ALSA-2025:14878
ALSA-2025:14878 · Important: postgresql security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715) * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Affected products and versions
postgresql AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-contrib AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-docs AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-plperl AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-plpython3 AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-pltcl AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-private-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-private-libs AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-server AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-server-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-static AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-test AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-test-rpm-macros AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-upgrade AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
postgresql-upgrade-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 13.22-1.el9_6
Update to 13.22-1.el9_6
Original sources
- https://access.redhat.com/errata/RHSA-2025:14878
- https://access.redhat.com/security/cve/CVE-2025-8714
- https://access.redhat.com/security/cve/CVE-2025-8715
- https://bugzilla.redhat.com/2388551
- https://bugzilla.redhat.com/2388553
- https://errata.almalinux.org/9/ALSA-2025-14878.html
- https://osv.dev/vulnerability/ALSA-2025:14878