Skip to content
OpenAdvisories
High ELSA-2025-15022 2 CVEs

Important: postgresql:15 security update (Oracle Linux 8)

Published Sep 2, 2025 · Updated Sep 2, 2025

Summary

pgaudit
[1.7.0-1]
- Update to 1.7.0
- Support postgresql 15
- Related: #2128241

pg_repack
[1.4.8-1]
- Update to version 1.4.8
- Postgresql 15 is supported
- Related: #2128241

[1.4.6-4]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

postgres-decoderbufs
[1.9.7-1.Final]
- Iitial import for postgresql 15 stream
- Related: #2128241

[1.4.0-4.Final]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

[1.4.0-3.Final]
- Build jit based on what postgresql server does
Related: #1933048

[1.4.0-2.Final]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[1.4.0-1.Final]
- Update to new release 1.4.0

[1.1.0-0.6.Final]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.1.0-0.5.Final]
- Rebuilt for protobuf 3.14

[1.1.0-0.4.Final]
- Rebuilt for protobuf 3.13

[1.1.0-0.3.Final]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.1.0-0.2.Final]
- Rebuilt for protobuf 3.12

[1.1.0-0.1.Final]
- Update to 1.1.0.Final

[1.0.0-0.1.Beta3]
- Update to 1.0.0-Beta3
- Drop BR: postgis-devel

[0.10.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[0.10.0-1]
[0.9.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.9.5-1]
- Initial RPM packaging

postgresql
[15.14-1]
- Update to 15.14

Fixed packages 18

ReleasePackageFixed in
Oracle Linux · 8 pg_repack 0:1.4.8-1.module+el8.9.0+90110+d8a562d5
Oracle Linux · 8 pgaudit 0:1.7.0-1.module+el8.9.0+90110+d8a562d5
Oracle Linux · 8 postgres-decoderbufs 0:1.9.7-1.Final.module+el8.9.0+90110+d8a562d5
Oracle Linux · 8 postgresql 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-contrib 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-docs 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-plperl 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-plpython3 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-pltcl 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-private-devel 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-private-libs 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-server 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-server-devel 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-static 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-test 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-test-rpm-macros 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-upgrade 0:15.14-1.module+el8.10.0+90649+ea50904a
Oracle Linux · 8 postgresql-upgrade-devel 0:15.14-1.module+el8.10.0+90649+ea50904a

Vulnerabilities 2

  • High 8.8
    CVE-2025-8714 Public exploit

    PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client

    Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pg_dumpall…

  • High 8.8

    PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server

    Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpos…