Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpos…